Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
File: cS-cs8KYsVC-t5CAN290verEOKw.mft (raw, json)
Hash identifier: vHNcbY2oui2Xvcn8KpUX1WXP2GqrHHjgKxb/cmonODs=
Subject key identifier: 9D:06:F9:06:9B:73:D1:E9:0B:65:B5:20:C3:C1:C2:37:EC:F5:B2:F8
Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
Certificate issuer: /CN=712f9cb3c298b150beb79080376f74bdeac438ac
Certificate serial: 019D98186CD7396AF5B312850F5112CC70FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
Manifest number: 18C7
Signing time: Thu 16 Apr 2026 21:00:30 +0000
Manifest this update: Thu 16 Apr 2026 21:00:30 +0000
Manifest next update: Fri 17 Apr 2026 21:00:30 +0000
Files and hashes: 1: 84wKpW8a2FdOFdtJH09XGOkEUps.roa (hash: 1qhPnlo4Dt7J0oeNCr3M9RW7SmJ0MpohWBFUgdLw/U4=)
2: 9-uYpBrZ0SnlXEdYG-rWZOkX4-8.roa (hash: ch9SwzgHwXntgNAkT37G/8PeEwHz84mvTnudFL4bbYg=)
3: a8fiimQdU18P-F2tOQH9sjS2Djw.asa (hash: SNczP7mStVed+rVQzNAM+CHW/D0tMUWtQ+EIBgCl2dM=)
4: cFDNySQq-BoAAus-f6QDofmomPs.asa (hash: bmD9h4TJUpSAXYuI/gTQnCZ438ljBruFVbyjbe3Styo=)
5: cS-cs8KYsVC-t5CAN290verEOKw.crl (hash: VTec0wK3/0KKxr73ah/Z1Miy6TYrv1lcnmQtuH/op4U=)
6: df4tfV0jAIZZKEaYQCM4AbSPAqg.roa (hash: dHoNYsRW1eGxyAi3gnD68do0NWTQc/BQpOK0JZnCoh4=)
7: g9Yn7ACDYVC8slU7jy3RutvpmLA.roa (hash: QstT1XItP19s81pUDHVgyYRJfqI7V21cNVai+M007RU=)
8: wW3ZYEDbinPYHk66ZkOwzFx6fGU.roa (hash: UTV9GkxKyIAZmik9JxS337j4Nl0XcYaJdhg8IjKhvU4=)
9: xYJNOiuy4j8LfXqPijvPDbsyKCs.roa (hash: XjFVGXZYnhKKZSPv2iOQnoaWZSCDkPQcxGHyVG/MCwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:6c:d7:39:6a:f5:b3:12:85:0f:51:12:cc:70:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac
Validity
Not Before: Apr 16 21:00:30 2026 GMT
Not After : Apr 17 21:00:30 2026 GMT
Subject: CN=9d06f9069b73d1e90b65b520c3c1c237ecf5b2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:98:81:33:6e:aa:4b:26:8f:c0:ab:df:bd:40:
c7:17:07:63:93:5f:af:16:ec:33:9c:7b:3c:b9:d9:
93:5d:cc:13:df:1b:bb:49:8a:95:63:a1:22:4c:4c:
f2:56:6c:0e:14:4c:38:84:29:a0:ca:14:06:e3:1b:
00:ea:b2:30:71:d1:0b:d4:76:55:86:1c:e0:84:55:
43:3e:cc:7e:ba:ee:16:4d:97:a9:7a:bd:49:6a:67:
26:d8:58:c0:05:b4:f5:fc:70:c6:66:d9:2e:60:f2:
3a:36:c6:fe:7b:0d:f3:16:bb:47:00:60:fa:26:3c:
e0:1e:8d:cf:f6:9e:ba:ab:f7:3f:12:5e:2f:d7:a0:
7f:e5:f1:1c:43:40:e6:c4:b7:1a:02:3d:bc:4c:e4:
4e:f0:03:2f:5d:1a:38:43:97:74:54:bf:30:17:4a:
c3:9e:0d:fb:b0:37:f9:1e:10:29:e5:4f:27:ae:3c:
1b:1f:69:19:bb:c9:44:fb:bb:cf:6c:84:2c:52:42:
af:89:7b:32:92:41:11:38:07:87:b4:83:a1:7c:49:
a7:9e:3e:76:45:5f:ef:be:9d:ca:86:4d:4d:cd:ed:
6f:6e:3b:c6:28:96:40:c9:39:18:72:9b:8e:9e:4f:
a6:37:b4:bc:a2:d2:c9:5b:ac:cc:53:6e:eb:07:0f:
3a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:06:F9:06:9B:73:D1:E9:0B:65:B5:20:C3:C1:C2:37:EC:F5:B2:F8
X509v3 Authority Key Identifier:
keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:28:ef:e3:82:fa:7b:f4:0f:23:54:45:f4:b7:de:66:74:d3:
9e:86:6a:1c:49:80:3b:15:71:f4:0f:04:dd:dc:73:8e:40:8d:
46:b6:65:76:ad:f1:ab:de:c1:a8:26:d7:2c:92:c6:36:f3:a6:
e9:cf:bb:c2:53:5f:94:90:a6:0b:cc:ab:47:08:9c:8b:4f:7c:
45:cb:17:0c:fb:ee:77:59:da:de:3f:7e:08:f5:62:84:8e:4f:
22:0c:08:d4:03:b3:96:d8:11:08:4b:1f:5e:03:8d:92:12:5a:
d3:f4:25:6c:cb:9b:d9:16:f3:55:e1:6c:65:54:b4:dc:87:a8:
a1:38:a2:6a:01:a4:43:fd:20:d7:db:3f:40:cb:58:3b:f6:0c:
99:50:92:2b:89:b3:6e:75:45:0a:79:6f:10:0f:92:d8:0f:53:
48:fe:fd:ec:c1:b8:b7:86:6a:59:3b:11:22:dd:6b:0f:7c:41:
04:37:8b:3a:20:f3:b9:83:59:e7:91:81:ec:f6:2f:de:a7:a0:
7f:12:d4:21:40:92:9f:0c:28:87:a6:02:b0:f2:3e:65:ab:07:
8d:79:9a:d9:a9:84:c1:18:18:e7:7a:57:6b:3f:94:be:d3:12:
97:f1:58:74:f2:b7:e3:45:e8:dc:1a:c9:2d:01:eb:f7:04:b6:
48:ab:4f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:45 2026 by rpki-client