Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
File: csOpo60yCo_GG1-HifUl0H5b4lE.mft (raw, json)
Hash identifier: zi6iJ+3Iemw0GBQJGGPtcCzUwuqhha3b94Bkb42xM/4=
Subject key identifier: 5E:5D:9E:C8:3B:0F:18:45:A0:DF:87:F7:AF:BD:C6:4D:D9:6B:E3:DF
Authority key identifier: 72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51
Certificate issuer: /CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251
Certificate serial: 019D38D2E69C50E26F10DD7A884D5A868F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
Manifest number: 167F
Signing time: Sun 29 Mar 2026 09:00:38 +0000
Manifest this update: Sun 29 Mar 2026 09:00:38 +0000
Manifest next update: Mon 30 Mar 2026 09:00:38 +0000
Files and hashes: 1: YGNT5pqPZu181hM9KnN1W6l6JfA.roa (hash: /u8IipOD0TJq7/K9Iib+hkESBCEfhRJpznMeAkMobZQ=)
2: csOpo60yCo_GG1-HifUl0H5b4lE.crl (hash: 7hM7lJ+CJMOcYUymzrCT/xF65IJVgIy2CWG15jpXoCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e6:9c:50:e2:6f:10:dd:7a:88:4d:5a:86:8f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251
Validity
Not Before: Mar 29 09:00:38 2026 GMT
Not After : Mar 30 09:00:38 2026 GMT
Subject: CN=5e5d9ec83b0f1845a0df87f7afbdc64dd96be3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3c:51:90:d5:fa:82:43:6b:f3:fc:4d:89:b6:
93:67:1f:7e:69:ba:4d:24:02:c9:b6:16:3d:fe:ca:
4f:5b:9e:74:5a:93:93:ff:1e:61:c7:32:51:ed:7a:
49:c5:92:c1:5b:c9:b5:e7:f7:fd:55:62:ed:81:af:
43:80:89:99:3c:67:e4:83:e1:b1:32:df:bd:90:35:
1f:bf:83:ec:3d:ab:ed:35:ed:52:e5:39:03:0b:29:
90:80:ba:9c:bd:93:d2:51:46:8d:6f:84:77:59:dc:
e3:67:88:7d:35:37:a8:3d:5c:b7:c5:30:34:29:43:
18:cf:a4:ca:01:7c:14:21:ee:dd:6d:6c:eb:a2:95:
7a:83:75:8b:93:5a:7a:01:74:7a:53:7f:d5:d2:da:
85:73:6d:eb:18:e3:03:d4:59:07:f1:29:a7:4e:75:
d2:7c:3e:be:d0:d1:8f:b8:bd:3b:9d:68:f2:21:bc:
4e:b5:c0:c3:ff:a7:05:13:a5:66:66:29:41:43:ae:
29:54:dc:03:b5:6a:31:ad:6c:4f:cb:18:5a:fc:46:
57:6c:48:80:ff:b8:b9:35:22:5a:f6:dd:2b:63:be:
5a:dd:44:04:56:64:19:a3:c1:49:7b:5a:58:f4:f0:
f7:a2:8b:8c:8a:2e:20:43:77:d0:55:b1:32:a5:97:
a1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5D:9E:C8:3B:0F:18:45:A0:DF:87:F7:AF:BD:C6:4D:D9:6B:E3:DF
X509v3 Authority Key Identifier:
keyid:72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:28:14:ae:b6:01:1a:38:30:3c:f2:21:08:63:52:f1:59:dc:
95:0d:06:42:40:28:da:bf:55:88:9d:da:27:15:16:8c:6f:40:
8a:74:98:82:b0:f8:6a:81:f2:af:3c:31:26:f9:b9:8e:62:70:
86:22:83:99:65:96:4a:12:41:7a:b8:51:13:67:95:4e:c9:0f:
9b:39:b2:ad:c9:bb:56:62:8f:c1:14:c8:f8:0e:58:39:67:fb:
4c:51:0b:c4:6f:83:d2:ae:39:9f:52:a9:39:5a:36:a1:33:d7:
f4:9a:25:71:17:52:6a:0d:27:0f:c5:ce:ff:f8:8c:28:de:a6:
ed:86:02:97:7b:06:ca:8d:7c:48:5a:1d:b6:a2:bf:99:15:33:
92:32:f3:fc:b5:7e:c1:90:df:7e:ba:ec:5f:c0:e1:ee:42:49:
be:90:3a:c3:69:e2:42:49:e6:ac:4e:08:b9:af:0d:6b:05:87:
ed:ee:27:51:46:88:0e:ba:8c:e3:a2:c3:f3:d6:cb:e9:d2:f1:
b7:ea:50:15:9c:07:9e:cb:1e:b6:b5:7c:03:97:8d:63:41:e0:
bc:63:68:44:02:d1:c6:77:67:c6:f4:11:cc:17:06:d5:1f:70:
b0:23:de:7b:25:7f:3c:d9:97:b3:30:42:1b:36:7c:41:8e:8d:
92:54:e0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:23 2026 by rpki-client