Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
File: CSU4hqAlCgTsab4Au_hDPC8BS3w.mft (raw, json)
Hash identifier: srA/gOus/Z/jw4usu1O9+mn0fwe+2ZUoWoZRD/8NsWc=
Subject key identifier: 4B:AE:63:6A:42:8A:F7:DB:17:73:63:05:B0:54:CC:B6:5A:9F:91:16
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 019DCE9952CADB2BFCCFB48543CAA43D96A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
Manifest number: 18E5
Signing time: Mon 27 Apr 2026 11:00:47 +0000
Manifest this update: Mon 27 Apr 2026 11:00:47 +0000
Manifest next update: Tue 28 Apr 2026 11:00:47 +0000
Files and hashes: 1: 1D3XGuEQn9Eo498gEH4KY15UEy0.roa (hash: KfByO/UOYDGSRZuUArFURrgdPsxMkmj0LnL2B657g+A=)
2: CSU4hqAlCgTsab4Au_hDPC8BS3w.crl (hash: /QFj7o9QZ+B2yjdIh4QS+QJrDHRbbuvcetcnm80r/0M=)
3: Ccc9zX-yLeQC6Y55SG5sw8NrowQ.roa (hash: pbSs2ZVDWPwNAeaOknwdNSMSjKf4eYnx2xPq9854z3Y=)
4: F6HBhMcBbL9T-2q5JsBwJdD4MJY.roa (hash: JxKTOtTPWfWfAAoHri0onXnZQVwputgAWxySJSE326Q=)
5: ZzhGs3xeuqjtegogr3JbD8EGy8A.roa (hash: QzKiuA6J4PH51Dtd4/mrQUF28CyQcdY+pEYCB8jZjMg=)
6: wOPk17nv5KIiudN64aSMjj945cw.roa (hash: PusivWzV1D+Sz5sW5Ck+szJ+lL1X1qExgZ8AO7cPnS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:52:ca:db:2b:fc:cf:b4:85:43:ca:a4:3d:96:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Apr 27 11:00:47 2026 GMT
Not After : Apr 28 11:00:47 2026 GMT
Subject: CN=4bae636a428af7db17736305b054ccb65a9f9116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:5f:b7:c5:1b:ed:7a:42:20:1e:18:2c:71:
b5:19:0e:14:76:14:d1:cf:9d:10:f7:b8:a7:c3:2e:
5e:f5:e5:f0:60:5d:be:26:b3:38:3f:ce:0d:d1:c6:
9d:38:b1:c3:2a:75:d4:78:8a:68:fa:5d:6d:09:3c:
9c:30:41:6a:82:dd:85:ca:ec:35:45:2c:98:4d:f0:
98:e9:8a:bd:2d:a1:11:c3:be:b3:3b:44:d2:3c:91:
f0:c8:79:69:e7:f7:7a:63:60:0a:4f:ac:ab:4e:20:
e6:82:b3:60:27:fa:e6:f1:b9:9b:65:b9:28:c9:8f:
92:2e:c2:71:36:c8:1b:55:9a:38:f1:0f:0f:97:2a:
f0:fd:27:c2:15:ab:33:1c:45:9b:b8:b5:46:29:6d:
14:35:d4:02:5e:60:27:46:28:81:be:71:a5:62:e9:
68:2c:24:ba:3d:5e:c6:9d:47:8a:4f:fb:10:eb:ae:
fc:fe:4a:60:03:4a:ee:93:61:bd:92:a9:df:17:9a:
b4:3c:1f:7a:15:18:6c:b5:58:57:5e:63:9f:01:08:
a5:b5:a2:51:10:da:c9:f1:2c:e0:bf:8b:b6:50:f5:
86:fb:4c:71:08:1a:7e:34:e0:a9:4e:56:6c:fc:60:
e6:81:30:16:24:29:40:24:ab:59:ea:47:e5:8f:9c:
d7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AE:63:6A:42:8A:F7:DB:17:73:63:05:B0:54:CC:B6:5A:9F:91:16
