Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
File: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft (raw, json)
Hash identifier: 2JF0VJwO2rZHgo7hZ/Y5GXwal3kDdYAQ1OUugZSq7y8=
Subject key identifier: 16:87:F0:02:55:52:9F:C5:0B:50:B2:4A:C6:7D:91:DE:48:5D:DE:4E
Authority key identifier: 09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
Certificate issuer: /CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Certificate serial: 019D3941257D24BB9A096EF02106C24FE3BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
Manifest number: 02EB
Signing time: Sun 29 Mar 2026 11:01:03 +0000
Manifest this update: Sun 29 Mar 2026 11:01:03 +0000
Manifest next update: Mon 30 Mar 2026 11:01:03 +0000
Files and hashes: 1: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl (hash: y7hWJkB9N9snEff2HSlBVJ9CTuLh2bqbHFtc5Ihfe4Q=)
2: W-m52T0Z08ZrHduyI7qeLJtkavg.roa (hash: 2uTxxd+gJUWVWBJ1knmrNyKxA15WrS87ku3rDDp8keE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:25:7d:24:bb:9a:09:6e:f0:21:06:c2:4f:e3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Validity
Not Before: Mar 29 11:01:03 2026 GMT
Not After : Mar 30 11:01:03 2026 GMT
Subject: CN=1687f00255529fc50b50b24ac67d91de485dde4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:30:ae:75:a6:b3:eb:a8:96:00:ef:40:7e:db:
05:c9:37:f3:86:86:ac:da:6f:4f:df:05:88:15:45:
d0:e4:7f:76:d3:34:f0:40:81:f5:0d:6d:89:03:32:
4d:bc:84:d9:01:c2:33:6f:3f:c4:6c:d3:77:13:e9:
17:49:74:e1:30:0d:25:d4:ac:a4:64:72:b4:a1:6e:
07:b4:93:7a:47:bd:55:8d:3e:a7:9a:d4:9b:f2:f4:
f2:8c:fe:02:f6:5a:92:b7:7c:4e:e2:11:80:a9:83:
89:67:4f:11:14:f5:df:0b:8d:cc:c4:96:87:99:52:
28:f0:88:20:6b:d8:18:8e:78:94:56:a1:b2:3f:17:
0a:c8:c9:c2:fa:ed:cc:fb:a0:e8:24:e9:c5:25:26:
b0:24:d1:44:2d:3c:95:78:8d:6a:4c:6d:d6:48:89:
c6:63:ac:82:96:a2:93:d6:fb:3e:1e:e5:f3:fa:9c:
38:de:e6:2d:96:97:89:fa:40:bc:fb:7f:de:7f:20:
4f:f8:68:58:a3:83:fc:ec:7c:10:a4:a8:92:d9:66:
8d:5a:53:aa:50:5d:88:89:c3:e4:c9:bd:28:c2:6f:
c5:d6:d4:ef:28:67:11:a1:17:63:df:89:cc:58:71:
5a:90:29:75:fc:35:23:e1:8c:16:b4:c5:3b:34:57:
27:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:87:F0:02:55:52:9F:C5:0B:50:B2:4A:C6:7D:91:DE:48:5D:DE:4E
X509v3 Authority Key Identifier:
keyid:09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f8:a7:fd:5a:39:ee:17:92:8f:57:a4:a9:d8:96:46:31:aa:
9c:70:fe:8d:2a:f3:d4:71:60:00:39:70:4e:62:de:66:13:f8:
