Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
File: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft (raw, json)
Hash identifier: FP9Lun1zto/TBZyThALkfw77PLuDqi+BrDcSeYldG5I=
Subject key identifier: D0:45:2A:AA:B9:73:A7:09:30:AD:D1:A5:09:A9:06:8A:D6:E8:7B:F4
Authority key identifier: 09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
Certificate issuer: /CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Certificate serial: 019FA7185F64744F389D045BAD7F352D6E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
Manifest number: 042D
Signing time: Tue 28 Jul 2026 05:00:20 +0000
Manifest this update: Tue 28 Jul 2026 05:00:20 +0000
Manifest next update: Wed 29 Jul 2026 05:00:20 +0000
Files and hashes: 1: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl (hash: AZkq5zF6bQOX64OzI4bHLqTW5qKFJhXoJkzCJ8692ag=)
2: W-m52T0Z08ZrHduyI7qeLJtkavg.roa (hash: 2uTxxd+gJUWVWBJ1knmrNyKxA15WrS87ku3rDDp8keE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:18:5f:64:74:4f:38:9d:04:5b:ad:7f:35:2d:6e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Validity
Not Before: Jul 28 05:00:20 2026 GMT
Not After : Jul 29 05:00:20 2026 GMT
Subject: CN=d0452aaab973a70930add1a509a9068ad6e87bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a2:3c:63:d5:b4:3a:77:0e:3c:bf:54:42:4c:
59:86:02:9e:4e:77:51:ec:dd:38:e2:7f:2e:d2:c6:
c0:64:e1:14:fb:0b:09:e2:f1:bd:ca:51:55:f0:86:
ff:f8:dd:e0:5e:68:56:b2:42:4d:5a:1c:41:de:bd:
50:60:ff:2c:b2:7f:d1:71:52:b4:da:3e:60:b5:7b:
8d:0a:87:ff:3b:81:44:4d:a0:4a:f0:f5:1d:f8:0d:
ef:52:89:42:9b:d5:bb:4f:94:f2:0b:3a:30:35:d0:
dc:a0:b9:10:f3:46:54:93:ac:37:4c:36:d4:4b:bb:
fc:e7:89:65:6f:bd:14:50:e0:93:08:a1:84:25:57:
17:f0:02:11:06:53:17:62:c9:0c:af:cb:97:7e:f3:
f2:54:eb:35:ad:6d:c7:8f:ce:b4:7e:94:2e:6f:d5:
95:8e:dd:6b:ec:83:b1:e3:a1:17:41:f7:30:d3:71:
57:af:b0:f5:78:2c:57:92:87:75:a9:6b:ed:47:aa:
3b:8c:1d:a9:ee:f0:e1:da:1c:b2:e9:8a:bf:d9:4a:
16:d4:1c:fa:94:a1:50:da:6f:4a:d8:68:2b:3d:87:
79:19:e7:de:ed:64:5f:9d:e8:da:20:26:2b:d9:e1:
e6:a4:66:1d:f2:64:6e:e5:c6:1b:17:f2:29:48:f1:
96:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:45:2A:AA:B9:73:A7:09:30:AD:D1:A5:09:A9:06:8A:D6:E8:7B:F4
X509v3 Authority Key Identifier:
keyid:09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f8:c7:72:f5:f0:cf:dc:f6:f0:26:c0:99:70:18:7e:68:0d:
b4:cd:56:d6:06:87:a5:4b:a7:47:a8:b9:85:29:0f:eb:c5:ee:
7d:70:da:ca:da:f7:a1:b9:f4:cb:f5:1c:88:ef:17:09:61:00:
db:3f:c8:e4:5c:2a:04:e0:4c:1a:e5:0c:c4:50:97:16:0d:df:
6c:be:0c:e0:57:ce:01:f0:dc:6d:54:b2:92:b6:e5:ee:eb:96:
4b:dc:24:09:d5:12:a8:b0:74:07:de:2e:4d:b8:46:f0:eb:4e:
43:56:5a:ed:c5:47:ea:03:d5:49:91:91:fe:12:8f:78:fe:24:
27:51:1a:93:80:6d:c9:6b:f7:b4:a1:b1:e0:aa:81:af:ff:9d:
6c:8b:00:fe:33:79:47:7e:9d:dd:22:37:87:2f:af:d3:0b:97:
52:32:4e:e7:4a:58:af:30:18:6e:9d:9a:10:b1:c3:87:ce:eb:
ec:89:bf:2d:b8:23:82:c7:00:66:6a:b2:27:f6:c8:31:55:b1:
62:6d:b4:5b:fd:20:bf:f3:f1:04:58:cc:36:40:b5:10:63:95:
fe:03:fc:f1:2c:f5:24:01:23:f5:25:4f:84:31:0a:6a:00:75:
c8:28:4b:10:a4:cf:28:d4:d0:df:91:69:c3:9f:22:e2:1e:96:
70:16:81:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 10:34:03 2026 by rpki-client