Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
File: cspFbK0jiDCzjs1NJnys-lzV8fE.mft (raw, json)
Hash identifier: H64Wt2RHXmMxnfGWixnxiIZMMsOPa3nD6Q7sHCNan5s=
Subject key identifier: 3E:4E:F0:48:5B:4C:AB:41:F0:AE:11:A6:A7:87:A7:A1:F5:C5:6C:0B
Authority key identifier: 72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1
Certificate issuer: /CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
Certificate serial: 019D371B3B37CA2F7CECFCBA20FDA037CB62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 01:00:24 +0000
Manifest this update: Sun 29 Mar 2026 01:00:24 +0000
Manifest next update: Mon 30 Mar 2026 01:00:24 +0000
Files and hashes: 1: EdPdMzgnPs41cXxU2dcI-fVK9_o.roa (hash: VU+rMMG4Ct00NxP8HYLLqEFuKnv7Lx/dqWlvPJ9BsVI=)
2: cspFbK0jiDCzjs1NJnys-lzV8fE.crl (hash: l2j3N8x/i8GldkBHggesKQEWC6XdXhf4OWOKV7vAXUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:3b:37:ca:2f:7c:ec:fc:ba:20:fd:a0:37:cb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
Validity
Not Before: Mar 29 01:00:24 2026 GMT
Not After : Mar 30 01:00:24 2026 GMT
Subject: CN=3e4ef0485b4cab41f0ae11a6a787a7a1f5c56c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4e:c4:51:31:52:8d:da:0d:1d:f5:f6:b0:ea:
5b:e1:29:12:65:52:87:57:e9:cf:09:c3:b2:8d:25:
89:a2:1d:d3:04:2a:e5:af:da:e4:6f:24:b6:c6:da:
33:a2:7c:aa:60:6e:5a:3e:56:29:fe:e9:3a:c6:9b:
1c:9a:2a:3c:11:6b:7b:03:ad:53:94:71:f8:2f:80:
57:84:4d:ef:e9:f4:66:a0:11:51:8e:a9:10:d5:93:
f8:6e:b0:d4:96:d5:9c:aa:53:18:9e:32:9a:75:ef:
14:e1:19:06:27:8b:f3:3e:38:48:24:80:18:ea:42:
8d:42:fd:20:31:a5:b2:57:22:6d:83:3c:92:4d:34:
b9:0d:f7:eb:c8:cc:02:97:dc:3b:c2:dd:a0:17:c7:
5d:14:e2:e9:92:a1:bb:99:79:12:18:72:c1:33:18:
84:f1:0f:f2:c6:03:fc:a2:85:6e:7a:62:fa:fa:79:
77:c8:b5:b7:d3:c0:1a:5a:bd:fb:21:cd:66:31:7c:
bc:e2:e4:45:36:1f:97:e3:89:05:9f:a1:1c:59:c3:
b3:87:f3:c6:60:98:c8:f5:af:b1:36:59:ad:03:6f:
6b:70:6c:b7:00:16:17:5b:52:04:12:33:3c:cf:a5:
ba:37:ab:bf:37:7f:45:48:1e:97:6f:8c:5f:14:fa:
2f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4E:F0:48:5B:4C:AB:41:F0:AE:11:A6:A7:87:A7:A1:F5:C5:6C:0B
X509v3 Authority Key Identifier:
keyid:72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ec:06:7a:ed:92:1d:54:b0:56:ef:fc:6b:a5:09:8c:09:cd:
8e:14:f1:cd:17:19:e2:10:07:50:bd:ae:4c:19:b1:bb:29:8a:
32:8c:31:c2:21:3b:c4:77:03:8e:9f:e8:a0:6c:f9:bd:43:bb:
