Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
File: cS-cs8KYsVC-t5CAN290verEOKw.mft (raw, json)
Hash identifier: Ly5mNpXMFuoSS7s3rbA0FB/6wWdKlm4ezBQf8XoTSSw=
Subject key identifier: 51:60:8F:1B:A9:87:DB:FE:70:6D:18:DC:B8:BD:A6:AE:3B:38:43:D5
Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
Certificate issuer: /CN=712f9cb3c298b150beb79080376f74bdeac438ac
Certificate serial: 019F10ADA6B8D91EFF532D7A4EE233569442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
Manifest number: 198A
Signing time: Mon 29 Jun 2026 00:00:43 +0000
Manifest this update: Mon 29 Jun 2026 00:00:43 +0000
Manifest next update: Tue 30 Jun 2026 00:00:43 +0000
Files and hashes: 1: 84wKpW8a2FdOFdtJH09XGOkEUps.roa (hash: 1qhPnlo4Dt7J0oeNCr3M9RW7SmJ0MpohWBFUgdLw/U4=)
2: 9-uYpBrZ0SnlXEdYG-rWZOkX4-8.roa (hash: ch9SwzgHwXntgNAkT37G/8PeEwHz84mvTnudFL4bbYg=)
3: a8fiimQdU18P-F2tOQH9sjS2Djw.asa (hash: SNczP7mStVed+rVQzNAM+CHW/D0tMUWtQ+EIBgCl2dM=)
4: cFDNySQq-BoAAus-f6QDofmomPs.asa (hash: bmD9h4TJUpSAXYuI/gTQnCZ438ljBruFVbyjbe3Styo=)
5: cS-cs8KYsVC-t5CAN290verEOKw.crl (hash: k0PVJYeuJ0pJftwExTdcVmUQljrOJJbxhG+lvvtdQvI=)
6: df4tfV0jAIZZKEaYQCM4AbSPAqg.roa (hash: dHoNYsRW1eGxyAi3gnD68do0NWTQc/BQpOK0JZnCoh4=)
7: g9Yn7ACDYVC8slU7jy3RutvpmLA.roa (hash: QstT1XItP19s81pUDHVgyYRJfqI7V21cNVai+M007RU=)
8: wW3ZYEDbinPYHk66ZkOwzFx6fGU.roa (hash: UTV9GkxKyIAZmik9JxS337j4Nl0XcYaJdhg8IjKhvU4=)
9: xYJNOiuy4j8LfXqPijvPDbsyKCs.roa (hash: XjFVGXZYnhKKZSPv2iOQnoaWZSCDkPQcxGHyVG/MCwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 00:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:ad:a6:b8:d9:1e:ff:53:2d:7a:4e:e2:33:56:94:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac
Validity
Not Before: Jun 29 00:00:43 2026 GMT
Not After : Jun 30 00:00:43 2026 GMT
Subject: CN=51608f1ba987dbfe706d18dcb8bda6ae3b3843d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bb:ae:bb:f2:3e:ed:d1:50:70:69:c9:99:e4:
42:c5:51:91:a4:b1:82:51:af:a3:cc:5d:39:25:48:
9e:5d:45:29:47:d5:68:b4:71:93:70:47:49:f2:63:
86:6d:5b:03:f6:de:9d:f5:31:33:b2:c4:b8:f1:76:
b8:ef:93:59:f5:26:b4:4f:97:73:3e:b5:72:b5:18:
3e:bd:c7:2c:a2:c6:65:b7:5d:0c:60:8a:dd:6a:d2:
35:ad:43:06:30:f0:a5:61:6d:8b:e9:9b:52:07:ed:
de:fb:2a:10:09:87:65:0e:bd:9a:fc:07:ea:f0:3f:
16:a2:14:11:ec:c8:84:3c:b1:df:1a:69:e9:a1:68:
fa:7a:9f:61:12:df:3b:71:86:06:8a:93:de:a0:ed:
af:7a:48:54:83:32:39:2a:80:0d:c0:ae:e6:8b:08:
5d:53:a1:b6:3a:5d:e1:0a:88:f9:74:fe:ba:b0:f2:
ba:44:52:c4:3a:86:ce:73:1e:56:f9:59:a9:cf:ad:
14:e4:91:08:87:2c:24:36:e3:fa:e0:c4:7c:85:1d:
69:bb:94:e8:e9:04:f3:ec:80:ca:90:bf:cc:2f:d0:
f3:f4:2f:5d:9a:db:e7:fc:38:22:e3:81:56:9c:32:
82:b6:55:6e:85:a5:60:16:fa:42:8a:fe:95:d0:6f:
53:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:60:8F:1B:A9:87:DB:FE:70:6D:18:DC:B8:BD:A6:AE:3B:38:43:D5
X509v3 Authority Key Identifier:
keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c4:c4:41:5d:b2:22:67:81:12:42:6f:57:82:09:09:ea:26:
fa:b9:31:ce:ce:0b:f2:87:9e:7f:b6:6c:c5:d6:5e:bf:aa:5c:
47:53:e2:4f:54:e8:10:7c:2f:a2:2c:25:ad:aa:9e:af:09:4d:
be:c6:3a:3f:56:89:df:39:45:b3:c3:c8:a0:c0:42:46:0e:01:
28:64:fe:94:16:db:f2:ff:44:06:3a:fc:f8:44:f7:ad:48:7c:
f8:08:b8:37:0d:d8:72:ba:a0:db:38:05:47:59:63:f7:a6:ee:
cd:1b:6b:4a:1c:ad:e3:2b:2b:78:15:cd:db:d2:43:ce:65:81:
26:2b:ee:1f:a2:90:2f:e4:90:35:a2:97:6c:5f:86:e3:32:07:
ba:4e:4f:97:f8:81:07:5a:78:b3:5d:b1:66:7f:f6:1b:55:75:
0a:95:31:a2:2c:68:4a:6c:13:a0:ae:dc:67:c7:12:72:3e:f4:
81:18:63:e5:07:99:ba:96:f9:43:66:ce:d9:91:69:ec:bb:9d:
5f:61:26:ba:02:2c:3a:57:76:ce:6f:2f:43:0c:31:e0:39:7a:
01:d1:f1:4b:3a:f0:6f:c4:3e:8b:81:4a:4b:9c:e5:d8:41:68:
d0:e7:bd:8b:c5:64:2a:7e:b0:ad:64:e3:54:83:71:36:4c:df:
2b:1c:cc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:37:51 2026 by rpki-client