Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
File: csKTdgpzQBjN0qB_HYvVTyffaAo.mft (raw, json)
Hash identifier: lFd22zxbcVUff/gYMS+Vt8n3xHaLTeAIOEGSPKGdAMc=
Subject key identifier: 7F:36:3A:3A:96:19:54:93:75:BB:AF:E9:80:02:C8:9C:38:1D:99:09
Authority key identifier: 72:C2:93:76:0A:73:40:18:CD:D2:A0:7F:1D:8B:D5:4F:27:DF:68:0A
Certificate issuer: /CN=72c293760a734018cdd2a07f1d8bd54f27df680a
Certificate serial: 019CAAC693D4A810CD249DA2B6419405C993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
Manifest number: 1133
Signing time: Sun 01 Mar 2026 19:01:06 +0000
Manifest this update: Sun 01 Mar 2026 19:01:06 +0000
Manifest next update: Mon 02 Mar 2026 19:01:06 +0000
Files and hashes: 1: csKTdgpzQBjN0qB_HYvVTyffaAo.crl (hash: rvcZrmOdvOAe5BwOvMi6FJrb65oPJH3f61IfhS4NM+Y=)
2: q2qThfV9Ai5wiIn0c08uJZv3KrE.roa (hash: jiHXB6EKqhlURIcUG7IJCYAsgSe6xZGy7VNpUltYFZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:93:d4:a8:10:cd:24:9d:a2:b6:41:94:05:c9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c293760a734018cdd2a07f1d8bd54f27df680a
Validity
Not Before: Mar 1 19:01:06 2026 GMT
Not After : Mar 2 19:01:06 2026 GMT
Subject: CN=7f363a3a9619549375bbafe98002c89c381d9909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:31:d7:a1:f5:2f:b6:9d:b2:69:3d:3c:48:0f:
4c:37:5a:4a:93:24:f0:95:8a:48:53:cc:99:59:c1:
3a:62:92:c8:25:26:e9:b8:d3:c9:9e:37:0c:66:0a:
ce:9f:19:97:03:9c:6c:70:36:5c:f1:d7:fe:67:00:
93:8a:36:c5:5c:4a:5d:48:23:f4:9a:6d:b9:69:1e:
ae:93:9c:f6:7a:f0:a3:e7:92:ed:45:95:50:18:fa:
5b:5b:f3:65:08:b7:2d:f9:1d:fd:28:cb:a8:eb:e4:
26:7a:76:88:56:3d:77:af:ab:11:1c:b5:3e:d1:71:
fe:f9:ff:5b:13:33:c3:ae:ab:76:0a:64:cb:46:e9:
86:7a:21:e5:79:e7:fe:eb:b3:62:a9:66:8e:92:0f:
5d:0e:99:39:e4:dd:b8:dc:d6:9f:bc:d3:88:ed:06:
33:fa:5f:32:61:98:c1:87:0e:39:58:8a:6f:e2:37:
41:75:de:80:73:e9:80:01:67:9a:f9:3c:72:ac:73:
16:95:7b:6b:51:9b:6e:2c:20:a3:a6:11:7c:e4:8b:
12:29:3e:15:6f:4a:d0:2d:8c:3a:d2:5c:03:87:46:
54:14:6f:36:9d:01:d0:9a:52:5f:74:ac:02:84:ce:
ca:f2:7e:40:4c:97:03:ef:fe:85:3e:0c:0f:69:eb:
74:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:36:3A:3A:96:19:54:93:75:BB:AF:E9:80:02:C8:9C:38:1D:99:09
X509v3 Authority Key Identifier:
keyid:72:C2:93:76:0A:73:40:18:CD:D2:A0:7F:1D:8B:D5:4F:27:DF:68:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:cd:4e:6a:6f:db:08:39:c9:3e:b0:3d:fa:85:cf:33:98:55:
fa:5d:30:23:a3:02:05:54:bf:bc:55:3d:de:14:c0:eb:e4:46:
66:ad:4d:e9:be:2c:18:08:f0:35:1b:49:bc:17:e9:1e:ab:bb:
5e:d4:84:45:a5:ab:0d:a7:39:44:91:e7:60:e0:a4:2a:4d:0e:
55:e2:86:f2:06:d1:61:e0:df:98:ae:f9:0c:33:ff:8c:a8:73:
6f:55:ef:38:41:38:d8:a6:5f:7a:f3:5d:eb:89:0d:ad:06:fa:
99:7d:1b:f0:b1:7c:45:fb:11:ab:00:f9:cd:3c:77:97:d5:7e:
4d:0d:c4:a6:7b:45:17:15:80:85:e0:c0:92:9b:c0:1e:24:2c:
b3:52:1a:28:cb:c3:06:a1:a3:52:0f:b3:47:06:51:4d:75:68:
c6:7f:93:3f:57:8f:61:0f:21:8d:08:b2:ec:59:b7:17:cd:79:
5c:49:62:ea:ef:bc:f1:f2:c4:eb:3e:81:8b:0b:eb:ba:15:47:
8d:0d:60:fb:22:c4:c2:82:3d:52:c7:97:76:3c:b2:e5:fb:6f:
03:06:a1:f1:9a:25:9a:ca:16:f2:b8:a2:4a:4a:25:d2:68:cf:
1c:a1:8b:7e:ae:16:fe:ac:a3:b0:e0:de:29:d5:26:44:bb:14:
50:2d:12:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:28:56 2026 by rpki-client