Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
File: CASs5pRvtwG7LEXjCsr-pm2sL3o.mft (raw, json)
Hash identifier: Ki8R27P1qMYxGJGIoZpEd5SpXBUfMYKk5fnNuO+dzGE=
Subject key identifier: A3:69:60:42:6B:25:35:E4:F7:14:5B:3D:A4:DB:62:93:6A:3C:D7:5F
Authority key identifier: 08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
Certificate issuer: /CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Certificate serial: 019D38D3BD37DC5DF4E31DACE45AF8013DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
Manifest number: 098C
Signing time: Sun 29 Mar 2026 09:01:33 +0000
Manifest this update: Sun 29 Mar 2026 09:01:33 +0000
Manifest next update: Mon 30 Mar 2026 09:01:33 +0000
Files and hashes: 1: CASs5pRvtwG7LEXjCsr-pm2sL3o.crl (hash: HjsCtZLnYXtdzlxOQcnN8/urJl9Z1cO/qhzP1p/AfbE=)
2: jUi6SuFHxWUcf3BLcRXfDSJcijA.roa (hash: j8KVEbuo6sxSwDOmodToJ+V3aOkB4CrJpEr50CscFoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:bd:37:dc:5d:f4:e3:1d:ac:e4:5a:f8:01:3d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Validity
Not Before: Mar 29 09:01:33 2026 GMT
Not After : Mar 30 09:01:33 2026 GMT
Subject: CN=a36960426b2535e4f7145b3da4db62936a3cd75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:a4:34:1d:42:0c:de:52:38:7d:c2:3c:3c:
3a:e2:d0:14:de:b4:33:37:51:85:19:b6:a6:f0:26:
be:40:93:ef:98:aa:5d:d7:a1:30:63:13:5d:15:1a:
9e:11:a6:b6:86:e9:82:1b:60:e0:45:7f:eb:cd:dc:
ed:cf:45:06:9c:4c:29:e1:16:0f:37:a4:e0:da:87:
09:53:0d:d9:39:37:69:29:f4:9f:a4:47:ec:96:0c:
fc:81:e3:ba:a5:2a:c1:c2:98:1d:34:4b:4d:b7:f9:
9e:f6:60:ef:34:48:3d:14:6d:24:f3:92:27:0a:cc:
d9:56:51:18:7e:ce:8c:7d:a3:83:89:3a:25:66:27:
29:47:b6:74:4f:53:8d:1e:4d:ec:be:58:62:f4:81:
a9:a8:21:34:3b:f7:9c:31:df:5a:04:72:b3:99:88:
1a:60:f2:30:54:27:4f:d9:b7:5b:df:b0:15:e7:da:
59:27:3b:9e:c3:3d:e1:98:20:48:ba:a6:23:91:25:
e9:30:8c:ac:c1:8c:4a:1d:02:c5:21:1b:61:64:f6:
87:ab:31:10:39:99:6f:66:aa:75:2d:2e:3b:df:41:
b3:1b:ce:19:48:dc:e1:6b:e9:76:c4:52:73:db:73:
05:43:a4:2f:86:ed:8b:53:ae:99:3e:f6:18:d2:36:
04:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:69:60:42:6B:25:35:E4:F7:14:5B:3D:A4:DB:62:93:6A:3C:D7:5F
X509v3 Authority Key Identifier:
keyid:08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ea:95:83:4e:81:af:02:07:3b:ff:79:f2:92:02:da:64:98:
b9:42:0d:d8:a4:bc:00:80:11:6a:ce:78:47:a3:b1:57:bf:b8:
ec:9e:17:25:eb:49:e0:bf:75:ec:4a:55:cb:ac:52:9f:3d:f8:
4b:20:a3:8b:50:bd:37:a6:37:ab:13:28:64:46:18:52:22:fa:
27:6e:3a:4c:52:36:16:0b:63:6d:02:57:86:df:b7:2f:02:a2:
cc:4f:24:48:66:84:f4:0a:ba:4c:cb:bd:25:05:6f:ea:a6:93:
62:77:85:e4:bd:ca:43:d0:40:cd:d5:b7:c4:6a:d3:e7:4b:33:
5e:99:73:65:77:a7:2c:e3:1b:10:cb:42:37:eb:1e:e5:67:0f:
1f:0d:2d:59:ca:0f:6e:aa:36:3e:7e:81:e0:9a:5e:38:92:d4:
bd:d8:34:cd:e3:03:2e:19:58:37:2d:4e:b7:30:fe:cb:c2:65:
e8:50:97:c8:31:d9:0d:3e:59:da:07:61:68:d3:87:28:5f:b9:
d9:ab:b6:4e:9f:a7:22:61:3c:97:e3:be:4d:b5:e5:19:42:b0:
3e:26:a7:05:60:e6:3a:64:c0:85:02:a0:a4:fc:a7:61:5a:01:
2e:0a:ca:8a:18:85:bb:95:84:4f:bd:66:11:69:27:52:b1:9f:
a9:e8:23:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:35 2026 by rpki-client