Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
File: CSU4hqAlCgTsab4Au_hDPC8BS3w.mft (raw, json)
Hash identifier: VOsYsy1XS7N1kho79WtPTEa5H9evvpbbX9nnVtej760=
Subject key identifier: 43:F0:5C:AE:E2:5E:9C:6D:CC:E6:F2:D3:2C:BF:6F:35:F0:22:11:FC
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 01A17A041AE1E63750AB47028DF50F6C6634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
Manifest number: 1ACF
Signing time: Mon 26 Oct 2026 21:00:51 +0000
Manifest this update: Mon 26 Oct 2026 21:00:51 +0000
Manifest next update: Tue 27 Oct 2026 21:00:51 +0000
Files and hashes: 1: 1D3XGuEQn9Eo498gEH4KY15UEy0.roa (hash: KfByO/UOYDGSRZuUArFURrgdPsxMkmj0LnL2B657g+A=)
2: 2jr96T6NWCWExh7kLrHI5diyCUE.roa (hash: Zge4KJnVPt8pB6ejzrNYi8em+mcBZDIbd6MDQo6I2B4=)
3: CSU4hqAlCgTsab4Au_hDPC8BS3w.crl (hash: IkDNBRnoXKToByekoNk1Pl9GiMDdnpE1nrmZeL691wY=)
4: L_lurfVMTqwpO3u6xE9qRKV5Qgc.roa (hash: l23OrKr9WvvSQM+tVJnmi0UwpooxXlvEinD6ejP+N/U=)
5: aG9W6j5KtXqHylusOag-9kZmDkU.roa (hash: 8wy/QUmJbzK5IUzl7twQeHy1b4/h9K/7cnOoHkJ+i8U=)
6: s_YXgj5LokarWRSiqAhhdgl6EyM.roa (hash: 2h13MYfmgLEIvRCwD3qUKHQhONbRrWEsixQkMgsfF58=)
7: uE19GLaWOaL8Wf7ltXnaZzBUgx0.roa (hash: G46IsATki7ZM4CXurLt0QLBkG6vi6cJ45QU5pycBC94=)
8: wOPk17nv5KIiudN64aSMjj945cw.roa (hash: PusivWzV1D+Sz5sW5Ck+szJ+lL1X1qExgZ8AO7cPnS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:04:1a:e1:e6:37:50:ab:47:02:8d:f5:0f:6c:66:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Oct 26 21:00:51 2026 GMT
Not After : Oct 27 21:00:51 2026 GMT
Subject: CN=43f05caee25e9c6dcce6f2d32cbf6f35f02211fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c4:9c:f1:d5:86:3c:0e:80:13:15:70:c4:c6:
46:9a:0e:21:45:e0:43:a4:d8:94:6e:1f:cd:26:8a:
b2:e2:a0:34:ad:cf:1a:87:99:37:1a:ab:10:30:e0:
0c:d4:11:00:1f:95:c5:1c:6b:79:95:8e:8c:5c:13:
ff:79:d0:51:d8:91:7d:31:a0:9e:24:1c:b6:47:49:
2c:02:67:20:e9:58:34:8e:a0:1c:2c:c7:19:70:06:
cb:5f:98:f4:44:c5:6c:1f:10:d1:66:72:4b:31:ab:
f6:d7:23:3e:64:3b:41:b4:5f:6b:ed:a8:2a:a7:b5:
bb:14:1b:28:98:42:d7:75:5a:6c:e2:48:12:1b:a8:
cd:16:20:df:df:02:d6:0f:08:72:23:5e:21:9b:ae:
bc:1f:72:04:79:7e:5d:04:b0:b8:3a:12:3f:07:27:
d7:e9:67:c3:a2:27:42:c3:ab:ce:aa:87:61:3a:a3:
7d:10:d3:84:3f:89:ab:26:69:fb:c8:85:42:8b:6b:
20:e4:76:15:84:07:79:f2:28:fc:3f:01:6a:3b:fb:
51:fa:81:55:ff:7e:8b:f4:f7:8d:79:bf:01:74:50:
19:64:6e:0c:33:bf:d5:f9:bb:4e:cf:0a:87:f5:e5:
82:f5:e6:c8:8b:cc:8c:ff:93:d7:0d:42:77:b4:5c:
51:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F0:5C:AE:E2:5E:9C:6D:CC:E6:F2:D3:2C:BF:6F:35:F0:22:11:FC
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:95:64:d7:1b:fe:b8:af:fd:7e:da:32:a7:4b:2b:cd:77:a9:
0c:30:38:94:2b:da:ec:30:74:cc:89:c2:83:ac:94:31:56:27:
fb:3b:44:99:b7:e3:4e:d1:b5:a5:ed:e3:a5:91:b5:2d:8c:60:
a9:d2:a8:b7:ab:c1:d5:84:6e:53:97:39:47:b0:c7:8a:7f:da:
8b:b7:7a:b2:b1:01:65:0e:6d:d1:82:c1:ec:de:63:a0:11:f7:
db:de:5e:e0:f6:75:0d:0b:53:14:75:68:ce:f9:7a:ed:3b:18:
73:91:8f:a4:f0:0d:86:01:5c:4e:30:d1:06:5e:39:f2:67:fc:
58:69:13:3d:4d:2e:93:22:11:43:2e:e1:69:32:ca:40:3f:55:
b3:41:65:e7:93:46:df:0c:8a:29:f0:85:7b:2e:fc:d8:b8:33:
2b:35:4f:3f:7f:0b:3f:09:0e:62:5f:7c:c9:2e:9a:ae:ee:d3:
2b:2c:a5:89:97:cd:b0:ce:6c:dd:60:8f:b1:eb:d4:57:10:bb:
bc:53:1d:e6:ad:94:83:41:dd:6b:00:f4:58:ee:bb:6b:97:e6:
10:a6:97:37:d5:60:bf:68:e7:ac:52:ed:c1:81:1d:ba:20:27:
48:cc:0c:59:17:fb:7e:0a:1f:31:48:d8:17:0e:95:81:6d:ac:
73:dd:f0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:01:56 2026 by rpki-client