Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
File: csoaXP9S6-LyK2adzCyQJ86guBw.mft (raw, json)
Hash identifier: lN7qPom3lJKXkqz7FQnrQAaPrWm3ILHUlNn4WaCNq48=
Subject key identifier: 94:42:8F:93:5D:8B:24:77:EC:28:8E:F3:79:82:38:EE:80:27:CE:89
Authority key identifier: 72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
Certificate issuer: /CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Certificate serial: 019D382E275D24996AF1CCBF63D0B7836118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
Manifest number: 17F7
Signing time: Sun 29 Mar 2026 06:00:41 +0000
Manifest this update: Sun 29 Mar 2026 06:00:41 +0000
Manifest next update: Mon 30 Mar 2026 06:00:41 +0000
Files and hashes: 1: 2lc1GZ3gGSQDIoRqW1OdY8NXkpE.roa (hash: yHk/HPXIpPTEO2mErbNUbyRInwqWmQhiOnI/WtPGa8o=)
2: csoaXP9S6-LyK2adzCyQJ86guBw.crl (hash: m6BZa6wSwrqNDOLQg4JSslKmMCBlD6G6kp+nEMXGg5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:27:5d:24:99:6a:f1:cc:bf:63:d0:b7:83:61:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Validity
Not Before: Mar 29 06:00:41 2026 GMT
Not After : Mar 30 06:00:41 2026 GMT
Subject: CN=94428f935d8b2477ec288ef3798238ee8027ce89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:77:3c:23:06:10:63:7e:c3:50:e0:ee:a0:50:
ed:41:e9:33:45:78:f4:94:b7:6a:3a:03:7f:5e:1a:
92:60:e0:d7:98:88:26:16:22:04:cf:23:e2:71:66:
46:40:ea:fb:ed:82:9b:ac:6d:36:c5:c6:c1:38:67:
ff:80:fc:d3:71:e4:21:a9:8a:7c:35:63:38:7d:54:
86:37:ae:e6:c3:c4:3d:92:4c:2e:25:26:cf:b0:bd:
a9:e3:1d:21:e6:13:62:fa:a2:0f:1e:68:30:19:40:
42:27:2a:96:d2:69:d2:a7:5d:25:4e:36:c0:91:65:
2d:88:ec:4e:73:18:da:54:8e:a6:02:4a:e7:07:09:
9a:46:39:c1:0a:70:59:6b:1e:29:20:28:0d:4c:c1:
7e:02:cb:41:c1:8d:dc:68:b3:0d:05:91:6a:25:31:
30:5f:ba:59:1a:7c:95:ce:02:aa:c4:74:5b:bc:80:
78:42:2e:ad:8f:c6:cd:68:71:0e:76:2f:6b:ea:6c:
8f:f5:b3:4b:af:88:f2:3f:3a:0f:53:86:e4:c5:f4:
86:00:c2:b9:cd:e9:25:37:96:c4:4a:c3:00:24:b8:
64:9b:84:eb:1d:44:2b:6e:17:e3:0d:db:cb:53:fb:
a3:44:f9:bb:39:70:7f:89:b3:aa:70:e0:8a:89:4a:
64:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:42:8F:93:5D:8B:24:77:EC:28:8E:F3:79:82:38:EE:80:27:CE:89
X509v3 Authority Key Identifier:
keyid:72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:8f:ff:f2:2e:73:6e:dc:ed:f4:39:b4:68:84:85:22:3d:45:
65:48:b2:77:18:7f:28:60:73:92:fd:e5:57:87:19:69:ed:9c:
91:1d:5c:b2:3f:20:72:36:bc:08:ce:63:90:84:e0:b9:12:77:
26:4b:46:5d:21:a0:0e:80:00:21:40:d9:b6:5a:29:3a:fb:24:
45:b2:8b:98:9f:d2:da:cf:8b:e0:7a:f1:23:51:22:f0:ca:5d:
23:0b:ca:89:40:c4:28:85:06:5d:7a:20:65:ba:aa:e8:3b:e7:
b3:68:91:76:9e:f2:2f:a5:f7:3a:24:d5:82:53:ff:61:d1:74:
14:c3:68:50:e7:9c:7f:93:92:a4:c4:b1:eb:9d:25:c9:ac:c4:
7e:29:83:69:b1:42:e5:47:1d:ee:51:e7:9b:8f:e1:4c:6d:86:
a9:ba:e3:3e:18:98:b1:55:a4:5c:be:55:0d:2a:60:c1:c7:d5:
51:85:a2:d2:52:cc:71:e4:d9:7a:fa:8e:28:df:06:4e:fe:12:
4e:a6:d3:27:7f:2c:bc:4a:81:3c:d5:43:8d:a5:15:41:d9:d1:
e6:00:73:81:e3:7f:47:e4:e9:c9:65:70:4f:eb:50:60:c5:2a:
8b:ea:56:47:25:e8:87:11:f1:71:fe:03:d5:4c:c7:6e:af:df:
5d:0d:ce:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:39 2026 by rpki-client