Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
File: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft (raw, json)
Hash identifier: sMWhnxALf4TeXEeiVUedo0nwYNZGNKGiqhuPY9Orpm8=
Subject key identifier: DA:6A:D9:12:34:1E:BC:14:AD:19:48:F1:5E:CC:D5:74:85:62:E7:81
Authority key identifier: 0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
Certificate issuer: /CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Certificate serial: 019D265F4263E1C1A53873C737D48D24651A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
Manifest number: 1574
Signing time: Wed 25 Mar 2026 19:01:10 +0000
Manifest this update: Wed 25 Mar 2026 19:01:10 +0000
Manifest next update: Thu 26 Mar 2026 19:01:10 +0000
Files and hashes: 1: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl (hash: RAHbZF/HGLIvzQt8MF6TdR2VGGpwsR3Is4f5zzMyoUg=)
2: ZJDmPvzDE__eYUkVLrAmHcTbK2E.roa (hash: mZslKl2yoouF0x/HaqlGPF55VMLSQDizBAGrzjr6tuY=)
3: bipK7OOAYGpHrw7S5fmJoRnxSxQ.roa (hash: rrZJyfnTOVyxttfXNIKKI76uVK5IaaBMN4ZDEVeQY94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:42:63:e1:c1:a5:38:73:c7:37:d4:8d:24:65:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Validity
Not Before: Mar 25 19:01:10 2026 GMT
Not After : Mar 26 19:01:10 2026 GMT
Subject: CN=da6ad912341ebc14ad1948f15eccd5748562e781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:46:a6:d1:ad:2b:cc:7e:be:d5:a0:34:ea:7c:
26:62:cd:14:c2:b9:dd:6f:e3:e1:c1:03:53:8b:65:
37:73:fc:85:ba:a8:d5:e0:71:6b:48:cf:b1:f3:95:
ed:ec:3e:d6:a8:86:f0:89:bb:da:d0:39:d4:45:8e:
d3:1e:06:a8:23:8b:dd:19:b8:d1:02:f9:f2:9c:35:
52:4c:f7:51:be:85:c8:23:c4:a5:69:ea:7d:c9:e7:
f4:b3:df:87:75:88:03:3d:26:72:fe:30:fa:cb:e6:
37:31:24:3d:66:51:bb:6a:f1:c9:8d:7c:57:98:b3:
18:e1:24:2a:ab:3e:ee:2a:c3:4a:38:f7:39:57:c0:
cc:69:25:a0:16:62:d5:b7:ed:0e:97:6b:65:84:bd:
a8:48:42:cc:28:7d:0d:e0:a5:9e:ed:ea:45:f9:d0:
bb:07:cc:46:3d:34:7e:e4:74:b6:3f:58:50:0d:f3:
7f:6a:f1:74:a9:26:16:66:45:ad:5e:04:1f:3f:f8:
e3:cf:32:a0:7a:fa:8b:46:10:20:56:66:ae:a3:59:
73:e9:33:fa:8f:65:25:d9:d3:c6:e7:f9:88:a9:23:
74:47:53:13:0a:eb:41:cf:28:0a:9f:61:63:65:d0:
a5:96:44:3f:03:16:26:02:ef:10:cc:75:b6:1a:03:
7a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6A:D9:12:34:1E:BC:14:AD:19:48:F1:5E:CC:D5:74:85:62:E7:81
X509v3 Authority Key Identifier:
keyid:0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4e:32:f2:02:8d:a0:91:5d:28:c9:52:91:d0:eb:2e:d7:0b:
7f:e9:cc:52:67:dc:f5:8f:76:df:d6:b3:f1:1e:4e:46:44:9f:
84:53:e5:a3:df:64:7b:cb:75:67:a3:95:3b:af:96:04:b8:1f:
6f:23:1c:cc:9a:e8:5c:9a:7b:6a:0d:bc:0b:6b:40:8b:96:da:
ed:7a:2f:8f:96:f9:74:b6:37:3a:be:67:98:17:fb:4f:b8:d1:
87:df:5a:6f:cf:e0:38:b3:28:e0:ea:de:ba:2d:81:a9:61:59:
75:af:4f:4c:4b:11:20:d6:dd:de:6b:e7:0c:eb:31:af:68:b6:
a8:11:c5:1e:6e:fe:00:dc:8a:b6:a7:5d:41:3a:bc:00:16:d3:
42:56:c4:37:4d:89:63:4d:26:1e:bd:e7:a5:8b:e6:27:18:f4:
7c:8d:0a:46:c0:a0:70:ab:19:c5:22:cf:aa:59:dc:c9:5c:04:
03:ef:49:36:d4:5f:fa:d2:45:a9:37:ef:a2:a5:86:d9:47:c9:
fb:92:72:06:ee:1b:0d:9e:df:1f:22:c3:c0:56:a1:a4:1d:78:
ef:0f:1e:ff:9c:77:cf:0f:d7:b3:28:36:ca:89:8d:5d:c5:93:
06:7a:ea:6b:68:2a:42:2b:5a:ac:90:f9:68:48:bf:70:51:7a:
07:a3:5f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:43:02 2026 by rpki-client