Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
File: CSU4hqAlCgTsab4Au_hDPC8BS3w.mft (raw, json)
Hash identifier: Jf06PXxZ10+GutYjjE25RVQ6kvFIi+Ntd4GPv5u/FdQ=
Subject key identifier: 86:7C:5D:6D:DF:EA:47:B2:FE:72:A3:32:B6:77:94:FE:0D:C7:B0:F4
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 01A08A55425ED6A76D2CF165663CC75B11BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
Manifest number: 1A52
Signing time: Thu 10 Sep 2026 08:00:38 +0000
Manifest this update: Thu 10 Sep 2026 08:00:38 +0000
Manifest next update: Fri 11 Sep 2026 08:00:38 +0000
Files and hashes: 1: 1D3XGuEQn9Eo498gEH4KY15UEy0.roa (hash: KfByO/UOYDGSRZuUArFURrgdPsxMkmj0LnL2B657g+A=)
2: 2jr96T6NWCWExh7kLrHI5diyCUE.roa (hash: Zge4KJnVPt8pB6ejzrNYi8em+mcBZDIbd6MDQo6I2B4=)
3: CSU4hqAlCgTsab4Au_hDPC8BS3w.crl (hash: Ou8vNEjsuW/vWEZEg+P0uueAhA8Bh4a6bU1UULds9wc=)
4: Ccc9zX-yLeQC6Y55SG5sw8NrowQ.roa (hash: pbSs2ZVDWPwNAeaOknwdNSMSjKf4eYnx2xPq9854z3Y=)
5: L_lurfVMTqwpO3u6xE9qRKV5Qgc.roa (hash: l23OrKr9WvvSQM+tVJnmi0UwpooxXlvEinD6ejP+N/U=)
6: s_YXgj5LokarWRSiqAhhdgl6EyM.roa (hash: 2h13MYfmgLEIvRCwD3qUKHQhONbRrWEsixQkMgsfF58=)
7: uE19GLaWOaL8Wf7ltXnaZzBUgx0.roa (hash: G46IsATki7ZM4CXurLt0QLBkG6vi6cJ45QU5pycBC94=)
8: wOPk17nv5KIiudN64aSMjj945cw.roa (hash: PusivWzV1D+Sz5sW5Ck+szJ+lL1X1qExgZ8AO7cPnS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:42:5e:d6:a7:6d:2c:f1:65:66:3c:c7:5b:11:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Sep 10 08:00:38 2026 GMT
Not After : Sep 11 08:00:38 2026 GMT
Subject: CN=867c5d6ddfea47b2fe72a332b67794fe0dc7b0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:b1:27:49:4f:4d:1b:7b:85:d4:2f:e7:c1:73:
98:be:dc:08:eb:af:26:57:c8:8b:03:ae:42:03:7d:
ab:e5:7b:c2:c1:1b:91:6e:04:7b:f8:a4:cc:34:f8:
31:54:75:10:89:59:0d:e1:be:d3:7d:e4:0d:44:e5:
01:26:c0:08:75:03:30:1f:90:b0:51:4e:f8:4b:e8:
6d:df:46:a4:06:db:eb:57:8a:1b:c3:a9:a7:cc:11:
b3:fa:51:88:76:49:ba:93:27:8f:57:c3:67:20:f5:
30:d0:5f:dd:d8:03:f0:ac:c7:19:2d:4a:16:43:77:
71:d1:07:15:a6:6c:58:cc:dc:21:58:14:af:1b:42:
df:c4:c3:13:44:66:8e:0e:84:ba:70:ab:10:45:bf:
81:83:a8:24:af:86:bf:7a:e3:d2:98:97:74:35:49:
49:bb:87:fb:e7:20:8c:5d:ef:fc:ec:ca:fe:6e:63:
04:a2:6d:52:9a:c2:14:3d:71:16:8f:11:67:63:67:
76:62:7b:aa:d8:09:d8:e2:4e:67:09:fd:d1:cb:6b:
c1:c8:b3:b4:ef:d9:60:47:4e:20:6b:ea:1c:bb:1b:
ab:9b:64:5b:fd:4c:73:8c:4b:fa:10:39:12:2e:14:
4b:3b:a2:86:19:59:d9:ba:51:c2:8c:d0:b4:3f:41:
5e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7C:5D:6D:DF:EA:47:B2:FE:72:A3:32:B6:77:94:FE:0D:C7:B0:F4
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:32:78:56:1a:c9:28:52:1e:be:5c:f7:72:fb:8d:03:28:a4:
f9:0c:3a:d5:3b:fc:7f:09:86:c4:f7:a5:37:e0:f4:c1:a6:91:
43:0e:57:ff:d0:63:64:42:2c:48:cb:07:1f:6a:fe:65:08:54:
fe:28:5c:e4:61:a8:a8:37:bd:2f:08:aa:7b:db:7b:9b:b9:c1:
d3:4e:8a:0d:6b:a4:81:ac:3d:a0:ca:41:f5:50:6d:ae:5f:41:
3d:5b:d8:97:05:4d:1d:ec:b2:db:ad:48:e3:a2:d6:62:08:a3:
11:f4:bd:80:0f:98:49:ff:2e:09:50:0a:05:2d:50:09:0a:93:
bd:63:5b:76:4d:8e:67:80:fb:7f:42:a9:29:82:33:79:bb:69:
20:4c:f8:44:dc:1e:90:45:63:c4:b8:1d:a4:23:eb:ed:a4:eb:
3b:b5:2d:4b:db:4f:8c:02:3c:2b:af:55:df:60:57:43:42:55:
9c:94:97:b2:33:b1:48:8d:52:83:20:d2:ef:42:d9:e3:a6:bd:
f6:95:ab:19:6c:b7:c7:2b:27:80:05:5f:b1:b8:85:68:1b:f9:
50:20:97:f7:c2:4e:c9:c2:a4:55:72:1f:0f:c2:ac:f9:9d:3a:
f2:4a:fe:b3:43:ae:60:12:c0:da:49:a7:34:88:80:a3:e1:29:
61:88:4f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:06:25 2026 by rpki-client