Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
File: CzlpzcC1_wnRmbyl2t25qrUQQOc.mft (raw, json)
Hash identifier: YLQnnBKofQ+LkJSsuVAD5+/dpLYmoWIe37B4HTWPjQc=
Subject key identifier: BB:43:58:59:8B:16:27:4D:EE:F0:6F:2A:07:79:D9:2E:58:75:C3:4D
Authority key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
Certificate issuer: /CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Certificate serial: 01A11A870748238659A101AF693ACC6C4C1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
Manifest number: 16D3
Signing time: Thu 08 Oct 2026 08:00:19 +0000
Manifest this update: Thu 08 Oct 2026 08:00:19 +0000
Manifest next update: Fri 09 Oct 2026 08:00:19 +0000
Files and hashes: 1: 505iyhrOOU2Q_fBeoqtfWv2GNho.roa (hash: yj3rWCbTMvNId63YkvUyXewgDeaSxoAASwUuP7aFbJE=)
2: CzlpzcC1_wnRmbyl2t25qrUQQOc.crl (hash: w3sPCTOzlBZYDCz70aApi2B/9NyW7lHjeOOMVjMhvnE=)
3: jc2FVDogf_jnYkY28JwjbjPEtCY.roa (hash: moUuZDMz1G4ZG1cN9lqMYWv75YgN2qkJVtQUNQjqg+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:87:07:48:23:86:59:a1:01:af:69:3a:cc:6c:4c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Validity
Not Before: Oct 8 08:00:19 2026 GMT
Not After : Oct 9 08:00:19 2026 GMT
Subject: CN=bb4358598b16274deef06f2a0779d92e5875c34d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f3:e2:b7:11:5c:cc:13:b9:10:6d:41:4e:d4:
bb:89:a6:94:75:5e:a5:f1:3a:5e:8d:7e:1a:66:32:
d9:63:11:3f:b6:8e:fb:24:1a:af:01:c5:9a:4d:b8:
b8:e5:1f:7a:76:ed:ee:97:43:62:ef:14:2a:e3:b0:
45:ee:3b:1b:6b:17:41:77:9d:b5:84:68:2e:10:10:
70:09:60:4a:8d:b2:cf:11:8a:86:83:d4:bc:a5:12:
f5:92:7d:2a:63:be:29:50:f9:f1:f2:8f:29:d9:6d:
cf:80:47:03:c8:3c:bc:dc:f4:b4:7b:33:b8:54:df:
9c:e2:81:54:ce:c1:87:01:2d:19:2a:25:7e:dc:e6:
51:07:56:e0:5a:33:f0:b2:aa:5c:69:eb:5c:48:ae:
d0:d7:50:bf:e1:87:dd:53:75:ab:18:56:74:46:82:
08:df:0a:a0:0e:0f:10:79:09:05:6a:a5:00:3b:c3:
83:5f:63:d7:91:78:2f:4e:25:cc:52:0e:97:d5:6d:
c9:c1:b6:45:95:9b:58:2e:81:8d:6e:11:78:f5:6c:
42:ff:91:60:b7:fe:e3:ac:b5:b1:dd:59:f8:f2:c0:
fd:ba:09:d5:fb:e4:e8:a9:4a:c6:0b:66:2c:04:07:
19:5e:49:db:5d:60:7c:0c:8f:8c:df:d2:ad:5f:19:
52:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:43:58:59:8B:16:27:4D:EE:F0:6F:2A:07:79:D9:2E:58:75:C3:4D
X509v3 Authority Key Identifier:
keyid:0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:df:2c:54:45:60:ee:9a:a3:e7:70:80:dd:65:8f:94:fa:56:
c3:ac:0f:e2:41:3a:58:4c:3f:45:91:8c:c0:76:70:81:60:5b:
e1:42:29:6c:f2:64:e5:b5:48:3a:ad:50:1b:d3:c4:96:9d:3e:
0d:bd:93:d5:50:43:65:03:7b:58:81:4e:67:a7:71:c2:2b:45:
7e:95:8b:d7:d9:ae:5f:fa:0e:c4:00:b4:b3:62:8a:32:80:94:
dc:bb:70:6d:21:ba:f5:ec:23:7d:25:2e:e0:10:f3:0d:39:25:
9c:27:e2:d6:22:05:79:51:22:ec:c4:80:1a:97:aa:16:60:5e:
99:88:bb:bb:8b:a7:60:1f:1a:68:f5:5b:d2:6d:8c:bc:8f:8a:
99:c1:fe:e8:ba:c7:e4:db:bf:9c:39:3b:c5:5b:2e:fb:f2:05:
b8:70:f1:06:13:90:a2:69:a4:08:7a:88:b3:5b:b5:23:13:b9:
d6:06:7e:2b:cd:77:1e:51:5c:8d:d1:06:d4:e1:cb:b2:85:35:
6f:a0:c0:25:76:67:7d:6c:a2:e9:ef:d7:69:a8:bf:57:6b:41:
6d:82:60:e9:2f:f3:71:b0:9f:0e:61:9b:82:4f:df:a6:e0:42:
6f:72:aa:62:18:d6:62:49:12:e0:92:25:46:57:e4:c0:9e:83:
c5:08:80:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:25:03 2026 by rpki-client