Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
File: CzlpzcC1_wnRmbyl2t25qrUQQOc.mft (raw, json)
Hash identifier: gROYjG3PH/SN9xn/CrYvBmuSIcw9ZUitIdR3GlCLA/o=
Subject key identifier: 18:46:0E:47:22:F9:79:5E:CE:45:24:C1:34:6F:82:E7:51:E6:CA:7A
Authority key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
Certificate issuer: /CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Certificate serial: 019E1BD920CEBD798AC3882A715C36E115A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
Manifest number: 1546
Signing time: Tue 12 May 2026 11:01:14 +0000
Manifest this update: Tue 12 May 2026 11:01:14 +0000
Manifest next update: Wed 13 May 2026 11:01:14 +0000
Files and hashes: 1: 505iyhrOOU2Q_fBeoqtfWv2GNho.roa (hash: yj3rWCbTMvNId63YkvUyXewgDeaSxoAASwUuP7aFbJE=)
2: CzlpzcC1_wnRmbyl2t25qrUQQOc.crl (hash: rtStjil/83CBxz4CXazFlnKiDzKAVJwH9gXG2j1Us8I=)
3: jc2FVDogf_jnYkY28JwjbjPEtCY.roa (hash: moUuZDMz1G4ZG1cN9lqMYWv75YgN2qkJVtQUNQjqg+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:20:ce:bd:79:8a:c3:88:2a:71:5c:36:e1:15:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Validity
Not Before: May 12 11:01:14 2026 GMT
Not After : May 13 11:01:14 2026 GMT
Subject: CN=18460e4722f9795ece4524c1346f82e751e6ca7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d3:37:7b:e6:47:44:1a:23:03:5a:39:ad:72:
c9:61:93:32:b7:9e:0d:9b:fc:f1:99:10:01:d6:e2:
33:8e:d8:17:ea:46:1b:03:ba:46:33:8c:7a:cb:61:
0a:4d:60:4c:47:4f:e4:49:41:2a:77:a6:59:3e:fe:
87:12:88:24:b4:0e:2b:00:42:39:04:d8:70:a3:ae:
95:14:c1:32:e1:cf:c5:51:18:4d:05:3b:be:7d:33:
00:04:af:57:93:a3:23:9b:cb:7a:24:d2:18:c7:14:
55:98:08:5a:e7:20:9f:7f:2d:21:7e:77:28:cb:ae:
35:af:e3:e5:b5:0e:0b:b4:b6:aa:73:9d:28:a7:84:
22:ba:83:11:90:fe:5a:79:f1:d9:60:6c:8d:10:11:
d7:71:77:d2:73:89:82:8b:67:49:8c:e2:c9:e2:f5:
77:d0:93:34:7a:c2:b0:52:b5:b9:65:35:fb:99:4c:
5d:a6:3c:82:31:c1:92:54:48:2f:dd:65:09:a7:13:
86:96:72:ca:22:fb:3a:40:04:50:a5:00:34:ae:96:
d0:70:ab:ed:46:e2:5c:ab:0f:da:b3:e2:5b:17:b8:
8c:d2:95:b3:f1:74:c3:37:10:bb:56:b0:58:1e:47:
39:f0:e8:9f:6f:cc:47:94:d1:f1:45:18:44:67:82:
ba:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:46:0E:47:22:F9:79:5E:CE:45:24:C1:34:6F:82:E7:51:E6:CA:7A
X509v3 Authority Key Identifier:
keyid:0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:50:cc:2d:5c:b4:24:0c:7a:e6:17:9c:21:3b:84:ed:85:88:
e5:07:80:29:3c:c1:ba:15:16:2a:e2:c7:1c:79:a9:f5:50:00:
