Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
File: csKTdgpzQBjN0qB_HYvVTyffaAo.mft (raw, json)
Hash identifier: DjarvHf4YD3yc4Kh22AtuCwE9E5KMALR8Zd5AzJnyus=
Subject key identifier: 3B:90:EE:C5:20:A3:C5:06:54:D5:C6:69:1F:99:E2:1D:38:60:5D:0C
Authority key identifier: 72:C2:93:76:0A:73:40:18:CD:D2:A0:7F:1D:8B:D5:4F:27:DF:68:0A
Certificate issuer: /CN=72c293760a734018cdd2a07f1d8bd54f27df680a
Certificate serial: 019D37C106EEADAD1BA8BE80DB72D401596B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
Manifest number: 117C
Signing time: Sun 29 Mar 2026 04:01:30 +0000
Manifest this update: Sun 29 Mar 2026 04:01:30 +0000
Manifest next update: Mon 30 Mar 2026 04:01:30 +0000
Files and hashes: 1: csKTdgpzQBjN0qB_HYvVTyffaAo.crl (hash: bORhmj3jX5wt5wTXz3A3g37fnD0VwvTzAiGKUcopSfM=)
2: q2qThfV9Ai5wiIn0c08uJZv3KrE.roa (hash: jiHXB6EKqhlURIcUG7IJCYAsgSe6xZGy7VNpUltYFZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:06:ee:ad:ad:1b:a8:be:80:db:72:d4:01:59:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c293760a734018cdd2a07f1d8bd54f27df680a
Validity
Not Before: Mar 29 04:01:30 2026 GMT
Not After : Mar 30 04:01:30 2026 GMT
Subject: CN=3b90eec520a3c50654d5c6691f99e21d38605d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:08:3a:0c:22:6c:f5:ac:bb:1c:73:16:d6:1d:
a9:60:b9:4a:f9:14:9e:2a:ae:1c:2c:39:f1:c6:51:
40:97:18:e9:ee:49:c9:91:5b:32:a9:7d:43:6f:e0:
47:c7:72:a7:f8:5c:ce:9f:cb:d3:a6:5c:68:22:d6:
2c:4b:ca:b6:41:93:85:fe:ba:c0:87:d2:d2:52:ca:
0c:91:1a:8c:86:2d:dd:ea:cb:9c:3f:0b:8f:64:62:
e0:d6:d2:3a:c9:ef:67:46:f6:b0:20:1f:d7:a0:8a:
4c:aa:3e:e9:63:5c:11:68:49:45:7b:14:61:44:69:
1d:ef:6d:41:6f:7c:70:ee:ee:f5:de:65:6e:f0:53:
5c:06:fa:01:40:28:2d:33:94:03:86:67:61:4a:79:
84:75:44:71:6f:eb:02:3c:32:f7:40:90:03:0f:4c:
53:20:2c:12:36:67:61:b6:1d:33:79:a2:d4:81:08:
28:e7:d2:c9:10:91:12:ef:13:bd:a5:47:c3:e6:ce:
4e:fc:1b:c2:1a:d3:1f:82:7d:0b:8d:8d:5f:f1:30:
c9:e4:75:fc:94:2d:cb:57:b2:a8:88:85:21:39:28:
47:a9:0e:26:ff:14:e8:1e:b1:c8:1a:c7:bd:bf:93:
eb:c7:a7:8f:a5:a9:c1:7f:e3:8c:48:7e:cb:af:2d:
02:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:90:EE:C5:20:A3:C5:06:54:D5:C6:69:1F:99:E2:1D:38:60:5D:0C
X509v3 Authority Key Identifier:
keyid:72:C2:93:76:0A:73:40:18:CD:D2:A0:7F:1D:8B:D5:4F:27:DF:68:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a7:36:4d:2a:01:00:2b:de:cb:af:3e:a5:d3:a5:69:90:16:
a3:29:35:f9:2d:7f:84:b9:3a:8d:f9:c1:9f:81:bd:b1:39:3d:
4a:f6:39:35:b6:f0:0b:79:bd:08:00:b8:28:a3:d2:81:fc:f2:
01:5d:94:53:32:4a:1b:a8:3a:5f:67:2d:d3:6f:e8:65:d4:ea:
59:80:92:9b:c8:53:7a:eb:ff:2d:c2:37:ab:7a:41:5a:c2:35:
ef:bb:ac:42:d0:9a:d5:d7:ab:49:67:21:62:ea:65:19:a7:86:
ab:cd:61:be:21:5d:b8:b0:76:78:9e:4b:2d:01:a6:8a:cc:d4:
31:f4:99:e4:a3:36:ce:d1:34:94:67:7e:b9:a3:da:6d:23:c2:
7c:88:40:63:99:8d:a2:97:d8:5a:fd:bd:f5:23:e7:3a:6d:7a:
78:89:d1:dd:19:41:77:b0:1c:22:eb:55:4f:ed:c1:d1:54:1c:
16:48:1e:f2:56:05:11:10:ef:3c:c5:1c:91:93:b5:7b:98:45:
75:d4:de:e8:1c:31:db:4c:7f:9d:4f:5e:50:4b:d9:1a:dd:80:
c5:30:70:d8:b0:39:e5:49:17:7e:97:ed:82:8c:27:5a:9e:14:
24:29:e2:8a:28:45:5a:4c:85:cd:25:53:43:29:ba:ba:15:01:
17:8a:bc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:47 2026 by rpki-client