Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
File: csoaXP9S6-LyK2adzCyQJ86guBw.mft (raw, json)
Hash identifier: Nfrp7DlrOmxlrMUQSZjmbN081iwXGXMFZ8raGwmpiSs=
Subject key identifier: 00:4E:90:E8:D8:F7:E1:8B:A3:9B:C0:88:0D:57:96:88:9E:7E:86:59
Authority key identifier: 72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
Certificate issuer: /CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Certificate serial: 01A002B8FB9E478655939E81D2EC1E1640C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
Manifest number: 1969
Signing time: Sat 15 Aug 2026 00:01:12 +0000
Manifest this update: Sat 15 Aug 2026 00:01:12 +0000
Manifest next update: Sun 16 Aug 2026 00:01:12 +0000
Files and hashes: 1: 2lc1GZ3gGSQDIoRqW1OdY8NXkpE.roa (hash: yHk/HPXIpPTEO2mErbNUbyRInwqWmQhiOnI/WtPGa8o=)
2: csoaXP9S6-LyK2adzCyQJ86guBw.crl (hash: LqdnIwj3aN6ooFIrw0V5E4NbQ05H9OQBsjXKq6s0k4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b8:fb:9e:47:86:55:93:9e:81:d2:ec:1e:16:40:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Validity
Not Before: Aug 15 00:01:12 2026 GMT
Not After : Aug 16 00:01:12 2026 GMT
Subject: CN=004e90e8d8f7e18ba39bc0880d5796889e7e8659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:c0:fb:63:f4:16:21:96:41:9b:b2:51:49:
4c:c7:3d:e4:05:73:1a:93:c6:b2:58:b4:98:be:03:
2a:84:5b:7f:ee:56:22:6c:a6:8f:fe:f9:98:83:00:
d8:7d:cd:c8:3e:92:90:5a:bc:4d:0b:71:bb:cf:e0:
5c:00:34:11:a3:d6:17:fa:7a:29:4d:34:04:5d:19:
62:df:d1:65:02:03:ef:4e:dc:e2:a2:ef:60:c5:2c:
4f:70:b0:55:67:84:55:5f:55:22:48:43:4b:ef:a0:
c8:52:42:95:43:81:9f:0c:c9:cc:d0:53:17:01:eb:
e3:2c:23:b8:4c:a5:e6:b0:4f:fb:12:1d:9c:41:97:
25:ee:8f:51:8e:31:14:8e:45:d4:77:f0:28:46:8d:
14:59:f9:f9:12:0d:07:3b:11:71:1d:03:89:19:7a:
24:34:a5:8b:6a:13:f9:d8:d2:2d:4c:6b:09:b1:0c:
9c:0a:87:f7:f0:02:ec:26:ee:23:ea:f0:4b:59:b2:
1b:72:58:1f:cf:64:35:59:b3:7e:84:1d:fb:56:d9:
27:4f:23:50:f5:2e:72:66:b6:86:4e:a6:70:02:89:
38:f2:45:cb:ef:27:a9:87:7e:f2:9b:ba:d3:92:55:
6b:fd:19:74:e6:95:63:0d:4e:62:36:2d:c9:5a:77:
d2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4E:90:E8:D8:F7:E1:8B:A3:9B:C0:88:0D:57:96:88:9E:7E:86:59
X509v3 Authority Key Identifier:
keyid:72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:0b:f9:18:1c:ce:27:22:46:29:d1:05:d1:3d:bc:08:4c:7d:
34:c2:f1:49:92:a6:02:45:3d:5d:3e:75:38:57:30:bc:65:9c:
44:86:8e:9f:5f:d6:0b:56:f2:80:eb:e6:8d:c2:b0:98:84:d8:
17:46:20:2f:53:9e:bf:1d:07:5c:05:03:0b:a9:28:d0:05:53:
3a:ba:70:21:d8:fa:3d:13:84:1f:65:da:84:69:a5:2a:db:cf:
b6:d9:6b:f7:9c:6e:57:45:b2:45:8c:3c:37:59:1a:77:0e:e9:
bb:17:44:f2:6c:7e:c8:f8:89:d5:09:b7:81:e0:fb:38:9d:67:
76:01:73:1d:44:0a:a5:04:ca:89:4e:af:90:35:1a:e2:da:21:
25:a1:32:64:6a:01:97:04:e3:d0:0b:bb:5b:f4:aa:15:ec:c6:
67:b8:4d:48:45:31:6f:70:23:dd:70:25:20:6d:38:58:38:ad:
ab:69:67:67:9b:fe:d1:14:1a:8d:d2:43:a8:05:8a:ac:b9:59:
10:ce:28:f5:18:8e:fa:54:59:3e:8b:3a:7b:80:cc:80:5d:57:
a6:de:88:29:50:2e:85:72:c7:ff:d0:0d:34:78:00:2d:9a:f8:
e0:1d:33:fc:98:c6:f6:b5:2e:18:59:20:e8:e6:55:51:1b:fc:
c0:12:d9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:04:17 2026 by rpki-client