Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
File: cS-cs8KYsVC-t5CAN290verEOKw.mft (raw, json)
Hash identifier: bME7JeOq8RcwQxQEM6sssC4rzeEGrSpFMkbyrzjrXx0=
Subject key identifier: 64:BE:39:3D:21:D1:8B:E0:1F:68:7E:92:F2:BA:4F:DB:46:8C:58:DF
Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
Certificate issuer: /CN=712f9cb3c298b150beb79080376f74bdeac438ac
Certificate serial: 019D0D0D31EAF89907681DEC8ED336BC2FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
Manifest number: 187F
Signing time: Fri 20 Mar 2026 21:01:01 +0000
Manifest this update: Fri 20 Mar 2026 21:01:01 +0000
Manifest next update: Sat 21 Mar 2026 21:01:01 +0000
Files and hashes: 1: 84wKpW8a2FdOFdtJH09XGOkEUps.roa (hash: 1qhPnlo4Dt7J0oeNCr3M9RW7SmJ0MpohWBFUgdLw/U4=)
2: 9-uYpBrZ0SnlXEdYG-rWZOkX4-8.roa (hash: ch9SwzgHwXntgNAkT37G/8PeEwHz84mvTnudFL4bbYg=)
3: a8fiimQdU18P-F2tOQH9sjS2Djw.asa (hash: SNczP7mStVed+rVQzNAM+CHW/D0tMUWtQ+EIBgCl2dM=)
4: cFDNySQq-BoAAus-f6QDofmomPs.asa (hash: bmD9h4TJUpSAXYuI/gTQnCZ438ljBruFVbyjbe3Styo=)
5: cS-cs8KYsVC-t5CAN290verEOKw.crl (hash: p30ct9sev9b+CGlIxZcxpBzDql1aIfltz/7seCQCeg0=)
6: df4tfV0jAIZZKEaYQCM4AbSPAqg.roa (hash: dHoNYsRW1eGxyAi3gnD68do0NWTQc/BQpOK0JZnCoh4=)
7: g9Yn7ACDYVC8slU7jy3RutvpmLA.roa (hash: QstT1XItP19s81pUDHVgyYRJfqI7V21cNVai+M007RU=)
8: wW3ZYEDbinPYHk66ZkOwzFx6fGU.roa (hash: UTV9GkxKyIAZmik9JxS337j4Nl0XcYaJdhg8IjKhvU4=)
9: xYJNOiuy4j8LfXqPijvPDbsyKCs.roa (hash: XjFVGXZYnhKKZSPv2iOQnoaWZSCDkPQcxGHyVG/MCwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 17:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0d:0d:31:ea:f8:99:07:68:1d:ec:8e:d3:36:bc:2f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac
Validity
Not Before: Mar 20 21:01:01 2026 GMT
Not After : Mar 21 21:01:01 2026 GMT
Subject: CN=64be393d21d18be01f687e92f2ba4fdb468c58df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:34:69:49:57:66:ec:c7:a0:57:5f:a6:2b:f3:
e2:1a:ad:05:ff:b2:81:4a:f3:a4:94:04:f9:03:bf:
a3:61:68:a0:9a:ab:9d:9b:b3:d2:2d:98:aa:de:d1:
35:eb:69:bd:90:5d:83:38:21:51:5e:81:4f:82:77:
4e:7b:ea:53:fa:0d:6d:6a:00:8e:3c:7c:4f:79:81:
ef:be:11:a8:7a:33:c8:24:8b:22:25:eb:24:3c:eb:
ed:fd:15:3c:75:8b:8d:d5:21:a5:72:0e:65:66:56:
c8:2e:2f:28:e9:1c:39:50:f0:d8:2b:50:5d:e2:4b:
6e:89:40:a7:ba:e1:34:eb:1d:19:82:a9:33:f5:c8:
d6:83:ed:f6:ba:63:7a:e5:af:37:7d:fd:0b:94:4d:
48:a0:d8:f1:d6:07:ed:c0:24:03:54:95:26:5e:d0:
1c:01:2e:f4:c0:da:e3:7d:91:56:85:9f:ec:5b:9e:
d8:13:ac:56:3a:bf:c1:84:9e:e0:44:f2:9c:8f:fd:
ab:4b:54:64:77:42:e3:04:43:17:0c:0e:c3:0b:8b:
3b:cf:5f:0d:fc:b0:b7:5c:ac:72:a6:5d:aa:06:68:
da:96:9f:1e:ca:2f:2b:24:fb:b7:0b:7a:ab:e9:53:
c9:5c:73:13:46:30:26:26:c6:ac:9c:70:66:12:97:
bf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BE:39:3D:21:D1:8B:E0:1F:68:7E:92:F2:BA:4F:DB:46:8C:58:DF
X509v3 Authority Key Identifier:
keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:1d:a4:f5:04:b6:41:f5:2c:bf:fc:19:4d:0f:75:b3:48:1b:
19:cd:33:c6:eb:8f:2f:4d:c0:cf:ef:57:78:1f:54:92:65:95:
bf:79:dc:60:22:76:ce:3e:c9:9b:9f:00:52:32:68:c2:5e:b4:
03:3a:02:7b:1b:4c:53:e6:f2:ac:d0:58:f6:3f:2d:f3:f0:33:
e7:a3:1f:17:3d:6e:38:43:1c:fd:90:88:7d:f5:0b:9b:10:cb:
9d:20:16:98:58:c4:17:1b:48:e7:39:58:39:ea:f7:39:ba:c3:
ed:a2:2f:e3:ba:79:a2:58:e8:d8:2a:9b:f1:88:63:25:7b:79:
62:9c:e6:ce:f6:66:ef:5e:61:49:2f:fa:62:14:91:a8:59:a0:
2e:b0:3d:21:34:7a:e1:62:f1:6c:f4:95:37:b0:05:84:ea:1d:
f3:75:27:eb:b2:4d:68:2b:17:27:03:6b:02:59:8a:55:72:51:
5c:c8:fc:36:ee:2d:b8:e4:fc:6b:b9:fc:da:4e:19:a8:ad:ce:
d0:7d:a7:00:f0:8a:ee:5d:4f:9b:f9:a4:61:6e:ba:73:63:2a:
44:e5:4c:9b:18:c9:bd:b6:7e:41:9b:13:02:86:be:93:40:76:
44:4b:bb:5a:2f:3d:3d:b8:bd:92:82:48:98:5a:7e:8b:bb:d9:
17:f5:ea:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 22:44:16 2026 by rpki-client