Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
File: cSyZzDOPaS2o-Btxa6150cnXyCA.mft (raw, json)
Hash identifier: FKIuu6UbzJWRgHBETSQiQWkLXZDkrJ2qGXSTWdgbIZE=
Subject key identifier: DD:4D:9B:00:31:BF:6A:66:BF:97:CB:EE:EA:2C:CA:A9:CE:CC:2D:B4
Authority key identifier: 71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
Certificate issuer: /CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Certificate serial: 019D37F72AA8CDA75867DDD2AC20EE9CD2C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 05:00:38 +0000
Manifest this update: Sun 29 Mar 2026 05:00:38 +0000
Manifest next update: Mon 30 Mar 2026 05:00:38 +0000
Files and hashes: 1: BsMYZQ2x4gwaPMUJIJk2WkqpFpw.roa (hash: uRJt0kWvcM/4ik+kay2QDd7hzw9JG0GpAQJN7rBesLo=)
2: cSyZzDOPaS2o-Btxa6150cnXyCA.crl (hash: mMr4W98ZzrFit8dy7SXTzvrr32gEXHufBUsV11ya3zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:2a:a8:cd:a7:58:67:dd:d2:ac:20:ee:9c:d2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Validity
Not Before: Mar 29 05:00:38 2026 GMT
Not After : Mar 30 05:00:38 2026 GMT
Subject: CN=dd4d9b0031bf6a66bf97cbeeea2ccaa9cecc2db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d7:ba:40:e5:10:12:0d:e9:dc:5e:31:25:ec:
b6:5e:a9:f4:c4:b9:92:fa:b0:02:19:0b:d0:5e:3f:
18:3e:eb:dd:6e:bd:66:59:b5:c8:51:91:30:e6:fb:
b4:4d:96:98:79:ac:5d:9f:e7:b7:a3:00:cc:c8:43:
03:03:53:3a:54:87:b1:c2:42:7e:94:7e:29:be:af:
4f:9e:61:ba:a5:cd:07:cf:b9:94:15:1c:22:a5:0a:
65:9c:23:2c:9d:76:25:50:80:95:93:6e:e1:0b:05:
9d:c2:d4:c9:d0:ed:90:60:e4:50:63:b0:78:e7:a6:
0f:cf:4b:c4:29:53:c5:90:77:ec:97:f3:61:a1:71:
b3:e4:a1:4f:bc:08:bb:a1:e7:a1:e7:97:b6:61:a4:
20:05:b6:a0:61:d9:fc:65:e5:8a:8e:d8:98:51:bf:
e6:f3:e3:be:c4:4c:7e:81:ac:27:d0:a8:81:b7:a2:
73:ab:cb:60:87:0c:61:b7:65:29:26:ea:87:e6:79:
7c:76:38:31:c3:11:06:79:dd:e2:5b:09:8e:0f:1f:
9e:ca:91:a5:e0:aa:3e:8e:d4:83:a4:1f:3d:40:d7:
40:37:97:e2:3f:03:12:fd:af:f3:8f:c6:c6:a2:4f:
e3:e3:f9:c5:ef:e6:9e:ae:79:0b:95:cb:b8:55:4e:
71:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4D:9B:00:31:BF:6A:66:BF:97:CB:EE:EA:2C:CA:A9:CE:CC:2D:B4
X509v3 Authority Key Identifier:
keyid:71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:80:0b:19:a7:23:a7:a8:fc:eb:af:b1:2d:a2:5e:5c:b8:09:
5d:8b:70:3a:4c:76:0e:96:d6:ef:c4:7e:f6:81:38:db:40:50:
92:8a:47:6c:21:3b:00:e4:a0:90:c8:b1:00:cc:fe:72:16:da:
03:bf:87:fb:c7:8a:0f:b9:b1:9d:c7:0c:0b:89:d0:02:f6:b5:
9a:5e:5b:3f:0c:8e:57:2e:7d:6c:80:e2:b3:bb:c1:19:49:55:
04:5c:ee:aa:b9:4d:e5:fe:cc:81:35:e7:d2:2a:06:ba:bc:ce:
b2:21:f7:5d:65:81:df:cd:5f:96:0a:d4:c9:32:ce:d0:ce:e3:
5a:1a:b1:9c:69:2f:48:2b:5e:98:b4:e8:21:4c:51:c4:99:53:
17:f8:24:df:3a:8f:ee:c1:74:15:a8:6b:51:03:28:e6:9b:e9:
80:9a:69:64:c6:19:7c:a0:61:b2:62:7c:3b:c5:c9:88:a4:0a:
81:89:b7:b2:d4:5b:5d:08:b3:eb:15:62:59:f4:de:46:87:81:
2e:8a:7b:fa:7b:7b:41:42:c0:e7:9e:37:ff:52:c5:55:d3:12:
73:c1:84:63:5b:96:1c:d8:56:6d:23:5f:02:0f:f3:23:12:58:
d6:bc:85:f7:de:ab:bc:54:9b:03:40:5b:a0:24:ad:df:0d:5c:
ec:0d:c9:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039yqozadYZ93SrCDunNLEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMmM5OWNjMzM4ZjY5MmRhOGY4MWI3MTZiYWQ3OWQxYzlk
N2M4MjAwHhcNMjYwMzI5MDUwMDM4WhcNMjYwMzMwMDUwMDM4WjAzMTEwLwYDVQQD
EyhkZDRkOWIwMDMxYmY2YTY2YmY5N2NiZWVlYTJjY2FhOWNlY2MyZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6de6QOUQEg3p3F4xJey2Xqn0xLmS
+rACGQvQXj8YPuvdbr1mWbXIUZEw5vu0TZaYeaxdn+e3owDMyEMDA1M6VIexwkJ+
lH4pvq9PnmG6pc0Hz7mUFRwipQplnCMsnXYlUICVk27hCwWdwtTJ0O2QYORQY7B4
56YPz0vEKVPFkHfsl/NhoXGz5KFPvAi7oeeh55e2YaQgBbagYdn8ZeWKjtiYUb/m
8+O+xEx+gawn0KiBt6Jzq8tghwxht2UpJuqH5nl8djgxwxEGed3iWwmODx+eypGl
4Ko+jtSDpB89QNdAN5fiPwMS/a/zj8bGok/j4/nF7+aernkLlcu4VU5xIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1NmwAxv2pmv5fL7uosyqnOzC20MB8GA1UdIwQY
MBaAFHEsmcwzj2ktqPgbcWutedHJ18ggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1N5WnpET1BhUzJvLUJ0eGE2MTUwY25YeUNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kOTVmMzItODIyYS00Y2ZlLTk4NTMt
NGViZWY4ODg0Mzk2LzEvY1N5WnpET1BhUzJvLUJ0eGE2MTUwY25YeUNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9kOTVmMzItODIyYS00Y2ZlLTk4NTMtNGViZWY4ODg0Mzk2
LzEvY1N5WnpET1BhUzJvLUJ0eGE2MTUwY25YeUNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkoALGacj
p6j866+xLaJeXLgJXYtwOkx2DpbW78R+9oE420BQkopHbCE7AOSgkMixAMz+chba
A7+H+8eKD7mxnccMC4nQAva1ml5bPwyOVy59bIDis7vBGUlVBFzuqrlN5f7MgTXn
0ioGurzOsiH3XWWB381flgrUyTLO0M7jWhqxnGkvSCtemLToIUxRxJlTF/gk3zqP
7sF0FahrUQMo5pvpgJppZMYZfKBhsmJ8O8XJiKQKgYm3stRbXQiz6xViWfTeRoeB
Lop7+nt7QULA5543/1LFVdMSc8GEY1uWHNhWbSNfAg/zIxJY1ryF996rvFSbA0Bb
oCSt3w1c7A3Jug==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:05 2026 by rpki-client