Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
File: CzlpzcC1_wnRmbyl2t25qrUQQOc.mft (raw, json)
Hash identifier: tqlB82ik3dHXAcJ0WIOXg89+Od2Hxz3K4LnMaWWC8Wo=
Subject key identifier: 36:2E:E2:7E:70:7E:DC:DC:DA:41:DF:E9:C1:0F:28:56:8C:C6:D5:51
Authority key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
Certificate issuer: /CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Certificate serial: 019D2A7276D745CDC02463298833F94D98A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
Manifest number: 14C9
Signing time: Thu 26 Mar 2026 14:00:37 +0000
Manifest this update: Thu 26 Mar 2026 14:00:37 +0000
Manifest next update: Fri 27 Mar 2026 14:00:37 +0000
Files and hashes: 1: 505iyhrOOU2Q_fBeoqtfWv2GNho.roa (hash: yj3rWCbTMvNId63YkvUyXewgDeaSxoAASwUuP7aFbJE=)
2: CzlpzcC1_wnRmbyl2t25qrUQQOc.crl (hash: cKwkdTi5q/mh0MVGqjxobdVIoUjgfoaP8ACp/iBxVho=)
3: jc2FVDogf_jnYkY28JwjbjPEtCY.roa (hash: moUuZDMz1G4ZG1cN9lqMYWv75YgN2qkJVtQUNQjqg+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:76:d7:45:cd:c0:24:63:29:88:33:f9:4d:98:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Validity
Not Before: Mar 26 14:00:37 2026 GMT
Not After : Mar 27 14:00:37 2026 GMT
Subject: CN=362ee27e707edcdcda41dfe9c10f28568cc6d551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:bd:c6:53:ce:5a:b3:a0:5a:16:db:f8:7b:
2d:e1:53:5a:7b:a5:68:ec:81:9d:60:5b:78:69:29:
55:07:fd:cf:13:f7:f7:cb:76:a3:1a:a2:9c:4c:3d:
8d:52:96:48:0e:b3:c6:3f:f8:1c:b9:fa:7d:9f:8d:
be:37:e5:56:ae:9f:9e:5c:3a:d7:4b:e3:75:c2:90:
a3:9b:2d:ce:4a:3b:ba:c0:48:06:2b:6d:4d:53:a6:
8e:8c:ed:15:e9:0d:f2:38:78:2b:3c:72:cd:a0:6e:
98:d0:af:b2:96:a9:fd:24:ed:2e:11:03:ef:1e:54:
64:68:fd:e4:7f:16:6f:4d:2e:2e:a7:9d:9b:41:3e:
a7:67:bd:f5:7a:5b:ce:36:45:a1:03:2b:5e:9c:1c:
94:fd:7f:5c:9c:c6:08:9a:e5:0e:26:f4:fb:69:14:
e3:72:d8:22:40:2e:9b:0d:54:74:33:30:49:c9:6e:
6b:d5:73:cb:b6:c6:bf:e3:d3:2d:f7:90:18:a5:f4:
6d:06:e3:ce:b0:3d:8a:02:bd:e7:12:f2:2b:16:56:
97:2a:17:1a:81:8b:26:1e:a1:24:e5:7d:80:f6:67:
db:1a:1b:c3:29:82:a6:1d:a2:b6:75:db:f0:62:13:
37:02:90:ed:a2:1d:6b:59:31:d2:27:37:d0:07:21:
7f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2E:E2:7E:70:7E:DC:DC:DA:41:DF:E9:C1:0F:28:56:8C:C6:D5:51
X509v3 Authority Key Identifier:
keyid:0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:60:bf:ce:7f:15:a3:fb:d7:f4:d5:d5:5b:66:f0:e9:42:35:
3e:c8:93:11:34:48:28:1b:26:e7:19:bf:0a:6d:e6:9b:d0:a4:
d1:0a:2a:8f:88:57:cc:09:37:c5:10:4c:f8:ed:00:43:a6:eb:
29:5f:e3:24:31:a1:e5:a6:9f:7b:3b:b9:06:14:c2:7c:97:68:
70:b5:44:7a:92:47:45:d9:81:5c:da:81:92:f9:6a:7b:25:15:
d2:c1:ca:4c:d1:3a:41:dd:49:03:37:33:3a:d9:8b:b6:c5:50:
98:f4:06:8e:62:05:9b:02:ca:cc:a8:62:5a:44:b5:15:8b:fe:
41:af:de:30:94:e8:74:c3:b5:8b:57:78:dd:d8:04:99:c3:43:
06:1d:05:d3:8d:dd:93:29:9e:cd:7a:0b:e9:96:95:c6:15:ac:
42:82:c8:83:f7:e9:25:be:e6:dd:05:6d:6b:cf:a9:4f:9e:67:
10:e8:cb:aa:0b:77:f9:37:6d:4a:f9:52:52:6d:88:76:22:4b:
61:55:e5:97:94:d8:58:df:04:86:c6:98:eb:62:be:33:f3:c3:
30:74:31:ff:12:4f:35:de:1a:51:47:96:dd:d7:49:3a:11:f4:
eb:1b:df:d0:2c:8e:16:7d:86:c2:63:d8:bd:11:a4:93:7a:59:
36:23:6d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:37:19 2026 by rpki-client