Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
File: CASs5pRvtwG7LEXjCsr-pm2sL3o.mft (raw, json)
Hash identifier: j4EOV5b31ejjbs9XnFgPRSW1cd+D8MphdvncGWYxoso=
Subject key identifier: D1:CD:8F:74:F7:24:08:4B:31:3A:70:7F:70:AD:3F:61:71:FF:28:A5
Authority key identifier: 08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
Certificate issuer: /CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Certificate serial: 019E30051024ACA3BCE9385206DECDC8FFAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
Manifest number: 0A0C
Signing time: Sat 16 May 2026 09:01:38 +0000
Manifest this update: Sat 16 May 2026 09:01:38 +0000
Manifest next update: Sun 17 May 2026 09:01:38 +0000
Files and hashes: 1: CASs5pRvtwG7LEXjCsr-pm2sL3o.crl (hash: 4qLgZD6RnNZOiOpoboDdNO0Csc2FsVyUlZVDYoDhR4w=)
2: jUi6SuFHxWUcf3BLcRXfDSJcijA.roa (hash: j8KVEbuo6sxSwDOmodToJ+V3aOkB4CrJpEr50CscFoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:10:24:ac:a3:bc:e9:38:52:06:de:cd:c8:ff:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Validity
Not Before: May 16 09:01:38 2026 GMT
Not After : May 17 09:01:38 2026 GMT
Subject: CN=d1cd8f74f724084b313a707f70ad3f6171ff28a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:70:00:70:ed:67:c9:79:97:2b:88:aa:4a:58:
67:97:ad:65:9d:f9:2b:56:3f:59:10:72:94:70:73:
be:da:d8:c7:36:50:d7:1a:63:0b:de:5c:49:ab:ac:
fa:89:f3:bd:8e:e7:11:d9:53:b0:51:ca:dd:47:8c:
db:ea:de:6c:8e:4b:c8:a2:53:41:37:64:f4:1c:56:
1e:70:83:ee:07:83:12:75:d5:a3:41:97:70:de:72:
49:28:61:b2:b8:23:3a:4a:e7:a7:b4:57:71:fa:86:
07:a5:b1:5d:37:cf:a2:2b:6c:03:76:22:29:83:e7:
6c:ac:6a:3a:e4:76:8e:c7:71:19:3e:02:5d:94:ce:
ba:ae:cc:e1:a7:75:af:73:19:5b:fe:da:d8:eb:64:
12:0a:6e:46:50:20:df:b2:32:84:b9:e7:11:93:95:
56:43:69:fd:0f:d1:b7:41:6e:b5:3b:33:8f:fd:d3:
ed:cd:20:00:bf:80:35:4e:98:84:67:68:e1:32:46:
1b:79:56:70:ad:3d:2b:00:8b:3c:09:fd:fd:82:cb:
f3:e5:b2:1c:a7:00:93:38:f7:62:a4:cb:dd:e2:70:
d8:6b:45:e8:11:bc:00:fb:68:1b:50:8a:5f:34:fe:
26:c9:ec:84:68:24:41:4b:f7:62:52:33:db:11:4b:
05:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CD:8F:74:F7:24:08:4B:31:3A:70:7F:70:AD:3F:61:71:FF:28:A5
X509v3 Authority Key Identifier:
keyid:08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f7:44:ad:bb:e1:3a:e9:59:b4:5c:d7:1d:a6:9b:01:fc:e8:
b6:ec:9e:5e:ab:79:40:45:a7:9d:83:80:1d:ee:91:4f:d7:ee:
9b:63:6c:8f:a6:cb:90:33:b8:52:4b:32:99:da:86:c4:13:c2:
3a:dd:b6:ae:23:fa:18:e2:06:1e:b8:f7:22:5d:37:cd:69:93:
9b:12:6e:20:d4:70:e4:3c:eb:d1:72:56:6e:5e:0e:6f:24:16:
e4:e6:eb:a6:65:d0:4f:aa:93:43:29:6a:e2:8b:f3:4e:e3:c0:
07:5f:b2:7c:7c:de:c6:0a:d2:d7:8d:92:8b:df:0e:f6:56:89:
99:82:bd:17:9a:ad:43:a7:12:f2:8e:17:e5:ad:b2:bb:d0:40:
a1:b2:5e:33:1d:0d:48:f3:e3:bf:d5:d0:0c:66:91:c1:7a:23:
92:05:08:2b:10:65:08:c5:00:a5:19:56:83:c2:20:38:72:e8:
75:cd:3b:4b:08:4b:19:9e:08:64:17:78:af:22:24:ad:29:6a:
58:b1:a5:76:94:8b:8f:6a:15:a4:e6:15:2f:0e:56:bc:56:ca:
be:6f:f3:e2:cd:b4:9f:df:d1:86:8e:c9:ff:35:3b:ab:28:ee:
ad:cc:9b:1a:51:88:e4:96:e8:79:e5:e3:96:3d:5a:fb:a8:e4:
f6:73:c4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:37:41 2026 by rpki-client