Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
File: cSyZzDOPaS2o-Btxa6150cnXyCA.mft (raw, json)
Hash identifier: 33jRhL4fQPE60r8tx6CVTMWAQ6TWLTGIamuDzNsNuEo=
Subject key identifier: DE:95:7C:80:37:4C:32:E8:1B:F2:3C:37:81:7A:A8:5A:F0:32:25:A6
Authority key identifier: 71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
Certificate issuer: /CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Certificate serial: 01A12BE9095A7F1544B03C304F255ABD87D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
Manifest number: 1A9B
Signing time: Sun 11 Oct 2026 17:00:54 +0000
Manifest this update: Sun 11 Oct 2026 17:00:54 +0000
Manifest next update: Mon 12 Oct 2026 17:00:54 +0000
Files and hashes: 1: BsMYZQ2x4gwaPMUJIJk2WkqpFpw.roa (hash: uRJt0kWvcM/4ik+kay2QDd7hzw9JG0GpAQJN7rBesLo=)
2: cSyZzDOPaS2o-Btxa6150cnXyCA.crl (hash: Fdyu1Jys8hOTk7mzwWVVA6qrh8vuCA/xK2hB8SWEIYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:e9:09:5a:7f:15:44:b0:3c:30:4f:25:5a:bd:87:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Validity
Not Before: Oct 11 17:00:54 2026 GMT
Not After : Oct 12 17:00:54 2026 GMT
Subject: CN=de957c80374c32e81bf23c37817aa85af03225a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:15:cf:49:a8:07:28:6e:24:50:fe:04:26:
d6:a2:fa:5c:35:04:fe:a2:12:02:ac:a7:05:4b:18:
cc:fc:0f:69:f2:42:10:26:2d:a3:aa:3f:fe:bd:cf:
e3:8c:8b:23:40:6f:92:17:86:d2:74:28:ad:e3:79:
9a:ef:76:30:21:7e:7a:fe:e3:5b:25:13:57:08:73:
f2:d0:5d:0b:39:73:48:c2:a6:07:12:f6:37:93:f8:
52:b2:52:02:55:97:6e:a5:21:ed:30:45:e1:74:6b:
8a:15:17:0d:7f:37:6d:99:9c:95:01:74:f3:0c:14:
9c:2c:bb:25:29:42:3a:f0:8b:11:9b:ef:46:27:fe:
9f:2a:a1:e8:03:08:c2:35:ac:58:7b:bd:9a:74:48:
19:2c:5c:be:b9:a2:33:d4:b0:1e:68:d9:2d:e3:0d:
43:b3:3c:2a:e9:cc:01:51:28:ad:0d:5e:22:f2:7b:
88:99:8f:82:23:74:0b:e1:53:6e:2a:84:30:e9:92:
2e:f1:0e:67:9e:b0:e9:9f:e0:87:92:b5:bd:80:4b:
01:09:ca:ad:93:92:45:39:a5:b5:54:f5:ab:26:a8:
74:b4:85:05:30:39:83:20:6a:19:22:19:33:3e:3a:
34:d4:ca:69:6a:5a:e1:80:2e:a4:d8:11:e4:e9:ac:
a8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:95:7C:80:37:4C:32:E8:1B:F2:3C:37:81:7A:A8:5A:F0:32:25:A6
X509v3 Authority Key Identifier:
keyid:71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ce:11:3c:02:1a:77:64:a2:05:6d:b7:7c:93:fd:44:ff:d2:
fe:03:05:ee:c1:c4:88:86:f2:91:98:4c:49:89:a5:90:54:ae:
07:7d:aa:cf:41:9a:5f:6e:de:7a:b3:1d:a6:08:f7:5d:41:ca:
d5:27:3a:cb:89:86:6a:9c:2e:8b:b3:15:f1:0f:79:08:15:8d:
a7:a7:42:6d:09:01:e1:a8:8c:44:68:25:a9:e8:4f:f0:bf:d6:
5e:e5:ca:bf:ab:01:29:6b:75:1b:84:68:1e:2e:16:24:72:4f:
31:45:26:9d:8e:ed:d9:52:59:c2:a2:72:9d:ad:f1:86:b4:27:
8f:15:5c:b3:73:c6:a4:27:7b:76:af:ff:0e:83:26:30:da:0b:
dc:32:4f:ff:eb:65:f6:eb:01:bb:a2:74:0c:aa:f9:37:9b:4d:
35:82:d8:43:74:53:52:21:97:89:a2:b1:0d:26:eb:42:66:c3:
9a:b3:2b:bf:80:f2:85:fd:4e:55:b3:fa:93:60:47:85:ed:06:
af:e7:b8:a1:14:67:a5:14:c8:a7:92:cc:bc:5f:a5:af:f7:d1:
52:19:aa:2e:ca:5e:5a:32:65:d9:15:f7:42:7a:94:cd:19:70:
9a:8a:8b:ee:f3:fc:2a:48:c2:3d:38:d0:04:c9:fa:dd:7c:fb:
50:4d:01:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:26:29 2026 by rpki-client