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6a:42:6b:c6:a1:fd:23:5e:03:cd:bb:30:4f:e3:a5:e9:62:
e3:ba:9d:71:a4:e0:1d:1d:84:4c:ca:a3:ac:a4:4c:7a:4f:d2:
af:21:22:b8:fc:ac:d4:08:66:db:4e:2e:0d:dd:19:8f:32:a6:
6d:1d:eb:17:e5:06:b6:08:91:35:c1:56:33:6f:82:6b:e6:62:
fc:e9:7c:7a:8e:45:1a:cb:f3:c1:cc:2c:09:e3:fc:ad:45:c3:
84:3b:10:f5:a9:41:21:93:6b:e9:2c:44:7c:e8:d1:19:74:65:
2f:62:60:c4:ad:c8:1f:fd:f5:cb:4d:62:6e:c7:b8:83:96:61:
bc:41:a0:25:bc:9d:e3:aa:d6:c8:11:f8:2a:66:fd:37:29:51:
bb:44:96:6c:25:7d:80:4e:7a:91:52:40:e8:63:ce:17:df:9b:
8a:14:8a:6f:d1:be:54:76:d7:84:31:ad:92:87:50:cc:d2:98:
03:1e:bb:75:36:19:87:1a:e9:7a:af:d6:56:7d:1a:34:34:e4:
da:de:ba:50:0b:c4:91:e9:36:72:34:25:99:54:7a:30:74:4b:
41:e3:93:cf:1f:19:9c:62:21:f5:9e:c6:b6:63:c4:56:51:c4:
ba:fe:56:f2:11:38:dd:b6:66:84:59:91:b2:31:33:a3:a8:35:
72:d0:e6:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OmVLK2yv8z7SFQ8qkPZamMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MjUzODg2YTAyNTBhMDRlYzY5YmUwMGJiZjg0MzNjMmYw
MTRiN2MwHhcNMjYwNDI3MTEwMDQ3WhcNMjYwNDI4MTEwMDQ3WjAzMTEwLwYDVQQD
Eyg0YmFlNjM2YTQyOGFmN2RiMTc3MzYzMDViMDU0Y2NiNjVhOWY5MTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwApft8Ub7XpCIB4YLHG1GQ4UdhTR
z50Q97inwy5e9eXwYF2+JrM4P84N0cadOLHDKnXUeIpo+l1tCTycMEFqgt2Fyuw1
RSyYTfCY6Yq9LaERw76zO0TSPJHwyHlp5/d6Y2AKT6yrTiDmgrNgJ/rm8bmbZbko
yY+SLsJxNsgbVZo48Q8Plyrw/SfCFaszHEWbuLVGKW0UNdQCXmAnRiiBvnGlYulo
LCS6PV7GnUeKT/sQ6678/kpgA0ruk2G9kqnfF5q0PB96FRhstVhXXmOfAQiltaJR
ENrJ8Szgv4u2UPWG+0xxCBp+NOCpTlZs/GDmgTAWJClAJKtZ6kflj5zXKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuuY2pCivfbF3NjBbBUzLZan5EWMB8GA1UdIwQY
MBaAFAklOIagJQoE7Gm+ALv4QzwvAUt8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zNmY4M2UtNmJlNi00MmM1LTgzODAt
MTE0YWQ0MWNmMzMxLzEvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8zNmY4M2UtNmJlNi00MmM1LTgzODAtMTE0YWQ0MWNmMzMx
LzEvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGpCa8ah
/SNeA827ME/jpeli47qdcaTgHR2ETMqjrKRMek/SryEiuPys1Ahm204uDd0ZjzKm
bR3rF+UGtgiRNcFWM2+Ca+Zi/Ol8eo5FGsvzwcwsCeP8rUXDhDsQ9alBIZNr6SxE
fOjRGXRlL2JgxK3IH/31y01ibse4g5ZhvEGgJbyd46rWyBH4Kmb9NylRu0SWbCV9
gE56kVJA6GPOF9+bihSKb9G+VHbXhDGtkodQzNKYAx67dTYZhxrpeq/WVn0aNDTk
2t66UAvEkek2cjQlmVR6MHRLQeOTzx8ZnGIh9Z7GtmPEVlHEuv5W8hE43bZmhFmR
sjEzo6g1ctDmPA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:05:27 2026 by rpki-client