Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
File: dCsbXAdcPTvfo1JdR2sbKGfCoso.mft (raw, json)
Hash identifier: SM0xt2HBUXBPb0dW3b1BjumzzDlTLE6RN9/bR+nKtCE=
Subject key identifier: 5A:09:FF:09:96:CC:D2:F0:D0:60:5A:D6:FC:FB:57:D4:60:53:96:4E
Authority key identifier: 74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
Certificate issuer: /CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Certificate serial: 019D38663F6FB87D0C83B10C14D226D32743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
Manifest number: 15C7
Signing time: Sun 29 Mar 2026 07:01:58 +0000
Manifest this update: Sun 29 Mar 2026 07:01:58 +0000
Manifest next update: Mon 30 Mar 2026 07:01:58 +0000
Files and hashes: 1: dCsbXAdcPTvfo1JdR2sbKGfCoso.crl (hash: nLuDGVcow6dQvzmKh6MTI9tEjfli2g81gqIfOQhZ1Z0=)
2: h8XV-KgY396KZBJ7Bi9YlZn3ShM.roa (hash: fluQLEMS1tYgpv9diRyw7o5a3GxgE3HkE4V51yJi7a8=)
3: oo1W6F0elMF6_CiE6UvVXxLai4o.roa (hash: t1F5I9ggDgCDZTVdA+hfkYMiN/rTAkrjwkTHtKs69BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:3f:6f:b8:7d:0c:83:b1:0c:14:d2:26:d3:27:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Validity
Not Before: Mar 29 07:01:58 2026 GMT
Not After : Mar 30 07:01:58 2026 GMT
Subject: CN=5a09ff0996ccd2f0d0605ad6fcfb57d46053964e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c3:5e:29:29:3d:a8:c3:5b:86:a6:03:d2:97:
2c:f6:8f:51:c4:2f:80:55:e9:cb:f0:68:17:87:0e:
12:85:bb:39:4a:42:3e:c8:0c:1f:4e:ac:85:7e:cc:
ed:99:00:df:42:cf:38:ed:03:89:fb:e3:12:57:50:
88:96:4e:25:9d:cd:d1:45:e2:74:e5:e3:f7:a3:e0:
92:01:fa:2f:10:1f:24:ee:c4:bb:bf:0e:63:c8:0c:
8d:d6:47:ac:00:32:31:10:f3:a4:dd:2d:c3:66:95:
32:9f:0d:83:a0:24:f6:95:07:d1:3a:a4:39:b5:21:
c9:92:9c:b2:19:47:89:fc:75:9e:74:90:30:00:4f:
8c:b9:38:05:9b:18:ed:5a:07:ae:63:a5:0e:70:65:
fb:35:7c:29:47:bd:ed:5f:79:d2:ff:80:d0:6e:dd:
eb:3d:25:4b:ee:58:6c:42:b0:b3:78:bb:77:cd:a2:
12:78:1d:92:42:c5:98:85:4f:7d:ab:92:1e:6b:96:
54:05:76:b5:4e:bc:77:d9:a2:09:86:5a:4e:35:25:
6c:55:9d:f3:2c:8e:6b:07:5a:2b:a1:0b:72:4c:31:
1c:8b:6f:98:b3:ea:f2:d5:0c:10:77:82:cd:35:58:
f5:e3:52:77:9b:ee:f8:f7:f9:b9:52:60:3a:81:1b:
8d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:09:FF:09:96:CC:D2:F0:D0:60:5A:D6:FC:FB:57:D4:60:53:96:4E
X509v3 Authority Key Identifier:
keyid:74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:41:7a:53:a5:11:95:a2:2c:28:d0:86:35:f8:c9:81:2c:8a:
07:40:a6:48:08:61:5b:38:aa:82:f6:7e:5e:43:d5:0e:47:3d:
dc:3d:9f:f5:76:9e:d1:2f:04:68:55:c6:64:f7:d6:e2:f3:57:
3a:86:95:f9:3e:ff:69:df:df:81:62:31:90:c1:db:5b:e3:64:
b2:26:34:aa:99:b3:95:95:79:91:da:da:9b:b6:f2:7a:ae:77:
aa:21:78:ab:cb:eb:fd:b2:85:05:7d:ac:44:da:95:45:cc:94:
db:60:dd:81:e6:29:9f:50:23:f0:da:fa:38:34:93:14:b1:ad:
53:f4:98:4e:d5:11:d1:6e:bb:c7:2d:56:dd:66:57:39:59:7e:
f0:00:f7:ba:b1:e3:07:a4:b7:46:24:e0:64:3a:6b:34:1c:78:
99:85:9d:11:67:63:18:ed:6b:45:cb:47:fa:9f:75:96:df:cd:
c4:92:7b:19:78:95:59:3c:9a:56:07:50:e7:d3:b0:4f:4e:64:
d6:6c:72:a6:c8:6c:c7:d6:18:c6:79:49:d5:0e:18:67:e1:bd:
4d:df:01:9c:50:a6:32:0e:94:9c:e5:56:90:f4:ed:cc:24:a3:
07:73:14:ff:d5:be:84:fc:67:f4:32:2a:ef:69:04:dc:26:cb:
33:3a:b6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:40 2026 by rpki-client