Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
File: CSU4hqAlCgTsab4Au_hDPC8BS3w.mft (raw, json)
Hash identifier: BuIO9ykQJHGY8n96t+iHylFDLO/0wdh3yPtVG2lPycg=
Subject key identifier: D1:D9:14:54:88:D1:97:9F:46:15:9A:3A:86:B7:C2:03:E0:90:DA:87
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 019FA2977876740BA278735C1D4AC8562B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
Manifest number: 19DA
Signing time: Mon 27 Jul 2026 08:01:03 +0000
Manifest this update: Mon 27 Jul 2026 08:01:03 +0000
Manifest next update: Tue 28 Jul 2026 08:01:03 +0000
Files and hashes: 1: 1D3XGuEQn9Eo498gEH4KY15UEy0.roa (hash: KfByO/UOYDGSRZuUArFURrgdPsxMkmj0LnL2B657g+A=)
2: 2jr96T6NWCWExh7kLrHI5diyCUE.roa (hash: Zge4KJnVPt8pB6ejzrNYi8em+mcBZDIbd6MDQo6I2B4=)
3: CSU4hqAlCgTsab4Au_hDPC8BS3w.crl (hash: XF/EtwWBpSeJKRdGN1aFd8xfQqoVHow3Y2MhaAACBkA=)
4: Ccc9zX-yLeQC6Y55SG5sw8NrowQ.roa (hash: pbSs2ZVDWPwNAeaOknwdNSMSjKf4eYnx2xPq9854z3Y=)
5: L_lurfVMTqwpO3u6xE9qRKV5Qgc.roa (hash: l23OrKr9WvvSQM+tVJnmi0UwpooxXlvEinD6ejP+N/U=)
6: s_YXgj5LokarWRSiqAhhdgl6EyM.roa (hash: 2h13MYfmgLEIvRCwD3qUKHQhONbRrWEsixQkMgsfF58=)
7: uE19GLaWOaL8Wf7ltXnaZzBUgx0.roa (hash: G46IsATki7ZM4CXurLt0QLBkG6vi6cJ45QU5pycBC94=)
8: wOPk17nv5KIiudN64aSMjj945cw.roa (hash: PusivWzV1D+Sz5sW5Ck+szJ+lL1X1qExgZ8AO7cPnS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:78:76:74:0b:a2:78:73:5c:1d:4a:c8:56:2b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Jul 27 08:01:03 2026 GMT
Not After : Jul 28 08:01:03 2026 GMT
Subject: CN=d1d9145488d1979f46159a3a86b7c203e090da87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:96:21:ec:0f:58:e6:6b:1c:1e:da:6d:ed:66:
4f:62:12:5e:2d:93:a0:ad:bb:6d:f6:de:b6:67:97:
77:ec:02:35:cd:47:5d:d3:e4:d6:8e:e5:9f:51:2d:
ff:cb:9f:ff:1f:d9:04:86:35:ef:bb:95:16:f1:50:
02:49:9b:b9:a1:5c:22:39:cc:97:37:c4:7f:3f:87:
ea:4c:cf:4c:95:68:8f:f5:f9:2a:03:17:cf:a3:fd:
07:4e:6d:ee:b7:4a:15:f7:49:89:99:3e:dd:68:1a:
12:c6:64:86:c4:64:45:71:1f:79:3d:23:6a:db:0b:
18:de:b3:0a:af:69:7a:4f:59:a7:c6:34:f0:69:7f:
34:01:34:05:28:27:f5:2e:37:24:54:a3:cd:15:08:
82:7e:5c:cf:af:6a:f8:dc:7b:9c:69:1a:d5:5d:9e:
21:a5:43:6a:12:62:01:57:2e:9a:7c:18:bd:9a:99:
c3:5e:d5:e0:d3:1a:86:1d:f0:e6:58:f2:09:fd:a7:
92:cd:2b:f9:4b:1d:05:c5:12:c6:64:93:a1:fd:6e:
fe:81:e1:38:ed:8d:69:15:dc:b6:fd:0e:5a:9a:33:
16:89:78:5a:de:0c:50:2b:a5:4d:c9:2e:ea:fb:94:
3d:89:ab:84:d5:84:45:78:ef:34:f8:41:b0:38:85:
3d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D9:14:54:88:D1:97:9F:46:15:9A:3A:86:B7:C2:03:E0:90:DA:87
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d0:12:8f:b6:e2:4e:92:2c:fb:5f:29:3e:45:90:2a:12:2a:
23:ac:8f:03:d5:50:87:c6:df:53:32:d7:0a:42:6b:42:cc:2b:
dd:b6:99:ec:e9:eb:72:5b:ff:f2:bb:53:a3:c9:dc:63:df:e3:
cf:32:e5:49:d3:94:1f:3e:82:c9:ab:7d:e4:7e:fe:40:ce:c9:
c0:bb:64:95:28:3d:25:ed:9a:2a:77:b9:4b:bc:ea:9d:fc:13:
38:bd:d3:f0:85:18:ce:43:aa:16:68:39:56:86:41:41:94:21:
16:1e:0c:e5:83:58:40:5e:2f:01:d9:b3:d3:5b:35:80:0b:37:
17:2a:65:dd:98:f6:ed:11:9e:1f:f7:cd:26:4c:46:ae:84:bc:
90:9d:39:55:99:a8:1a:9d:3e:07:08:c8:59:de:32:a4:a9:71:
31:03:a0:63:5b:59:08:a9:8f:26:1c:a9:66:e9:a5:ac:79:c9:
0f:02:37:fe:b4:f5:5f:93:f7:77:75:f3:5e:cf:51:00:be:fd:
f4:c9:82:14:1a:85:10:73:9c:fa:51:c2:ec:4f:0f:3f:65:db:
f6:ba:46:05:39:e4:56:10:c4:54:54:ea:6d:4f:a4:c9:f8:9e:
8d:1a:78:fe:66:ee:a1:15:d3:39:79:ef:dc:d8:0d:9e:ab:30:
05:3f:b9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:25:58 2026 by rpki-client