Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
File: cS-cs8KYsVC-t5CAN290verEOKw.mft (raw, json)
Hash identifier: dgJYH+M2ny1JDxOlXKU3hT0cDhyatuKe0E+GfqRO1BY=
Subject key identifier: 5B:FE:48:08:99:5F:2E:C5:4F:61:E7:3D:33:D1:9F:B5:EB:80:F8:A8
Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
Certificate issuer: /CN=712f9cb3c298b150beb79080376f74bdeac438ac
Certificate serial: 01A17EF3DFBC87A1855B1C5642A7AB7A4141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
Manifest number: 1ACD
Signing time: Tue 27 Oct 2026 20:01:13 +0000
Manifest this update: Tue 27 Oct 2026 20:01:13 +0000
Manifest next update: Wed 28 Oct 2026 20:01:13 +0000
Files and hashes: 1: 1X2sgvq2OfT6Jdo40rIKwx5gDV4.asa (hash: VL+5JuAwjiAZeewO3OjhChR2ymlOyYa+cwBCn8pjvhQ=)
2: 84wKpW8a2FdOFdtJH09XGOkEUps.roa (hash: 1qhPnlo4Dt7J0oeNCr3M9RW7SmJ0MpohWBFUgdLw/U4=)
3: 9-uYpBrZ0SnlXEdYG-rWZOkX4-8.roa (hash: ch9SwzgHwXntgNAkT37G/8PeEwHz84mvTnudFL4bbYg=)
4: Bk2PVhSldiADwMhbVtnkp9pryqY.asa (hash: hx24E0I0fhbwVZplZBmeDNsFPlc70EP9j2DAqKTvSZA=)
5: cS-cs8KYsVC-t5CAN290verEOKw.crl (hash: 0X+i1R1EXPYk2ZYRvfJtPVp1JcusLB3gJ9TSs3L3JoI=)
6: df4tfV0jAIZZKEaYQCM4AbSPAqg.roa (hash: dHoNYsRW1eGxyAi3gnD68do0NWTQc/BQpOK0JZnCoh4=)
7: g9Yn7ACDYVC8slU7jy3RutvpmLA.roa (hash: QstT1XItP19s81pUDHVgyYRJfqI7V21cNVai+M007RU=)
8: wW3ZYEDbinPYHk66ZkOwzFx6fGU.roa (hash: UTV9GkxKyIAZmik9JxS337j4Nl0XcYaJdhg8IjKhvU4=)
9: xYJNOiuy4j8LfXqPijvPDbsyKCs.roa (hash: XjFVGXZYnhKKZSPv2iOQnoaWZSCDkPQcxGHyVG/MCwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f3:df:bc:87:a1:85:5b:1c:56:42:a7:ab:7a:41:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac
Validity
Not Before: Oct 27 20:01:13 2026 GMT
Not After : Oct 28 20:01:13 2026 GMT
Subject: CN=5bfe4808995f2ec54f61e73d33d19fb5eb80f8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:52:8a:8f:f9:6e:49:ed:97:6d:26:f2:52:ff:
a8:06:fb:d5:70:69:7a:4f:0e:f3:4d:1c:cf:8a:ac:
35:bf:75:c0:ea:1a:a0:bf:1c:88:49:66:a6:62:1a:
13:f6:20:29:6a:bc:24:c7:1c:b8:1d:ae:b2:bd:1a:
b2:9b:1e:00:e6:a4:06:8d:10:f0:89:e1:1c:23:4c:
b0:80:ac:ff:73:4b:51:b0:80:1d:14:e6:fc:c3:c1:
9f:11:b0:5e:5d:31:0e:b1:00:45:03:01:5d:20:43:
c2:70:ec:92:82:b6:ea:56:83:fe:fb:99:ef:44:f8:
b1:e0:a3:86:6d:67:ed:18:1f:f5:bd:a3:0f:65:52:
05:ef:a6:54:58:d6:57:1c:19:94:e9:86:c6:df:ad:
dc:0d:3b:63:f3:5e:8d:e1:d6:bb:d3:6e:ce:1b:89:
66:b1:27:d7:0a:4d:4b:8d:be:86:27:42:f0:20:57:
b7:58:b0:fe:a7:de:b1:84:18:14:6b:66:05:cd:01:
87:8e:95:65:8c:18:16:e0:19:f6:8f:cc:b8:b1:06:
54:b6:e1:3c:c6:ef:dd:82:f6:53:80:fa:34:d8:b1:
b3:1e:b7:4e:f1:84:96:b5:5b:a5:e3:dc:1e:53:5a:
fc:72:66:73:1b:e4:07:22:9a:91:f3:b6:04:fa:12:
bf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FE:48:08:99:5F:2E:C5:4F:61:E7:3D:33:D1:9F:B5:EB:80:F8:A8
X509v3 Authority Key Identifier:
keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:69:f7:4f:27:33:ad:3b:42:20:29:fe:48:d1:48:de:a9:e0:
77:ed:c9:dd:24:b6:80:54:d4:31:60:3c:7e:13:8f:68:4e:ef:
15:96:12:43:52:71:f4:64:20:5f:58:fc:36:77:37:8b:da:e8:
92:be:7d:9d:81:1a:cd:8f:df:30:8b:9a:a7:1d:46:bc:8c:6a:
08:1c:ab:b0:ce:d8:c2:ef:0d:60:73:c8:39:ef:77:f2:cc:0a:
81:5a:33:67:17:54:37:9b:e2:53:8c:a8:f9:e2:d4:2d:0d:08:
15:fe:2f:63:9e:c6:10:29:b4:f5:9b:a5:cc:b4:33:3c:b6:94:
e5:ca:9d:41:ce:b7:c8:79:0e:3d:a3:81:9a:49:50:c4:37:7a:
46:c9:ee:75:32:8b:e0:1c:51:84:57:57:14:78:4a:b9:a4:48:
95:64:b0:3a:24:b2:ee:e8:e8:7f:ed:63:a3:44:89:65:ca:8e:
0e:e8:dd:c2:f7:c7:db:5e:9d:f5:38:4f:90:32:d9:21:81:ec:
45:ee:cf:95:dc:61:08:8b:65:1a:ec:84:40:d7:ef:99:9e:df:
da:1a:90:10:e1:a2:ef:dc:10:47:f5:f0:52:b7:74:72:6b:16:
88:02:11:bf:6c:c7:6d:4a:bd:be:27:08:fc:54:0c:02:6e:72:
df:a4:fe:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:29:20 2026 by rpki-client