Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
File: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft (raw, json)
Hash identifier: 5RQf8QWruIas22iVdLMX06LBsl0fmGPkWjQPCOMIYlY=
Subject key identifier: 7F:4C:FA:D1:9F:CD:3D:50:94:E6:D4:6F:55:81:2F:48:21:69:E1:44
Authority key identifier: 0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
Certificate issuer: /CN=0ac98267a5db26c65e41e646648f1016636e544e
Certificate serial: 019D382E348EE2E20C184588F330D8DD5E12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:45 +0000
Manifest this update: Sun 29 Mar 2026 06:00:45 +0000
Manifest next update: Mon 30 Mar 2026 06:00:45 +0000
Files and hashes: 1: 5NXTbG8sm81rKhiC9dfgOCFuM3U.roa (hash: JHdBlVBVaFySvrz7D7dzWmx8fejZEdrtpfO6y9P0DL4=)
2: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl (hash: 44zzzF1dUWyeMSf33j7482yRI2/K5p9jqDdMKSYI9XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:34:8e:e2:e2:0c:18:45:88:f3:30:d8:dd:5e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac98267a5db26c65e41e646648f1016636e544e
Validity
Not Before: Mar 29 06:00:45 2026 GMT
Not After : Mar 30 06:00:45 2026 GMT
Subject: CN=7f4cfad19fcd3d5094e6d46f55812f482169e144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:47:83:ed:36:60:25:04:e0:25:39:c2:ce:85:
35:68:ef:a3:b0:1e:ae:9e:9f:7a:83:6f:91:47:be:
f3:ae:2d:11:49:e0:8e:18:80:92:e6:03:f1:c1:c9:
ee:c3:96:e6:90:44:2d:ee:68:e2:98:9b:f4:d0:4e:
f2:39:37:53:ed:fd:d4:e8:87:73:bd:62:36:8e:ac:
ab:a3:3c:ef:15:43:07:80:5d:96:ae:fa:a8:67:3d:
3a:00:25:e3:05:0d:00:9d:af:36:37:0d:0a:30:6c:
64:5e:12:42:1c:bd:38:28:8d:d3:54:01:69:56:4b:
b0:26:ec:fe:d2:6c:9a:85:7e:0e:f8:69:cb:b2:a0:
8f:51:76:6b:f0:12:81:1d:83:01:d5:c8:ce:0c:bd:
3e:4c:85:5c:c5:b7:8e:cd:f9:dc:10:2f:0d:61:5c:
9a:46:14:7f:68:67:2a:be:bb:62:87:42:fb:1a:41:
4d:d3:03:7e:06:b5:be:bd:19:5d:13:12:94:68:48:
41:29:b4:1f:9f:fa:3c:8b:4b:ad:fe:e3:2e:1f:f7:
4b:1a:89:f3:57:ec:e6:94:bc:24:bb:0a:5d:16:07:
18:65:35:37:ac:33:f5:78:62:f2:18:74:41:f9:37:
ca:aa:bd:bb:a1:80:6c:85:d3:79:34:6f:8c:21:83:
1c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4C:FA:D1:9F:CD:3D:50:94:E6:D4:6F:55:81:2F:48:21:69:E1:44
X509v3 Authority Key Identifier:
keyid:0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:64:a2:22:18:64:c7:5a:db:42:9b:77:12:da:6f:2f:e5:23:
bd:9f:cf:f5:a7:fe:bd:e7:06:88:57:7d:f6:9e:29:31:16:c0:
