Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
File: CASs5pRvtwG7LEXjCsr-pm2sL3o.mft (raw, json)
Hash identifier: L1pPQKLmyXWt/Q/iy3QdqbO4+oMxMfutm/Lx/wHjIrg=
Subject key identifier: 2D:13:BA:B3:FF:26:C4:94:C1:65:0E:21:67:BA:FD:68:2B:E7:E1:B8
Authority key identifier: 08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
Certificate issuer: /CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Certificate serial: 019F17C32EC17260DC22526C469351DF189F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
Manifest number: 0A84
Signing time: Tue 30 Jun 2026 09:01:35 +0000
Manifest this update: Tue 30 Jun 2026 09:01:35 +0000
Manifest next update: Wed 01 Jul 2026 09:01:35 +0000
Files and hashes: 1: CASs5pRvtwG7LEXjCsr-pm2sL3o.crl (hash: KXxozHOa5KjmpmGF+26+cfVK2xc9NOL/CnDbkNvjWzw=)
2: jUi6SuFHxWUcf3BLcRXfDSJcijA.roa (hash: j8KVEbuo6sxSwDOmodToJ+V3aOkB4CrJpEr50CscFoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:2e:c1:72:60:dc:22:52:6c:46:93:51:df:18:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Validity
Not Before: Jun 30 09:01:35 2026 GMT
Not After : Jul 1 09:01:35 2026 GMT
Subject: CN=2d13bab3ff26c494c1650e2167bafd682be7e1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e3:ee:99:bc:2b:28:7b:41:e2:7d:5a:f3:b2:
d2:e5:18:c7:ad:73:2d:f5:ec:e1:4f:ab:7e:17:a0:
7c:7b:1a:e1:19:a1:f9:da:2e:8e:a6:81:45:33:a2:
b7:2a:56:5f:8e:a8:2f:3b:74:30:60:e8:9a:74:e8:
e8:18:60:1d:a2:37:b4:ad:75:04:6e:05:14:7e:59:
a2:58:53:9e:47:81:03:de:52:b5:fd:21:e1:d6:d6:
bd:fa:1e:38:bc:2c:1c:dd:bf:26:2e:76:f9:2a:c8:
85:be:33:ae:50:5e:d0:a8:8d:cb:36:a0:0d:da:fe:
73:fc:c5:c0:87:3c:b1:0c:6d:8c:e8:0a:c9:9c:eb:
65:67:e9:fc:d5:cf:1b:4a:e3:d3:a0:5e:67:97:96:
02:50:53:18:16:9f:a3:0f:41:68:52:4b:81:f6:47:
02:4a:49:a5:9b:52:05:58:67:24:3b:ca:fe:01:79:
38:c9:26:42:e1:3f:b7:36:b4:7b:7f:76:c3:c8:cc:
42:8d:b2:69:6b:07:63:18:1d:fd:c9:67:b6:33:99:
34:fa:6a:65:4e:b0:03:91:2f:d4:6d:8d:9b:bd:c5:
ae:dc:2e:68:5e:e0:db:ec:e9:14:c2:9e:1f:a6:f3:
ae:4b:b1:0f:20:cf:86:ab:82:e9:b0:39:c0:20:87:
7f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:13:BA:B3:FF:26:C4:94:C1:65:0E:21:67:BA:FD:68:2B:E7:E1:B8
X509v3 Authority Key Identifier:
keyid:08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:c9:2f:5e:2c:ca:bf:b6:bf:0e:a0:cf:5d:88:b6:5b:9e:b6:
21:b3:dd:6e:de:36:25:c7:4e:c6:6d:07:eb:f6:5c:1e:dd:82:
36:f8:55:4f:6b:b9:e0:5b:ba:70:1d:f4:fd:ab:9f:e6:98:6e:
86:71:43:5f:e8:2e:b3:ff:29:01:9e:fa:57:76:7b:89:96:71:
ae:d2:94:82:d8:36:95:f4:fd:31:40:9a:8d:77:dd:82:15:85:
24:c7:96:39:02:3e:89:5e:57:50:a8:86:9f:2c:31:cc:66:81:
98:97:1d:ea:86:1a:69:35:07:69:4b:7b:c8:52:44:b8:76:93:
7c:04:43:ab:b5:53:a5:f3:b7:33:76:0a:b0:27:f9:0f:37:e4:
e0:d0:79:75:a1:b8:78:70:8d:59:ec:83:e4:21:80:22:d2:43:
24:cb:69:3a:85:d9:c6:d7:26:68:22:c9:9e:bd:7f:db:2a:6d:
ce:21:36:a5:d3:c2:6a:00:aa:87:d9:dd:c1:16:ec:18:ee:28:
bc:cc:9e:33:7e:d7:13:46:0b:1a:69:78:cc:d6:c3:89:46:e9:
a4:12:de:ef:67:97:4d:5e:5a:73:a2:ad:d5:1b:87:62:75:22:
7e:00:a7:d2:bc:7f:6c:3e:e1:5b:f2:db:d9:b9:c8:6b:e2:de:
66:c9:33:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:12:11 2026 by rpki-client