Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
File: csrpZXwthNEBrYUA1dI26o64VIE.mft (raw, json)
Hash identifier: eJPuoZJT/wp29/2ONLvsjYWVkZ4BrR5BgM2X7uj6aLQ=
Subject key identifier: 2D:C8:29:CF:A1:1B:70:76:69:BB:8A:73:FF:AA:DD:B0:B1:13:A2:21
Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Certificate serial: 019F86E95A4242513572342183C071B0ECC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
Manifest number: 0842
Signing time: Tue 21 Jul 2026 23:01:07 +0000
Manifest this update: Tue 21 Jul 2026 23:01:07 +0000
Manifest next update: Wed 22 Jul 2026 23:01:07 +0000
Files and hashes: 1: 1-WO0GACqy-eA17PZxSHorJ0nbCw.roa (hash: APG9pmhKy9iTCKXEjwonpREIrLwqDEbWbVud/9m5R4k=)
2: csrpZXwthNEBrYUA1dI26o64VIE.crl (hash: LBGuhEh4hs8Z9BCJDNkJ3PLRzwxoS9y/8EbSkkhO2oM=)
3: jrdUT9ZxJxzqlMRnHVJnnefEJPE.roa (hash: FxYjIY5awSFaZzGjU6N3ODWHu4ZSbBlhd+wx8DBxv6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:e9:5a:42:42:51:35:72:34:21:83:c0:71:b0:ec:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Validity
Not Before: Jul 21 23:01:07 2026 GMT
Not After : Jul 22 23:01:07 2026 GMT
Subject: CN=2dc829cfa11b707669bb8a73ffaaddb0b113a221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:14:df:f1:c1:c1:c3:cc:60:ba:ee:89:47:be:
4f:62:07:cd:ff:3b:01:da:9e:47:e6:35:1f:a4:9f:
d0:df:7a:a6:a4:52:a1:d8:6b:92:b2:1f:6e:32:f8:
8e:89:ed:50:51:45:93:60:b2:6b:6b:cb:66:cd:cb:
5a:2f:1a:05:47:95:3e:fe:2a:53:e1:6f:f8:76:85:
e2:cb:01:b1:16:a2:96:17:2e:1e:40:8f:28:65:82:
ce:2b:29:d1:22:19:c9:4e:50:b4:32:80:46:e1:75:
d4:e7:9a:d6:dd:60:bf:60:d9:d3:1f:7b:10:a7:7b:
08:74:3e:f6:c8:cf:ad:94:47:c1:60:d0:a9:8b:f2:
5b:8e:d9:f2:08:9e:49:31:3f:b5:7c:77:4f:43:5e:
43:03:6d:62:12:f0:17:df:a7:bf:72:d3:6d:63:ff:
0a:62:01:44:3b:86:64:bb:a6:fb:9b:f2:fc:99:41:
a5:39:5c:c0:3b:c7:ee:82:93:9c:94:c7:f3:a4:c6:
7c:10:07:7e:3f:a5:d6:bc:4d:ef:c8:6d:bd:34:5f:
38:f0:9a:43:6d:aa:72:07:dc:30:e2:47:5d:c9:5a:
a1:3f:bc:15:b6:09:2e:8e:94:a7:35:eb:a4:e8:cf:
4a:f6:fd:01:3c:2e:8d:e6:4a:00:7f:f1:ef:a0:67:
9d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C8:29:CF:A1:1B:70:76:69:BB:8A:73:FF:AA:DD:B0:B1:13:A2:21
X509v3 Authority Key Identifier:
keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f0:b9:83:f4:37:e2:93:d2:4e:a4:f2:fd:7b:39:52:b2:cc:
2e:59:37:16:24:a4:df:27:f8:ef:b5:c9:83:24:9e:79:0b:23:
9b:b4:16:7f:60:96:26:c5:9a:cc:ea:2a:d2:e5:df:71:7d:c2:
73:d9:d8:2c:b5:a4:53:37:a4:c8:98:af:ed:db:4d:76:ab:47:
bd:28:ab:2f:31:c7:55:05:1d:1b:f3:a9:1b:88:19:c2:d7:ea:
dc:be:dd:32:7f:65:ac:86:04:e0:35:1d:9e:58:ef:89:52:31:
43:b1:50:41:77:c0:b4:fa:38:ef:18:86:19:d6:01:35:bf:ce:
5a:ff:34:41:b5:48:60:d6:20:b4:f3:b0:63:ab:5d:06:a3:7a:
dd:be:0e:a9:4e:59:0b:4c:79:19:68:11:27:95:f1:d2:6d:0a:
3b:85:c4:5b:17:b5:7f:4f:73:51:50:38:b0:3a:ba:35:a4:38:
39:6a:91:84:63:40:bb:27:c4:b5:17:fc:14:65:9c:c7:73:d6:
f5:aa:a8:07:1a:a6:9f:47:fa:7a:44:90:54:64:f0:8e:fa:ee:
ca:95:a8:c4:67:b9:08:0f:40:d3:fe:5c:3e:e4:ec:db:d9:ec:
3a:b4:c3:e3:c7:53:08:54:b5:01:76:03:cd:66:05:91:02:a8:
d1:95:55:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:56:39 2026 by rpki-client