Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
File: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft (raw, json)
Hash identifier: qaKnKiGZ4ADnUpynFzjEVFw16XLf8tNQ5yC5JD0e2Ho=
Subject key identifier: BF:EF:11:22:55:8A:03:5F:E2:86:33:39:71:6E:4C:89:69:C1:A1:CA
Authority key identifier: 09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
Certificate issuer: /CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Certificate serial: 01A08ED7A8F948C73470F9052B374E56C72C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
Manifest number: 04A5
Signing time: Fri 11 Sep 2026 05:01:33 +0000
Manifest this update: Fri 11 Sep 2026 05:01:33 +0000
Manifest next update: Sat 12 Sep 2026 05:01:33 +0000
Files and hashes: 1: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl (hash: GDJtSTN2gm20YYgSHMqg1IO22fgEPMTVTfXKmiWEmNc=)
2: W-m52T0Z08ZrHduyI7qeLJtkavg.roa (hash: 2uTxxd+gJUWVWBJ1knmrNyKxA15WrS87ku3rDDp8keE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 05:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:d7:a8:f9:48:c7:34:70:f9:05:2b:37:4e:56:c7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Validity
Not Before: Sep 11 05:01:33 2026 GMT
Not After : Sep 12 05:01:33 2026 GMT
Subject: CN=bfef1122558a035fe2863339716e4c8969c1a1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:78:9c:5d:17:a5:1b:9b:06:7a:6c:05:be:a3:
58:41:18:11:69:ca:cd:37:d1:d0:ff:6e:ec:9b:e2:
32:5b:1e:ab:ee:a5:7b:31:d4:66:07:37:a5:d6:98:
a6:00:35:d3:92:bb:6c:95:e6:50:e3:cb:d2:95:5a:
36:e6:4f:fb:10:d3:10:da:6d:a3:53:05:eb:7a:da:
2c:b0:88:19:1a:cf:03:d7:22:70:9b:ba:b2:c3:ab:
36:44:87:ad:7d:1e:b1:cc:65:b2:75:30:b7:d3:6e:
f9:fe:3a:28:fa:d4:c5:c3:26:4a:d7:8d:19:19:95:
91:4c:d4:46:ba:6b:ae:bd:0b:34:96:82:57:4a:e9:
10:e1:c0:d6:20:ac:a8:cc:49:53:0a:33:2e:80:ae:
b2:70:8a:20:a3:a0:55:78:34:9c:f3:e8:83:66:35:
25:24:3c:ee:20:bf:83:d7:88:d3:81:78:dd:7e:74:
de:8a:8c:03:60:a7:44:61:32:17:52:22:4c:40:6b:
f4:bd:fd:78:fe:80:99:88:d3:ee:8b:5d:c2:2e:72:
9c:d0:07:a9:8c:53:cb:93:3f:be:ad:c0:4e:32:5f:
1c:f6:9a:0a:ce:1d:41:8e:57:51:5e:e0:f2:dd:a0:
fc:61:9d:86:18:3b:db:63:e3:9e:a3:9d:55:7b:a1:
ac:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EF:11:22:55:8A:03:5F:E2:86:33:39:71:6E:4C:89:69:C1:A1:CA
X509v3 Authority Key Identifier:
keyid:09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:24:35:28:82:f4:90:85:aa:19:10:3b:dc:ea:7a:61:b3:48:
7c:52:4f:c8:f9:c7:fd:16:b6:e8:ac:fd:4a:fb:b0:34:31:cd:
87:95:ab:2d:9c:67:b3:5e:2a:5a:2d:d9:75:08:77:c1:9c:bb:
46:2b:de:32:88:73:f1:fe:7c:e0:8b:da:84:f2:63:1c:ef:18:
c2:4d:94:33:de:a5:91:e1:a6:db:23:ce:95:01:42:8e:01:c0:
b1:35:46:6d:0e:25:7b:11:10:10:db:db:89:1c:64:60:a5:2e:
b3:bc:67:ee:67:52:9c:5f:cd:a6:92:82:3c:30:04:b5:99:e2:
5b:58:2d:11:f5:79:34:7b:f4:46:d8:7e:bc:d5:c4:94:46:0c:
39:5e:e8:b2:84:e0:6a:f4:f0:d0:47:51:2e:78:89:fc:7b:7f:
a7:39:dc:55:f8:59:45:b1:8d:47:76:99:3e:18:37:ca:de:76:
6a:5f:8e:99:45:c5:73:c8:98:94:0a:5b:62:b3:8b:2f:45:9b:
43:e6:94:4a:de:82:5f:12:23:8a:54:eb:3d:3a:d2:b0:60:0e:
eb:1e:b5:6e:6f:84:e7:ca:75:53:01:78:e8:73:fd:40:7a:b4:
d0:fc:b9:47:b9:61:b7:d9:d8:90:82:f6:2e:62:b0:b9:be:8e:
46:99:70:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:34:26 2026 by rpki-client