Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
File: csrpZXwthNEBrYUA1dI26o64VIE.mft (raw, json)
Hash identifier: IRghYGWwWz16p5hElvoZu3XCbUxI/5WarhjGr1WiWqU=
Subject key identifier: 97:C5:01:F3:33:BF:DB:7D:8A:29:8A:32:5A:9D:6F:8F:85:48:D3:A6
Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Certificate serial: 019DB38FB4B8DEDDE496608B2FD1EB789FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
Manifest number: 0750
Signing time: Wed 22 Apr 2026 05:00:32 +0000
Manifest this update: Wed 22 Apr 2026 05:00:32 +0000
Manifest next update: Thu 23 Apr 2026 05:00:32 +0000
Files and hashes: 1: 1-WO0GACqy-eA17PZxSHorJ0nbCw.roa (hash: APG9pmhKy9iTCKXEjwonpREIrLwqDEbWbVud/9m5R4k=)
2: csrpZXwthNEBrYUA1dI26o64VIE.crl (hash: dmbso0KFYzL5Mxrs+MFXTzJbPGBAvP02t/HEId6q9Og=)
3: jrdUT9ZxJxzqlMRnHVJnnefEJPE.roa (hash: FxYjIY5awSFaZzGjU6N3ODWHu4ZSbBlhd+wx8DBxv6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Apr 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:8f:b4:b8:de:dd:e4:96:60:8b:2f:d1:eb:78:9f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Validity
Not Before: Apr 22 05:00:32 2026 GMT
Not After : Apr 23 05:00:32 2026 GMT
Subject: CN=97c501f333bfdb7d8a298a325a9d6f8f8548d3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b8:07:f0:a0:51:e4:72:b8:46:51:ba:58:fe:
56:2b:cf:8a:94:49:2b:79:55:68:75:b9:24:8f:01:
40:fe:d3:f7:82:a3:9a:ed:8b:a5:78:5c:6b:32:62:
1e:a9:35:0e:6d:d5:e3:f5:91:5a:f4:83:ce:bd:41:
56:ef:91:2b:3a:2c:ab:f3:e9:df:cd:a6:72:fc:72:
d7:03:61:85:30:93:76:aa:8b:cb:51:fd:cf:c7:fb:
af:65:29:80:5a:e5:0a:14:48:72:54:e6:a3:51:97:
d2:19:53:02:3c:47:f1:46:4b:d9:60:42:1a:29:77:
be:38:48:9b:ff:9d:01:45:de:c5:c1:78:6e:53:30:
57:db:b6:c8:7d:9b:2b:2f:06:a0:8a:fe:2c:3a:e5:
e2:0a:67:63:a8:f2:d3:f1:6e:52:48:ef:eb:57:2c:
dc:02:ae:fe:88:40:d5:20:0d:34:3b:e3:33:1e:02:
dc:64:31:66:e0:0b:9c:0d:9e:2d:04:a8:9d:67:a1:
ac:cf:66:cb:e1:9b:fb:25:0f:0a:f1:69:4f:35:65:
d5:7f:89:72:04:83:46:7d:fb:99:8d:a8:48:e2:ad:
b7:be:ab:c1:cc:85:36:5f:8b:39:ed:f3:ee:d8:4d:
2e:6a:ff:32:63:5b:f4:7e:a8:f0:e1:a9:cf:d2:a9:
1a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C5:01:F3:33:BF:DB:7D:8A:29:8A:32:5A:9D:6F:8F:85:48:D3:A6
X509v3 Authority Key Identifier:
keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:0e:88:48:d4:7b:a7:4d:6d:4b:9e:46:e8:3f:f8:b2:00:35:
5f:8c:ba:98:c7:7e:3b:9d:95:4a:cc:63:86:96:84:99:3b:d0:
74:ee:ce:cc:cc:f6:c0:e6:63:fd:12:8e:58:06:a3:06:15:74:
75:a4:f3:29:56:ec:fa:29:b9:4a:96:62:36:0e:b7:5f:28:bf:
8e:11:63:ff:2b:01:ee:06:53:c4:7e:9e:cf:05:7b:38:fb:39:
b5:e2:d4:d7:1b:8d:61:ab:da:d4:ac:b8:e5:7e:bc:b6:df:c7:
7e:6f:67:94:fd:d4:cb:b7:0f:f9:f6:b9:75:a0:25:15:b2:dd:
0e:e7:20:c4:be:fc:63:da:e7:4b:f5:51:eb:c1:e3:e6:ab:88:
22:30:57:7e:1f:2d:42:40:61:5e:41:df:bb:40:69:38:25:9c:
2f:94:36:6c:cb:1a:74:3b:73:ff:06:00:c0:82:18:9a:45:f5:
d2:9d:67:f2:5d:b7:b3:51:0c:d5:06:3f:55:6f:25:67:c7:73:
e4:f5:4b:51:cb:b8:9b:5d:1f:df:00:51:9c:2a:6f:58:c2:4b:
c5:f3:f0:81:7c:33:ab:35:5e:30:d6:00:b1:91:1c:5e:44:f0:
f3:cb:01:61:d1:8f:f4:7a:82:f2:20:93:90:1b:b4:4f:b9:8b:
13:e7:ce:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 12:13:26 2026 by rpki-client