Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
File: Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft (raw, json)
Hash identifier: 5BN4hGEfNo1yDTNkJkoDAPUfS+PLscd5A20UaAcDxa8=
Subject key identifier: 76:75:1F:0E:E4:FC:34:53:96:08:30:D5:96:E4:D2:1A:4B:33:A5:FF
Authority key identifier: 0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C
Certificate issuer: /CN=0acf3dccea317e35e70541a48b2586a4d32bd94c
Certificate serial: 019EBE7F379D93277B1CEE44B9E0F72E699C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
Manifest number: 09D0
Signing time: Sat 13 Jun 2026 01:01:08 +0000
Manifest this update: Sat 13 Jun 2026 01:01:08 +0000
Manifest next update: Sun 14 Jun 2026 01:01:08 +0000
Files and hashes: 1: Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl (hash: fUuJOTcL7rAj3Gr6+MOBMUQmaeIlW2gyZicFCAIT748=)
2: ZVMWIA2gRCKHPJyp2BWSpGeeJhw.roa (hash: rWWFhgQdz68f3CP7zyhwG/M5s65BBuAVvNtPkXYPboQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:37:9d:93:27:7b:1c:ee:44:b9:e0:f7:2e:69:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0acf3dccea317e35e70541a48b2586a4d32bd94c
Validity
Not Before: Jun 13 01:01:08 2026 GMT
Not After : Jun 14 01:01:08 2026 GMT
Subject: CN=76751f0ee4fc3453960830d596e4d21a4b33a5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c2:ec:ba:cc:b3:ac:6b:21:a1:3b:a0:3c:47:
ae:51:9b:97:c7:3b:b8:88:f5:31:20:05:60:3e:8b:
51:19:8b:35:51:9c:6d:ed:af:f1:5e:47:d5:48:ea:
3a:ca:b7:80:d9:c6:72:b0:24:06:43:a7:67:9c:5c:
4a:7e:25:7e:c7:49:d0:bf:eb:75:f5:ab:a6:13:58:
0c:a4:33:7b:1d:79:ae:90:66:ec:7b:5a:9e:c8:af:
9b:18:dd:2e:98:57:f8:82:0b:dd:ff:47:c2:0d:04:
a7:f1:03:0e:6e:d3:d1:d7:43:68:0e:37:89:e1:9d:
a4:2c:8e:3a:41:d4:67:56:f1:c3:05:34:29:20:99:
92:3a:c7:82:b2:72:85:3a:1d:44:7b:71:97:b9:d9:
db:b4:93:f9:03:34:bf:43:71:10:dc:c3:c2:b3:fb:
50:b9:67:be:4a:3d:ff:d0:70:82:e8:31:f8:72:65:
d4:ab:60:93:4f:49:14:83:2f:18:9d:91:33:3c:91:
83:a4:ed:e8:dd:d8:4f:78:ad:38:db:f5:6c:0f:06:
69:34:7c:f7:aa:fe:67:01:cd:77:b5:37:1d:89:91:
66:8a:cb:0f:a5:78:38:08:ed:25:1a:44:30:14:6d:
35:66:dc:02:ec:2e:5c:51:02:bf:17:b7:4f:6f:77:
89:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:75:1F:0E:E4:FC:34:53:96:08:30:D5:96:E4:D2:1A:4B:33:A5:FF
X509v3 Authority Key Identifier:
keyid:0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:16:1d:26:82:19:00:91:8c:57:15:d9:f5:c4:69:80:6b:be:
52:1d:d6:0a:7c:f8:a1:67:b9:7b:db:b2:23:43:23:e4:da:25:
78:1b:20:5f:1f:07:a8:90:1a:96:3b:77:01:27:62:a1:33:2b:
45:3b:10:2b:e1:76:1d:10:89:41:56:5a:ea:15:7f:e5:e2:33:
92:bc:5d:45:6a:3a:95:a1:70:22:76:d5:ba:3b:e3:e4:03:87:
d3:22:83:bc:f0:37:d6:02:ab:6b:c5:ac:cc:21:28:6c:20:75:
ee:f6:c3:de:5b:a9:77:d1:a0:64:8a:0e:a0:b4:5c:52:4f:44:
62:18:53:77:e0:88:56:67:d4:c4:20:ad:24:7d:a4:11:35:50:
21:e7:5d:1d:20:5c:7c:05:6d:1e:a0:4b:0a:81:1a:7b:d2:2b:
ad:99:99:b2:10:18:13:d8:d4:7c:bd:7d:e0:7f:59:9d:82:85:
00:1d:4b:af:ae:a2:45:d7:29:8b:60:34:7f:9b:c5:10:69:e8:
54:06:a8:e1:00:bf:e3:28:58:9c:2b:9d:e1:a9:53:bb:40:d9:
ac:95:32:e2:6f:80:a9:6b:ad:1e:1d:eb:f8:6c:51:67:1f:4c:
fe:1c:6e:f3:51:b4:01:84:57:c7:00:38:98:6c:80:19:d8:c5:
b7:90:fd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:35:37 2026 by rpki-client