Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
File: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft (raw, json)
Hash identifier: gl0w4CPjQO2nytkFXnAXbuBgo5r6SN09LHRf3t0F6OM=
Subject key identifier: 1A:05:D2:82:C0:AD:A3:83:1A:A4:31:6C:75:1C:5F:73:DE:A5:C7:D2
Authority key identifier: 0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
Certificate issuer: /CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Certificate serial: 019F924836F6AB0EF8CFEBE5CCCC9ACA1723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
Manifest number: 16B5
Signing time: Fri 24 Jul 2026 04:00:33 +0000
Manifest this update: Fri 24 Jul 2026 04:00:33 +0000
Manifest next update: Sat 25 Jul 2026 04:00:33 +0000
Files and hashes: 1: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl (hash: gEMtS2FU7MV8f0NR9pEguSI+N38sjeij61DTkgzM5R8=)
2: ZJDmPvzDE__eYUkVLrAmHcTbK2E.roa (hash: mZslKl2yoouF0x/HaqlGPF55VMLSQDizBAGrzjr6tuY=)
3: bipK7OOAYGpHrw7S5fmJoRnxSxQ.roa (hash: rrZJyfnTOVyxttfXNIKKI76uVK5IaaBMN4ZDEVeQY94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:36:f6:ab:0e:f8:cf:eb:e5:cc:cc:9a:ca:17:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Validity
Not Before: Jul 24 04:00:33 2026 GMT
Not After : Jul 25 04:00:33 2026 GMT
Subject: CN=1a05d282c0ada3831aa4316c751c5f73dea5c7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:87:88:a3:cf:c5:0e:67:d0:4b:e8:dd:77:c3:
3c:90:a2:5a:3f:e9:1a:27:37:40:03:1f:0f:72:9e:
97:81:15:39:70:26:0f:a7:96:37:cd:18:cf:4c:9c:
82:8d:6f:5d:d9:68:f8:0f:ef:d4:12:95:b4:09:d7:
6d:f2:4b:4c:76:04:03:01:0e:bd:89:61:f6:5c:95:
42:27:73:4f:89:a7:ee:d8:0a:39:de:19:a2:0c:81:
b9:97:4d:e8:2c:bc:c0:ce:2c:b9:cb:d5:7d:7f:ef:
ee:82:d5:11:70:03:ba:68:00:e9:60:35:1f:42:89:
5f:ac:43:c6:95:db:ee:da:90:7f:af:e1:57:e7:9b:
3f:9d:df:c5:70:d5:9d:51:9c:d7:91:bd:bc:8a:1e:
85:28:ed:c8:a1:c3:47:3e:bd:88:c1:50:6f:5a:22:
b1:93:44:57:1b:e3:be:9a:6d:58:47:70:39:a7:a9:
52:c0:62:6f:20:db:7b:2a:99:1c:23:36:2c:fc:7a:
06:d7:cd:3c:8d:4c:7d:2a:fd:c8:c3:e6:f6:53:f1:
4a:21:d2:01:be:c1:38:22:74:a5:bc:89:5f:1d:f6:
18:79:48:6c:40:9a:80:8c:d6:33:bd:cb:fa:6c:74:
6b:b4:39:3a:c7:41:fb:07:c5:7c:a6:76:db:59:08:
40:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:05:D2:82:C0:AD:A3:83:1A:A4:31:6C:75:1C:5F:73:DE:A5:C7:D2
X509v3 Authority Key Identifier:
keyid:0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:73:ad:1a:12:ee:e8:86:73:65:50:f6:82:78:6f:cf:bd:7d:
5f:ea:f6:5e:ab:b6:45:a6:f5:a7:1f:35:66:e0:0e:f7:dd:3d:
db:6a:a3:2f:35:94:2b:5d:40:1a:37:62:93:1e:f5:52:97:b0:
d9:68:a8:48:4a:60:b1:88:9e:4c:a7:a3:31:6b:6b:8e:be:49:
fa:bc:e5:4b:f8:cd:cf:14:77:ea:9a:6e:a8:31:08:67:45:29:
21:2c:d0:e4:35:c0:79:61:bd:e3:ed:18:41:60:ab:8d:f6:5d:
71:36:d2:8e:62:57:3e:b5:5e:24:29:fe:b3:07:c9:9e:c6:87:
89:8c:3e:07:71:e3:31:da:56:3e:c1:c1:cb:b3:bd:65:08:3c:
ea:ed:4e:55:46:df:cb:8a:62:41:95:d7:e4:82:0b:40:96:3b:
28:b3:81:e9:3c:54:e5:66:62:db:96:f4:30:4e:49:3b:d2:d3:
5c:91:ab:5e:a6:ad:9d:80:0b:bc:2b:39:8a:79:f4:17:95:de:
f5:b7:d4:0a:41:96:5a:7e:c1:9e:a0:fe:63:2a:d6:35:69:36:
c0:c6:1f:ac:9f:28:bb:8b:64:17:0b:19:2e:a9:a8:56:da:b5:
8c:3e:80:33:32:40:0a:ad:87:90:44:30:73:b8:2c:74:c8:62:
8c:67:2f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:58:14 2026 by rpki-client