57:7d:c7:5d:da:7c:9c:08:64:26:e1:34:75:b1:9c:9e:b2:6e:
8b:39:3c:a4:92:bb:2c:bf:c0:f5:00:e9:df:46:08:75:a5:4f:
a4:f9:57:3f:02:91:de:cf:25:49:fc:a0:30:a0:41:35:f3:87:
c6:e8:b8:c7:37:fc:e6:35:7f:ae:ab:42:9d:c2:a6:e3:b4:d6:
49:f6:8f:81:6f:ba:51:3a:49:58:40:4d:44:1f:1e:e3:b4:4f:
af:81:0a:e1:73:6a:07:06:21:b5:cc:ec:ca:0a:ed:4d:a1:06:
fd:7a:db:9c:e9:4b:dd:e8:5b:64:ee:1f:b0:f0:e0:07:2e:d8:
00:29:4b:ec:35:09:34:03:a0:61:e0:5f:72:85:30:30:5c:b3:
34:6f:27:07:0b:05:e0:4b:e7:c5:bc:90:14:88:7b:08:36:bc:
2b:ab:f0:01:93:20:9f:45:34:3e:a3:bf:b0:d6:06:7b:0d:82:
cd:f7:13:89:f4:37:82:56:12:60:9f:96:3e:85:58:66:6c:47:
92:ad:bd:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Gzs3yi987Py6IP2gN8tiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyY2E0NTZjYWQyMzg4MzBiMzhlY2Q0ZDI2N2NhY2ZhNWNk
NWYxZjEwHhcNMjYwMzI5MDEwMDI0WhcNMjYwMzMwMDEwMDI0WjAzMTEwLwYDVQQD
EygzZTRlZjA0ODViNGNhYjQxZjBhZTExYTZhNzg3YTdhMWY1YzU2YzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk7EUTFSjdoNHfX2sOpb4SkSZVKH
V+nPCcOyjSWJoh3TBCrlr9rkbyS2xtozonyqYG5aPlYp/uk6xpscmio8EWt7A61T
lHH4L4BXhE3v6fRmoBFRjqkQ1ZP4brDUltWcqlMYnjKade8U4RkGJ4vzPjhIJIAY
6kKNQv0gMaWyVyJtgzySTTS5DffryMwCl9w7wt2gF8ddFOLpkqG7mXkSGHLBMxiE
8Q/yxgP8ooVuemL6+nl3yLW308AaWr37Ic1mMXy84uRFNh+X44kFn6EcWcOzh/PG
YJjI9a+xNlmtA29rcGy3ABYXW1IEEjM8z6W6N6u/N39FSB6Xb4xfFPov+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5O8EhbTKtB8K4RpqeHp6H1xWwLMB8GA1UdIwQY
MBaAFHLKRWytI4gws47NTSZ8rPpc1fHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3NwRmJLMGppREN6anMxTkpueXMtbHpWOGZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81NzMxZjMtYjE4MC00MDU0LThhY2It
MmNhMTNkZDFkYjYzLzEvY3NwRmJLMGppREN6anMxTkpueXMtbHpWOGZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81NzMxZjMtYjE4MC00MDU0LThhY2ItMmNhMTNkZDFkYjYz
LzEvY3NwRmJLMGppREN6anMxTkpueXMtbHpWOGZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOOwGeu2S
HVSwVu/8a6UJjAnNjhTxzRcZ4hAHUL2uTBmxuymKMowxwiE7xHcDjp/ooGz5vUO7
V33HXdp8nAhkJuE0dbGcnrJuizk8pJK7LL/A9QDp30YIdaVPpPlXPwKR3s8lSfyg
MKBBNfOHxui4xzf85jV/rqtCncKm47TWSfaPgW+6UTpJWEBNRB8e47RPr4EK4XNq
BwYhtczsygrtTaEG/XrbnOlL3ehbZO4fsPDgBy7YAClL7DUJNAOgYeBfcoUwMFyz
NG8nBwsF4EvnxbyQFIh7CDa8K6vwAZMgn0U0PqO/sNYGew2CzfcTifQ3glYSYJ+W
PoVYZmxHkq29sA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:20 2026 by rpki-client