Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
File: csoaXP9S6-LyK2adzCyQJ86guBw.mft (raw, json)
Hash identifier: nhZm+v+CmN21XsapuUrVijapJ7+qrtNcAfI666y3ITA=
Subject key identifier: E1:F6:0B:24:F8:37:FD:5D:E3:20:E4:C4:D7:E2:0B:8C:E8:0C:B0:A0
Authority key identifier: 72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
Certificate issuer: /CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Certificate serial: 019F152F19A53F8660E95B8DCA27C50DE3F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
Manifest number: 18EE
Signing time: Mon 29 Jun 2026 21:00:36 +0000
Manifest this update: Mon 29 Jun 2026 21:00:36 +0000
Manifest next update: Tue 30 Jun 2026 21:00:36 +0000
Files and hashes: 1: 2lc1GZ3gGSQDIoRqW1OdY8NXkpE.roa (hash: yHk/HPXIpPTEO2mErbNUbyRInwqWmQhiOnI/WtPGa8o=)
2: csoaXP9S6-LyK2adzCyQJ86guBw.crl (hash: on4xkjwpYfLQubp1GoQOb7am1dg8I6qS3xoi5hbn8m4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:15:2f:19:a5:3f:86:60:e9:5b:8d:ca:27:c5:0d:e3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Validity
Not Before: Jun 29 21:00:36 2026 GMT
Not After : Jun 30 21:00:36 2026 GMT
Subject: CN=e1f60b24f837fd5de320e4c4d7e20b8ce80cb0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a5:31:51:f3:61:72:62:4b:34:8e:5c:49:62:
d4:2e:ce:ee:33:e1:15:88:83:9e:4e:2a:a0:d2:c9:
77:bc:be:34:93:91:93:8a:d9:c3:41:72:f7:f7:07:
76:72:ff:8d:c5:e5:22:b0:d5:e6:8e:e9:dd:72:2b:
6e:ac:c4:b1:ce:de:0f:0f:47:6b:86:4d:19:4d:74:
37:d5:9d:43:6f:c7:d7:eb:e4:ec:4c:36:e4:52:ab:
a9:73:e0:4d:66:fc:a7:92:ce:3d:50:29:40:e9:cc:
c7:30:70:bf:30:16:b3:58:66:fc:e8:21:be:bf:1f:
24:ab:44:6a:53:1a:2f:f7:03:6d:4a:dc:44:34:54:
8b:97:d1:a9:73:c2:55:90:69:fd:44:da:9f:94:1b:
5b:43:ac:2a:b3:56:9a:2e:b7:30:56:22:37:6d:fc:
5a:05:b3:01:fc:a3:4d:33:d0:73:64:2d:87:7f:88:
9a:0c:96:2c:6b:21:3e:5c:3d:f9:ba:37:16:fc:75:
4d:d6:17:ec:c4:e6:01:57:04:72:3a:2a:1c:19:7f:
8b:a3:f1:19:42:70:7f:9a:29:e5:02:06:03:fa:04:
0d:2d:00:ef:d6:30:58:96:7b:c0:1d:83:b3:3d:4a:
05:01:9f:37:b8:31:fe:fe:19:7b:9a:66:44:8d:6c:
f3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F6:0B:24:F8:37:FD:5D:E3:20:E4:C4:D7:E2:0B:8C:E8:0C:B0:A0
X509v3 Authority Key Identifier:
keyid:72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1c:c9:d6:10:33:23:03:f6:5c:f5:a8:f2:28:a1:e6:7d:8a:
79:74:b1:fe:a7:9d:a9:d1:79:b8:5e:10:c2:0f:cd:fb:ac:45:
7e:46:d6:fe:4a:01:b7:a3:fe:49:14:d3:dc:7f:29:8d:8e:0b:
e8:85:94:61:c7:a9:dc:e1:a0:f5:0f:db:f7:ad:cb:eb:df:13:
26:e2:20:28:94:0f:a8:5e:6b:e3:bb:18:0a:d4:d5:ba:69:8e:
6b:83:42:ee:24:a3:c8:7d:ba:0a:52:4a:79:57:54:db:96:34:
2d:33:06:bc:cb:65:41:d7:5b:00:87:b8:ce:49:07:73:5d:bb:
1b:86:f2:52:0c:8b:eb:08:f7:5f:b9:82:1b:4f:72:75:fe:2e:
56:1b:8d:24:89:ff:28:a0:04:ab:65:a6:90:27:9f:7b:da:e9:
21:1a:9c:6c:ee:0a:85:4c:2b:6f:40:c9:e2:d5:dc:68:e1:e5:
2d:ea:d2:dc:b8:fa:f5:26:dd:79:cb:04:9b:8b:4d:22:73:7a:
68:f3:31:25:27:b9:93:c2:67:26:cb:9c:cb:4d:93:d8:97:87:
a1:d4:ef:b2:5a:c7:19:20:47:69:00:3d:1a:f8:6a:eb:de:06:
a3:44:6b:54:f9:77:37:bc:41:9b:ec:23:8b:df:a0:f8:9d:ca:
cb:95:98:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 23:12:09 2026 by rpki-client