61:14:3f:a4:85:be:dc:bd:b9:df:35:3d:6f:85:27:3c:e5:f8:
d8:e3:d5:35:d9:8b:f2:d3:32:ca:3a:f7:bf:f2:9e:f9:56:b7:
21:ff:31:10:62:25:56:36:58:12:96:90:53:b8:d0:da:7a:74:
91:0d:3c:6d:d3:a8:45:12:09:ed:c9:76:aa:3f:e6:3b:b6:45:
52:a0:c4:a5:30:63:0d:c5:36:50:61:bb:87:e1:8c:3f:c7:7f:
b3:a3:9a:fb:bf:91:02:dc:1f:46:8f:82:c0:a5:57:e6:4e:4b:
21:ae:66:4d:2a:cb:61:9e:69:66:b1:73:06:fa:f7:a5:10:e0:
3d:6c:1e:b2:a0:db:99:73:be:58:67:b7:ca:a6:f1:8e:7a:0b:
1b:e2:d8:0d:28:a9:64:46:ca:48:5f:21:66:f0:ec:70:43:c9:
f0:fd:6a:fe:e0:dc:2e:3b:68:da:49:ee:f5:8d:f6:2e:60:0d:
de:44:7f:bf:ed:f2:45:40:4d:75:19:0a:f6:9a:54:7a:5e:e5:
2b:c6:71:ff:78:a7:59:6d:32:95:62:b4:82:f9:eb:7b:66:c8:
70:2f:d7:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QSV9JLuaCW7wIQbCT+O6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MmJlNzYyZmJiMTBmZWU0MmQ2ZGU1NTY3OTM2ZWNkMWY4
M2RlZDUwHhcNMjYwMzI5MTEwMTAzWhcNMjYwMzMwMTEwMTAzWjAzMTEwLwYDVQQD
EygxNjg3ZjAwMjU1NTI5ZmM1MGI1MGIyNGFjNjdkOTFkZTQ4NWRkZTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTCudaaz66iWAO9AftsFyTfzhoas
2m9P3wWIFUXQ5H920zTwQIH1DW2JAzJNvITZAcIzbz/EbNN3E+kXSXThMA0l1Kyk
ZHK0oW4HtJN6R71VjT6nmtSb8vTyjP4C9lqSt3xO4hGAqYOJZ08RFPXfC43MxJaH
mVIo8Igga9gYjniUVqGyPxcKyMnC+u3M+6DoJOnFJSawJNFELTyVeI1qTG3WSInG
Y6yClqKT1vs+HuXz+pw43uYtlpeJ+kC8+3/efyBP+GhYo4P87HwQpKiS2WaNWlOq
UF2IicPkyb0owm/F1tTvKGcRoRdj34nMWHFakCl1/DUj4YwWtMU7NFcnhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaH8AJVUp/FC1CySsZ9kd5IXd5OMB8GA1UdIwQY
MBaAFAkr52L7sQ/uQtbeVWeTbs0fg97VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1N2bll2dXhELTVDMXQ1Vlo1TnV6Ui1EM3RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hYWMzZWItMGNiNC00ZTIzLTlmNzAt
Yzk0MGFkM2MwMDhhLzEvQ1N2bll2dXhELTVDMXQ1Vlo1TnV6Ui1EM3RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hYWMzZWItMGNiNC00ZTIzLTlmNzAtYzk0MGFkM2MwMDhh
LzEvQ1N2bll2dXhELTVDMXQ1Vlo1TnV6Ui1EM3RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvin/Vo5
7heSj1ekqdiWRjGqnHD+jSrz1HFgADlwTmLeZhP4YRQ/pIW+3L253zU9b4UnPOX4
2OPVNdmL8tMyyjr3v/Ke+Va3If8xEGIlVjZYEpaQU7jQ2np0kQ08bdOoRRIJ7cl2
qj/mO7ZFUqDEpTBjDcU2UGG7h+GMP8d/s6Oa+7+RAtwfRo+CwKVX5k5LIa5mTSrL
YZ5pZrFzBvr3pRDgPWwesqDbmXO+WGe3yqbxjnoLG+LYDSipZEbKSF8hZvDscEPJ
8P1q/uDcLjto2knu9Y32LmAN3kR/v+3yRUBNdRkK9ppUel7lK8Zx/3inWW0ylWK0
gvnre2bIcC/Xtw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:56 2026 by rpki-client