44:e3:99:78:71:f8:18:47:71:4e:cc:d7:29:f8:36:29:44:23:
2f:ae:91:00:ef:e6:25:a5:d4:dc:1f:d6:29:b8:26:95:09:52:
aa:f1:c4:10:79:d7:96:a4:f8:b8:7c:d8:89:47:51:60:f8:68:
17:df:4f:9c:53:66:d1:6b:96:68:f0:32:44:2b:90:b0:8f:db:
06:98:cd:c9:c5:38:ab:14:d1:d9:0b:29:22:a6:3e:5e:78:ac:
86:90:af:38:ea:f0:7b:22:ff:f9:7e:0a:89:c9:f6:99:64:67:
72:09:9b:79:5b:32:97:a7:8a:cc:3a:61:71:61:9c:9f:09:b1:
78:c4:83:b0:ff:5b:ef:42:a0:1b:a7:32:9b:5e:65:ed:d5:71:
4e:28:1b:8a:c9:15:72:31:9b:95:ab:80:3a:44:11:84:b2:12:
70:55:70:98:90:bb:d2:10:fa:21:0a:6f:1f:1e:a3:ff:88:5c:
60:a8:44:c5:2f:e8:33:e1:03:e4:98:dd:35:3c:fa:87:a9:fc:
53:a9:69:6a:4b:66:c4:e3:00:bf:2d:ae:cc:f4:2a:a3:77:5e:
05:ca:3c:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4b2SDOvXmKw4gqcVw24RWlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMzk2OWNkYzBiNWZmMDlkMTk5YmNhNWRhZGRiOWFhYjUx
MDQwZTcwHhcNMjYwNTEyMTEwMTE0WhcNMjYwNTEzMTEwMTE0WjAzMTEwLwYDVQQD
EygxODQ2MGU0NzIyZjk3OTVlY2U0NTI0YzEzNDZmODJlNzUxZTZjYTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodM3e+ZHRBojA1o5rXLJYZMyt54N
m/zxmRAB1uIzjtgX6kYbA7pGM4x6y2EKTWBMR0/kSUEqd6ZZPv6HEogktA4rAEI5
BNhwo66VFMEy4c/FURhNBTu+fTMABK9Xk6Mjm8t6JNIYxxRVmAha5yCffy0hfnco
y641r+PltQ4LtLaqc50op4QiuoMRkP5aefHZYGyNEBHXcXfSc4mCi2dJjOLJ4vV3
0JM0esKwUrW5ZTX7mUxdpjyCMcGSVEgv3WUJpxOGlnLKIvs6QARQpQA0rpbQcKvt
RuJcqw/as+JbF7iM0pWz8XTDNxC7VrBYHkc58Oifb8xHlNHxRRhEZ4K65wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhGDkci+XlezkUkwTRvgudR5sp6MB8GA1UdIwQY
MBaAFAs5ac3Atf8J0Zm8pdrduaq1EEDnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3pscHpjQzFfd25SbWJ5bDJ0MjVxclVRUU9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lZDUwMWEtNmVkNy00NTJkLThjNzYt
NmJiNGZlZTg1NzM1LzEvQ3pscHpjQzFfd25SbWJ5bDJ0MjVxclVRUU9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9lZDUwMWEtNmVkNy00NTJkLThjNzYtNmJiNGZlZTg1NzM1
LzEvQ3pscHpjQzFfd25SbWJ5bDJ0MjVxclVRUU9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVDMLVy0
JAx65hecITuE7YWI5QeAKTzBuhUWKuLHHHmp9VAAROOZeHH4GEdxTszXKfg2KUQj
L66RAO/mJaXU3B/WKbgmlQlSqvHEEHnXlqT4uHzYiUdRYPhoF99PnFNm0WuWaPAy
RCuQsI/bBpjNycU4qxTR2QspIqY+XnishpCvOOrweyL/+X4Kicn2mWRncgmbeVsy
l6eKzDphcWGcnwmxeMSDsP9b70KgG6cym15l7dVxTigbiskVcjGblauAOkQRhLIS
cFVwmJC70hD6IQpvHx6j/4hcYKhExS/oM+ED5JjdNTz6h6n8U6lpaktmxOMAvy2u
zPQqo3deBco8OQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:20:45 2026 by rpki-client