Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
File: csKTdgpzQBjN0qB_HYvVTyffaAo.mft (raw, json)
Hash identifier: C8eI+Vuyta9GdMvG/uQ77MdjX44hcYXlCjOnLOB8JxU=
Subject key identifier: CB:FB:87:3D:F1:F0:7C:B9:A1:65:7C:79:23:8F:F4:38:32:4E:A4:0B
Authority key identifier: 72:C2:93:76:0A:73:40:18:CD:D2:A0:7F:1D:8B:D5:4F:27:DF:68:0A
Certificate issuer: /CN=72c293760a734018cdd2a07f1d8bd54f27df680a
Certificate serial: 019D9A3E571A46427CF475390C1EEC3EC339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
Manifest number: 11AF
Signing time: Fri 17 Apr 2026 07:01:09 +0000
Manifest this update: Fri 17 Apr 2026 07:01:09 +0000
Manifest next update: Sat 18 Apr 2026 07:01:09 +0000
Files and hashes: 1: csKTdgpzQBjN0qB_HYvVTyffaAo.crl (hash: +v17jGwlQMNvfnmvC23kt8a2h3ETFMhtxup4jCDL2Y0=)
2: q2qThfV9Ai5wiIn0c08uJZv3KrE.roa (hash: jiHXB6EKqhlURIcUG7IJCYAsgSe6xZGy7VNpUltYFZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:57:1a:46:42:7c:f4:75:39:0c:1e:ec:3e:c3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c293760a734018cdd2a07f1d8bd54f27df680a
Validity
Not Before: Apr 17 07:01:09 2026 GMT
Not After : Apr 18 07:01:09 2026 GMT
Subject: CN=cbfb873df1f07cb9a1657c79238ff438324ea40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2a:21:dc:c1:0f:f3:8d:4f:dd:d2:d6:5a:55:
93:ca:0c:80:ae:c8:1d:01:80:b1:bf:04:4f:7b:08:
d8:18:27:7b:e1:5a:33:31:f3:31:90:7f:2e:79:30:
ef:f8:dc:4b:17:d4:1a:eb:e0:f9:c3:c4:2d:4b:61:
63:c1:3f:ef:47:e3:fa:ec:af:15:de:c9:db:06:60:
9e:c3:d8:29:5e:b5:31:7d:ee:4d:c1:17:45:78:ab:
4c:a5:0b:a1:f7:e1:cc:fa:69:0a:18:fd:2e:15:0e:
ca:8f:e3:86:3a:a7:89:3b:29:e9:b6:87:79:40:10:
35:01:02:d0:ff:e9:b5:ae:2b:c0:43:32:69:48:d4:
85:b3:e0:d9:df:57:47:34:6a:20:40:bf:60:65:64:
31:e8:eb:aa:97:aa:4a:61:52:75:10:60:9d:15:ad:
45:f5:90:fa:df:45:38:2c:3b:2d:ac:09:2c:8c:1c:
1c:94:23:a7:15:29:c1:99:17:f2:11:7a:56:82:9a:
97:3c:74:c0:f0:69:04:f1:22:ac:e7:23:7d:11:00:
41:6c:b6:71:cd:19:76:38:fb:c9:7d:bb:93:e6:62:
1c:f4:34:69:ee:03:71:49:e2:65:b2:61:4e:ab:f8:
34:2b:58:7c:5c:0d:d5:6e:e9:62:4e:81:df:95:8f:
09:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FB:87:3D:F1:F0:7C:B9:A1:65:7C:79:23:8F:F4:38:32:4E:A4:0B
X509v3 Authority Key Identifier:
keyid:72:C2:93:76:0A:73:40:18:CD:D2:A0:7F:1D:8B:D5:4F:27:DF:68:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fc:6d:c7:42:a1:32:6e:a5:69:d9:63:2a:f8:c7:ff:7b:24:
dc:7b:18:59:9b:ff:fe:6f:fb:08:f1:03:84:35:35:ac:16:85:
98:9c:fb:8b:43:75:05:c5:6e:96:2f:43:4f:89:a8:95:59:6c:
69:ba:c3:27:6c:c5:c7:00:41:4c:3b:e0:05:87:0c:ac:96:cb:
55:83:7c:5c:be:24:b7:72:bc:1d:fd:00:35:2d:07:b5:c1:68:
b8:bc:ff:11:d3:4d:b4:0c:7a:bd:ef:42:54:ae:77:ad:67:64:
a9:34:09:8e:e5:ff:4c:77:9e:09:97:40:93:ff:dc:01:22:45:
c4:fd:e2:af:2d:63:de:0b:3b:b1:b2:75:4b:ad:9b:57:84:fe:
ba:c7:a5:d2:ea:28:43:b7:f8:84:5b:06:ff:31:a7:ea:58:4e:
5f:b3:fb:82:12:56:d8:a0:df:0d:1f:95:ce:18:84:38:23:4c:
ea:62:f4:4a:91:75:7d:9c:c5:7f:71:82:49:80:67:6f:f3:c3:
40:04:81:a1:60:84:9f:89:d1:27:4b:00:3f:b4:e7:a4:f1:d5:
1f:97:0d:ea:d2:af:ba:9b:26:f8:03:5d:df:05:a2:44:bd:bc:
f6:bb:50:8c:52:3d:9e:eb:e7:3d:76:7b:ba:24:6b:40:04:90:
e2:e9:30:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:15:29 2026 by rpki-client