Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
File: cSyZzDOPaS2o-Btxa6150cnXyCA.mft (raw, json)
Hash identifier: Twp8wTpLhC8g5BiFN5Gs/dsl/InmlMDrnh3nze2GR/4=
Subject key identifier: 2E:D3:07:B0:12:B3:A6:EB:37:25:EE:CF:09:65:A0:75:BE:A5:9F:5D
Authority key identifier: 71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
Certificate issuer: /CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Certificate serial: 019F1AC511243B66CC5A4D566629C953B6AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 23:02:30 +0000
Manifest this update: Tue 30 Jun 2026 23:02:30 +0000
Manifest next update: Wed 01 Jul 2026 23:02:30 +0000
Files and hashes: 1: BsMYZQ2x4gwaPMUJIJk2WkqpFpw.roa (hash: uRJt0kWvcM/4ik+kay2QDd7hzw9JG0GpAQJN7rBesLo=)
2: cSyZzDOPaS2o-Btxa6150cnXyCA.crl (hash: qXpLlHCsEfc47UB5FI6vpE6DB49MxraIleDWEoEOkGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:c5:11:24:3b:66:cc:5a:4d:56:66:29:c9:53:b6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Validity
Not Before: Jun 30 23:02:30 2026 GMT
Not After : Jul 1 23:02:30 2026 GMT
Subject: CN=2ed307b012b3a6eb3725eecf0965a075bea59f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:88:aa:e0:c4:b1:03:ce:14:26:68:db:bf:dd:
b3:6b:e5:3e:81:8f:1d:84:00:9b:32:d6:17:92:74:
6d:40:84:b0:06:de:0b:40:20:1f:1a:4c:b8:80:90:
21:e8:a6:e2:3e:af:04:8c:43:87:86:2c:a1:7c:84:
85:ac:64:e1:32:5a:84:c4:5c:31:06:2d:de:b2:48:
53:c4:de:ac:b3:64:51:57:df:2e:34:c8:ad:9d:4d:
ff:b5:7f:7a:41:97:a7:57:e2:03:f0:66:3d:83:e9:
85:f7:4f:42:b7:17:9b:27:3a:33:c6:ac:dc:8f:e4:
bb:3f:91:4c:29:c2:ee:ea:4b:bc:a1:fe:ba:b7:18:
a5:2c:d9:46:b7:22:ce:72:f6:01:d0:0f:c4:c1:f1:
6c:be:3c:a1:41:54:b8:bc:a0:9c:83:07:ce:13:a6:
28:97:c8:20:b3:0a:7b:b3:cc:4e:88:be:7c:0c:5d:
b1:6f:04:c4:72:6f:db:09:96:9d:64:b8:06:77:d2:
93:f9:e3:5a:49:15:d9:c1:a7:d5:72:49:5b:1b:50:
78:ad:3b:7b:8b:a6:b9:19:59:39:c0:15:55:d2:b4:
fd:a3:19:83:8f:f0:18:36:10:06:5f:c1:9f:10:05:
f1:4d:b1:c1:09:b4:fb:2b:4b:94:58:4a:9b:13:08:
6a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D3:07:B0:12:B3:A6:EB:37:25:EE:CF:09:65:A0:75:BE:A5:9F:5D
X509v3 Authority Key Identifier:
keyid:71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:44:e0:25:dd:ce:24:71:bd:fe:3e:e1:86:cf:4f:d7:45:06:
12:4d:d9:17:d7:bf:39:54:84:65:eb:07:ed:13:01:a4:3f:d4:
d7:aa:bf:c3:3d:0f:42:ff:be:64:1b:e8:aa:89:ca:7f:e5:0b:
2c:76:7b:d0:e1:bc:8c:54:8c:6b:a2:e6:52:76:cc:74:c9:a4:
ca:8c:1c:a0:53:98:74:d4:18:eb:a6:29:2e:b4:a5:48:e8:e7:
2c:8c:42:24:2d:71:83:29:c7:92:a8:13:f7:b7:de:d8:b9:1c:
cd:82:6b:32:b1:8e:cd:7e:f9:be:0b:58:a4:c9:5b:a6:81:79:
86:4c:07:4f:7c:cf:53:68:55:c8:e1:b8:b3:73:16:42:a1:fa:
f0:92:09:9e:63:35:03:d7:55:7b:1f:ab:2b:de:02:fe:d2:98:
8e:a7:21:0a:87:b9:7a:11:cd:7d:f3:ff:ea:9b:a6:11:06:5f:
01:6a:42:3e:67:1a:c2:cf:fa:e7:a7:1a:bb:14:39:65:bb:19:
32:3e:ea:45:74:0d:68:62:25:0b:ed:37:86:20:16:72:57:6d:
34:19:89:06:9f:f8:a2:68:e5:66:83:db:e2:4d:d0:0a:83:57:
09:9c:76:91:ea:75:57:3f:62:9f:32:c0:fc:39:c5:c8:ac:20:
aa:79:ee:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 03:31:54 2026 by rpki-client