15:1d:a0:4a:96:6e:f8:2b:b0:4a:3b:97:a3:6a:de:5a:f9:40:
08:72:d2:66:72:03:96:e8:a4:2e:ec:13:c3:44:80:4a:7f:d5:
7e:70:a0:f8:5d:94:e1:60:72:7e:0b:02:44:c1:16:27:c0:ed:
6d:c9:46:4b:f8:a9:9a:70:12:f8:f8:83:35:82:8c:5f:5c:f6:
87:ad:36:30:97:ce:4a:28:3b:f1:b3:19:32:42:2a:b9:83:ad:
17:3c:cd:7a:d1:40:16:72:c3:7d:80:df:1f:75:96:9d:a1:12:
39:1a:47:e7:f6:d2:34:3d:0c:2b:bf:db:7c:32:fd:d1:9d:cc:
f2:ef:75:ad:b7:00:2d:52:1e:ac:56:85:7f:c8:11:f6:24:14:
f2:42:61:b1:d1:5d:12:4d:28:7e:1e:7b:ce:86:3b:af:5b:07:
45:f2:18:54:39:bb:e9:9e:bd:89:0f:53:87:5d:0a:4e:ad:59:
7d:cd:f2:de:7e:3c:23:47:e6:fa:b0:ad:3f:c7:8e:a8:95:ab:
92:15:42:f3:99:41:47:36:c1:29:47:61:9f:1c:52:d4:a3:31:
b6:55:ac:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LjSO4uIMGEWI8zDY3V4SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYzk4MjY3YTVkYjI2YzY1ZTQxZTY0NjY0OGYxMDE2NjM2
ZTU0NGUwHhcNMjYwMzI5MDYwMDQ1WhcNMjYwMzMwMDYwMDQ1WjAzMTEwLwYDVQQD
Eyg3ZjRjZmFkMTlmY2QzZDUwOTRlNmQ0NmY1NTgxMmY0ODIxNjllMTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkeD7TZgJQTgJTnCzoU1aO+jsB6u
np96g2+RR77zri0RSeCOGICS5gPxwcnuw5bmkEQt7mjimJv00E7yOTdT7f3U6Idz
vWI2jqyrozzvFUMHgF2WrvqoZz06ACXjBQ0Ana82Nw0KMGxkXhJCHL04KI3TVAFp
VkuwJuz+0myahX4O+GnLsqCPUXZr8BKBHYMB1cjODL0+TIVcxbeOzfncEC8NYVya
RhR/aGcqvrtih0L7GkFN0wN+BrW+vRldExKUaEhBKbQfn/o8i0ut/uMuH/dLGonz
V+zmlLwkuwpdFgcYZTU3rDP1eGLyGHRB+TfKqr27oYBshdN5NG+MIYMciQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9M+tGfzT1QlObUb1WBL0ghaeFEMB8GA1UdIwQY
MBaAFArJgmel2ybGXkHmRmSPEBZjblROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3NtQ1o2WGJKc1plUWVaR1pJOFFGbU51VkU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zNzk5ZmEtOWRiOS00ZmM4LThmZDYt
MmQ5ZTk5ZjQ3MjJjLzEvQ3NtQ1o2WGJKc1plUWVaR1pJOFFGbU51VkU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zNzk5ZmEtOWRiOS00ZmM4LThmZDYtMmQ5ZTk5ZjQ3MjJj
LzEvQ3NtQ1o2WGJKc1plUWVaR1pJOFFGbU51VkU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmSiIhhk
x1rbQpt3EtpvL+UjvZ/P9af+vecGiFd99p4pMRbAFR2gSpZu+CuwSjuXo2reWvlA
CHLSZnIDluikLuwTw0SASn/VfnCg+F2U4WByfgsCRMEWJ8DtbclGS/ipmnAS+PiD
NYKMX1z2h602MJfOSig78bMZMkIquYOtFzzNetFAFnLDfYDfH3WWnaESORpH5/bS
ND0MK7/bfDL90Z3M8u91rbcALVIerFaFf8gR9iQU8kJhsdFdEk0ofh57zoY7r1sH
RfIYVDm76Z69iQ9Th10KTq1Zfc3y3n48I0fm+rCtP8eOqJWrkhVC85lBRzbBKUdh
nxxS1KMxtlWsLw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:15 2026 by rpki-client