Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
File: CsFWWl9sTlTKLxnTZHWbag7WGEA.mft (raw, json)
Hash identifier: 3pdc2dTS5BkKs/3YqesYwNqTSyhnRdMNVcyWFWqWoGA=
Subject key identifier: 4D:7F:E5:B0:06:D9:4E:CF:A2:33:17:E2:DC:57:6C:D6:EF:54:24:DE
Authority key identifier: 0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40
Certificate issuer: /CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
Certificate serial: 019D3909978AC79764FEC6C6BDF5CE067375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 10:00:23 +0000
Manifest this update: Sun 29 Mar 2026 10:00:23 +0000
Manifest next update: Mon 30 Mar 2026 10:00:23 +0000
Files and hashes: 1: CsFWWl9sTlTKLxnTZHWbag7WGEA.crl (hash: KnEC+gYyT4F+Ino/bGGRMXbhNRMhFMhbsgFBpA+fL30=)
2: v89NCrFwQeDvFifuIbe7lcr1Vdg.roa (hash: 8lNS9jprfqrQ4KnCohT8hKELj4DY0q7OpHWa2tkRvdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:97:8a:c7:97:64:fe:c6:c6:bd:f5:ce:06:73:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
Validity
Not Before: Mar 29 10:00:23 2026 GMT
Not After : Mar 30 10:00:23 2026 GMT
Subject: CN=4d7fe5b006d94ecfa23317e2dc576cd6ef5424de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:70:e7:81:15:f5:4b:b0:4a:6b:07:32:d5:88:
49:6a:51:fc:42:ae:28:f1:ae:5f:83:c8:cb:0a:63:
e9:03:f8:50:65:fa:c6:6b:28:2a:08:a3:e8:60:c9:
49:6d:1a:70:f8:ec:ae:fb:ac:7b:60:17:f9:9f:1d:
b3:34:19:89:fa:b8:ec:57:48:a3:2b:db:af:5f:dd:
35:98:c8:ba:96:eb:a0:28:f2:54:60:ec:13:4e:e2:
74:f1:4e:a2:ee:04:2f:fd:01:09:eb:a4:32:5e:1f:
f3:16:f2:5a:4e:12:da:6a:7b:7e:2c:38:db:87:b4:
93:59:54:ec:7e:28:0a:a2:86:8a:8b:4c:1c:67:28:
f3:64:67:f3:27:84:0a:a9:1b:6d:0c:45:79:bf:16:
96:5a:a7:5e:b9:87:26:af:2c:0f:fa:5e:e5:1f:2f:
5a:96:60:c8:e1:ff:82:9e:d7:fc:3b:f6:7f:b9:3d:
50:27:db:e5:ca:11:6a:5b:06:e8:72:82:d4:e9:26:
62:0f:df:35:4a:bd:0c:c8:49:83:95:d4:1c:2e:e0:
a6:06:12:1c:50:8f:18:a8:f4:ed:a3:1c:22:57:d0:
93:42:ab:2a:8b:db:18:de:aa:3a:17:f0:04:c1:f0:
53:7f:65:4e:30:25:1d:90:2b:f2:e7:c9:46:ed:06:
b6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7F:E5:B0:06:D9:4E:CF:A2:33:17:E2:DC:57:6C:D6:EF:54:24:DE
X509v3 Authority Key Identifier:
keyid:0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:19:17:5c:18:b4:d9:43:d5:3d:d9:28:1b:04:53:f5:14:b5:
93:4c:75:81:71:7b:a9:6b:2d:6f:93:86:ae:e1:de:9e:43:e4:
a9:df:dc:72:2b:0c:6a:e3:60:c2:1f:cd:b8:df:e0:c3:e8:d5:
e3:e0:c1:0c:73:1d:a3:74:36:99:37:13:e0:03:b1:b6:cb:69:
a3:54:7b:e4:6d:d4:5e:a8:9a:5a:16:1b:e4:69:47:a0:7e:79:
76:ef:3e:7f:04:70:fd:05:42:18:9f:5f:2c:91:e6:90:ea:67:
51:c8:17:c7:42:82:3c:b5:73:f8:91:16:f4:1e:f0:bc:69:cd:
94:81:de:b9:07:4e:9f:19:ca:ce:54:86:e2:bb:c4:6b:dd:ea:
16:10:dc:28:b6:c4:d2:5b:6c:64:ff:d5:02:8b:a5:cd:38:a4:
8f:d4:9b:23:d4:3d:d4:3e:1e:bc:68:8b:96:0a:a1:8f:4f:97:
19:a5:64:b6:37:e1:9f:12:3a:b0:1e:89:ec:db:99:9b:47:77:
71:ad:34:e7:36:5d:ab:93:75:b9:02:ce:b9:33:a5:ad:82:9e:
32:cf:66:e1:d7:7e:63:b5:60:f6:d8:23:18:ff:e3:05:07:ac:
52:f5:dc:4c:01:0e:60:ac:67:88:19:e6:15:17:ec:c4:0e:70:
73:62:c8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:00 2026 by rpki-client