Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
File: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft (raw, json)
Hash identifier: ABkqMO9eJJS+ChhImur4Z/BZpng4mXsXn0g09auqpoA=
Subject key identifier: 45:CA:58:0F:FC:F3:7A:73:AB:31:5A:27:E9:F9:81:7A:75:AE:4E:5C
Authority key identifier: 0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
Certificate issuer: /CN=0ac98267a5db26c65e41e646648f1016636e544e
Certificate serial: 01A13F7042A6E5DE0C48969C0552C353C272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 12:01:23 +0000
Manifest this update: Thu 15 Oct 2026 12:01:23 +0000
Manifest next update: Fri 16 Oct 2026 12:01:23 +0000
Files and hashes: 1: 5NXTbG8sm81rKhiC9dfgOCFuM3U.roa (hash: JHdBlVBVaFySvrz7D7dzWmx8fejZEdrtpfO6y9P0DL4=)
2: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl (hash: V0OvGSScLeM0qiZliP/SKclfeyhya8Q7w5uHYFK7IQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:42:a6:e5:de:0c:48:96:9c:05:52:c3:53:c2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac98267a5db26c65e41e646648f1016636e544e
Validity
Not Before: Oct 15 12:01:23 2026 GMT
Not After : Oct 16 12:01:23 2026 GMT
Subject: CN=45ca580ffcf37a73ab315a27e9f9817a75ae4e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:1f:3e:14:d3:71:22:8a:45:30:68:66:d8:
62:85:63:9f:26:eb:a7:fa:98:c7:bc:22:f5:ce:e5:
71:80:d6:3f:6b:2e:95:b0:8b:f3:a2:df:ee:53:d2:
50:fd:92:01:d0:af:2b:8c:d6:83:a3:bf:b7:0e:67:
9b:de:91:94:d6:1d:4b:fb:9c:9e:80:84:e6:f6:e5:
d3:70:cc:24:18:43:eb:fc:ea:3a:87:ff:97:ef:06:
6d:82:05:b1:15:1c:d7:c4:58:63:ab:2f:62:29:d0:
4d:59:73:0f:e2:4a:0f:1e:5d:8d:a6:a6:80:a7:7f:
be:8d:11:80:96:db:b2:4b:aa:36:fe:cc:4a:32:62:
98:77:9f:2e:34:a9:f2:81:8d:81:63:69:54:f6:c3:
50:67:82:26:a1:b2:ee:aa:94:5c:e0:85:ce:75:d5:
d3:8c:e6:5e:a0:e3:e5:5c:46:1c:f4:97:25:d3:39:
8b:8f:63:e5:2e:7d:7e:48:97:c4:e3:54:66:71:4d:
ec:55:64:2f:f2:11:4e:3f:7e:45:91:ca:43:7c:8b:
d4:6a:b7:63:1f:ae:19:03:35:f6:0f:ed:8f:dd:02:
de:f1:0a:f2:71:7f:a0:ed:2c:b6:59:0c:9c:22:3d:
f8:df:d1:e3:f2:59:39:16:8a:d1:6d:7b:47:a5:c0:
42:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CA:58:0F:FC:F3:7A:73:AB:31:5A:27:E9:F9:81:7A:75:AE:4E:5C
X509v3 Authority Key Identifier:
keyid:0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9f:0c:ca:df:fc:6d:b1:cd:5e:ca:77:6e:0d:55:4e:2b:35:
5c:21:cb:5c:ea:17:d7:e2:b9:5d:55:2e:92:2d:7e:da:51:f5:
85:ac:be:ed:66:1f:fc:87:5e:b4:6f:69:bf:9c:57:64:49:3f:
09:78:71:23:86:bd:71:a1:69:63:b1:27:33:6a:9c:4a:40:fc:
1f:ea:33:0d:59:fc:5d:32:f5:2e:64:91:c8:15:04:3c:cb:9b:
6b:5f:93:6d:ed:d2:5a:0b:a9:26:00:45:7d:ad:1b:f6:9f:11:
cc:53:94:fc:8b:c1:12:c7:5c:c4:51:5a:fb:cd:32:fb:ec:0b:
01:82:57:97:c1:03:b0:dc:2e:fc:ad:87:27:92:2c:91:33:bc:
76:24:5f:2b:26:c2:bd:fc:c6:27:e2:6f:59:27:93:e1:bb:b8:
9c:21:ae:62:38:d0:13:20:0a:1e:86:a8:6e:84:5c:dc:50:b3:
69:67:fe:6f:db:cd:ec:bc:8f:7b:9b:d7:90:5a:ef:f7:2d:0f:
0c:97:53:12:89:8c:65:c6:85:c1:3d:39:72:91:61:98:a5:c0:
d6:61:bf:55:ba:cc:66:43:25:06:e7:b3:0d:cf:4c:0c:1e:23:
e1:13:5c:1a:64:68:19:f4:a9:68:46:cf:fb:ea:67:f0:43:2c:
df:f3:d1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:32:44 2026 by rpki-client