Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
File: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft (raw, json)
Hash identifier: 8sN/D/pdE5UqNvjNzQDE+uUKESrknuoP9kuZRqDLGS8=
Subject key identifier: BA:93:AB:52:A0:55:22:25:2F:C7:2A:B1:54:83:9E:3D:A0:89:13:7A
Authority key identifier: 0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
Certificate issuer: /CN=0ac98267a5db26c65e41e646648f1016636e544e
Certificate serial: 019F190CD7832109323A1AEA1B7094FDE41C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 15:01:39 +0000
Manifest this update: Tue 30 Jun 2026 15:01:39 +0000
Manifest next update: Wed 01 Jul 2026 15:01:39 +0000
Files and hashes: 1: 5NXTbG8sm81rKhiC9dfgOCFuM3U.roa (hash: JHdBlVBVaFySvrz7D7dzWmx8fejZEdrtpfO6y9P0DL4=)
2: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl (hash: pKtHBCF5Qj5Qmef760LC1VVZGLXF1nv4IWKA1OkOrXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:d7:83:21:09:32:3a:1a:ea:1b:70:94:fd:e4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac98267a5db26c65e41e646648f1016636e544e
Validity
Not Before: Jun 30 15:01:39 2026 GMT
Not After : Jul 1 15:01:39 2026 GMT
Subject: CN=ba93ab52a05522252fc72ab154839e3da089137a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d3:5d:d9:4f:c7:cd:99:19:09:02:5e:95:87:
a1:51:c3:9e:e9:31:d7:c6:76:ec:dc:d9:e3:50:42:
65:29:77:08:89:e4:c2:00:d0:fe:62:3b:07:da:0f:
70:d8:82:1f:f8:ce:c0:b6:fa:bd:ee:dd:8a:26:25:
c9:7d:2e:fa:3c:21:20:77:70:4f:e2:83:98:d6:aa:
a2:85:a3:49:97:64:ed:3b:2e:f7:62:b6:b9:f8:e2:
a7:65:94:9c:2c:73:68:ce:6e:d1:43:0f:ab:b4:c8:
d2:6f:3b:3f:66:2a:f3:3b:54:5b:a5:bf:31:b7:61:
17:25:c1:bc:b1:f1:02:73:ae:db:86:53:4b:46:f6:
21:8f:09:14:41:e5:30:14:d1:7e:ac:05:ae:3b:ae:
58:94:63:b4:7a:b0:d9:12:3a:3c:ea:d4:a6:cb:ae:
75:15:00:c5:c8:ec:68:19:35:69:d9:e6:5e:37:d6:
36:ea:3f:4c:f5:1f:d8:39:ad:3a:4f:5f:64:b7:81:
43:4b:18:10:bb:20:4a:25:50:c6:59:05:e9:c4:c1:
71:71:92:5d:19:14:22:9b:9b:8b:7f:ee:01:12:66:
54:fe:76:a4:90:46:83:dc:67:b8:13:ca:95:09:4e:
36:e3:da:ba:d5:c3:70:6a:39:85:ea:d3:da:09:3e:
39:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:93:AB:52:A0:55:22:25:2F:C7:2A:B1:54:83:9E:3D:A0:89:13:7A
X509v3 Authority Key Identifier:
keyid:0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:06:cb:5c:7e:e2:d4:52:7e:77:0f:d4:42:c8:88:49:c9:6b:
b2:63:7c:72:fc:7e:38:3d:65:e9:b9:d5:42:74:05:17:f7:60:
c3:de:0d:f7:53:b1:db:ec:23:dc:10:6f:d6:68:7f:15:13:c0:
2e:94:61:17:5c:25:45:b9:ff:a2:20:66:6b:60:68:d7:20:40:
fc:d5:f7:40:08:f6:5b:2d:18:a2:cf:53:8c:1f:5f:26:70:26:
87:8c:af:a5:f9:12:16:f7:34:9b:05:15:73:a3:f4:dc:53:04:
a7:d4:c0:5a:7c:dc:2b:ef:8e:4f:d8:d3:2c:6e:ed:d3:ae:0c:
52:50:8f:2d:66:83:2d:71:8e:b8:68:b8:4e:f3:ea:47:dd:2d:
5f:c2:79:7e:8d:db:5e:0f:0b:ac:de:13:2f:0a:76:8c:99:e3:
6b:8c:d7:72:51:37:c3:86:02:2f:34:8e:68:ff:7e:9c:df:fc:
69:6f:c5:d8:f5:e5:05:a6:81:d4:8b:f4:b2:64:55:fa:3d:24:
93:3a:d1:c2:59:ca:1c:f9:ef:5f:9d:a3:6d:48:b4:6f:32:dd:
4d:8d:0c:55:8a:13:3b:2a:7a:8f:f4:4e:8a:0c:f1:b5:56:73:
eb:40:48:d7:36:84:ed:a1:ae:e4:4b:d1:40:60:06:ef:a8:a6:
ee:07:20:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:22:59 2026 by rpki-client