Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
File: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft (raw, json)
Hash identifier: itKjbsHQX4aU2dMbyFE+QK6zuFxpmEyf9GXm7J743sI=
Subject key identifier: A1:14:18:43:A0:29:50:65:B0:B1:23:C4:D5:B9:45:1C:14:27:A7:0F
Authority key identifier: 0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
Certificate issuer: /CN=0ac98267a5db26c65e41e646648f1016636e544e
Certificate serial: 01A000CABF544EFAEB6E5714D9FF57528503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 15:01:22 +0000
Manifest this update: Fri 14 Aug 2026 15:01:22 +0000
Manifest next update: Sat 15 Aug 2026 15:01:22 +0000
Files and hashes: 1: 5NXTbG8sm81rKhiC9dfgOCFuM3U.roa (hash: JHdBlVBVaFySvrz7D7dzWmx8fejZEdrtpfO6y9P0DL4=)
2: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl (hash: VSux4mKhkkuoPFtpVSyyMBLizhGuZ4gC86hKeuRA4Gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:bf:54:4e:fa:eb:6e:57:14:d9:ff:57:52:85:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac98267a5db26c65e41e646648f1016636e544e
Validity
Not Before: Aug 14 15:01:22 2026 GMT
Not After : Aug 15 15:01:22 2026 GMT
Subject: CN=a1141843a0295065b0b123c4d5b9451c1427a70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:57:28:92:e0:cb:75:f0:47:72:3d:b9:65:29:
4f:d7:51:6c:23:ff:5c:9b:48:6d:ba:50:de:7f:8d:
df:0e:e8:99:ec:2d:80:8f:ad:58:20:9e:31:e0:14:
64:20:7e:5f:b4:fb:70:60:5b:83:f7:82:93:02:13:
0b:21:95:f0:fa:f9:38:e2:ac:20:31:42:b8:3e:3d:
bd:17:be:f8:55:a3:c4:a3:e0:e2:e2:dd:6b:13:17:
67:d0:41:13:99:b2:3a:53:5a:f7:62:45:36:76:ff:
a6:fd:f0:a0:2b:7d:53:2a:c5:93:78:cc:cd:5b:0f:
ba:15:52:d7:9c:c7:8a:0a:45:1b:d9:8a:52:2c:79:
c1:03:8b:18:26:a0:d3:bb:59:f4:eb:73:a5:13:2b:
6d:9c:46:72:34:c6:67:ab:52:82:01:d5:f0:b5:ac:
d3:60:fc:12:dc:7c:f6:f0:9f:32:d2:4f:0e:79:b0:
f3:7f:af:06:de:ea:3b:0f:42:50:4c:8a:b3:ab:0a:
f0:45:67:af:9c:2d:ec:05:11:6f:08:64:2a:bf:7e:
33:c6:30:ce:40:4b:8c:28:9f:15:71:c4:ae:03:07:
7c:6a:92:25:7c:21:5b:78:a1:ea:81:e7:a0:de:8e:
71:d8:0f:2d:b1:5b:2d:7f:29:14:95:8f:bf:54:d3:
f4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:14:18:43:A0:29:50:65:B0:B1:23:C4:D5:B9:45:1C:14:27:A7:0F
X509v3 Authority Key Identifier:
keyid:0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:22:7a:ea:13:da:9b:de:ea:4c:17:95:67:a5:4c:9b:3a:54:
3c:91:57:50:38:0c:1d:9a:42:0e:ff:7b:28:fa:9b:f4:f9:80:
68:b1:f4:91:dc:8b:bc:73:1c:21:c0:80:cc:30:06:80:ba:fc:
b3:29:2d:e7:46:83:79:65:d3:95:f2:aa:9e:64:96:c7:eb:54:
da:f6:58:3c:c2:dc:18:bf:0a:5e:9a:13:2c:ce:30:5c:c3:29:
5c:3b:7a:93:ab:6a:34:a8:9d:a2:95:7d:6b:71:f8:36:49:2e:
88:f2:f2:4b:df:8d:79:17:6b:19:a0:24:5f:ec:fc:f3:3b:02:
a5:81:40:76:16:4b:46:cf:61:38:d9:87:a0:14:56:d7:e6:e7:
b3:8a:e3:3e:20:dd:6a:29:0b:98:ec:0e:21:8c:d0:f3:2f:48:
1b:52:08:87:3f:a0:79:be:2d:24:83:64:3e:eb:8e:fc:4d:e3:
c9:24:2e:1d:e1:dc:63:31:49:41:67:ac:5c:aa:87:78:20:1c:
fb:4b:87:6c:b2:3e:34:00:ac:e8:c1:9a:5b:d1:32:33:4b:fc:
52:c0:0c:39:6a:7d:42:4f:4d:b6:56:60:42:61:ac:4c:1e:5f:
d4:e7:5c:40:ce:8b:98:07:1a:2d:a5:68:90:17:84:8e:ee:a3:
ab:72:4a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:20:27 2026 by rpki-client