Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
File: 1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft (raw, json)
Hash identifier: CCrAbwZ3fjT+5yoFSIDJSKYt8u2RsGYdoRMOuKqrah0=
Subject key identifier: 58:24:B9:B2:8A:36:34:57:57:2C:E9:8E:FD:52:B0:D9:3C:1F:04:11
Authority key identifier: D4:2C:C4:02:67:E3:59:2E:1B:52:F0:F0:09:6C:B1:F2:F0:AF:16:7D
Certificate issuer: /CN=d42cc40267e3592e1b52f0f0096cb1f2f0af167d
Certificate serial: 019F916CE68D812A0AE7ABB96A0A959E7F36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
Manifest number: 06DE
Signing time: Fri 24 Jul 2026 00:01:00 +0000
Manifest this update: Fri 24 Jul 2026 00:01:00 +0000
Manifest next update: Sat 25 Jul 2026 00:01:00 +0000
Files and hashes: 1: 1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl (hash: MzlUddVaT7aFMHk3GQs5IpgsPpsut8YAYdKYhbQv+G0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:e6:8d:81:2a:0a:e7:ab:b9:6a:0a:95:9e:7f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42cc40267e3592e1b52f0f0096cb1f2f0af167d
Validity
Not Before: Jul 24 00:01:00 2026 GMT
Not After : Jul 25 00:01:00 2026 GMT
Subject: CN=5824b9b28a363457572ce98efd52b0d93c1f0411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:18:84:6f:33:aa:d8:46:47:7f:95:a1:15:30:
69:6d:73:90:07:f2:0b:3e:1e:70:3a:ef:68:a5:46:
ac:70:13:75:b4:2c:33:29:e9:d7:14:12:ab:c4:9f:
0e:ca:71:4d:3c:ac:ab:a2:a5:46:10:62:04:94:56:
05:94:00:bb:e9:ad:dd:1f:0f:d8:6b:56:8c:7a:d9:
73:7b:55:6f:64:1f:cb:68:80:59:cc:88:64:b2:d0:
20:81:5e:fd:19:e7:71:af:4e:1d:f4:e1:a7:a9:89:
b1:56:a4:99:5c:30:2a:c7:cf:79:2c:f5:61:0c:9a:
1f:54:c5:52:6d:19:b9:19:e1:fb:73:44:9c:ac:77:
b2:95:56:e5:69:d8:5c:8e:2f:b5:65:fe:35:21:0c:
50:78:a4:73:00:c2:73:a4:93:1a:c2:86:68:b4:01:
d6:28:21:27:ec:24:f4:68:0c:2d:c7:29:e3:f4:bf:
78:70:76:44:58:ec:4d:ef:6e:aa:16:5d:1a:a5:35:
83:3a:92:08:c3:87:d4:91:80:80:00:fe:01:5f:53:
bd:04:50:18:80:58:e7:67:38:db:5b:a1:4f:bb:eb:
4b:6a:04:9b:e3:65:86:1e:91:cc:fd:18:8b:06:6d:
1e:71:53:8d:21:8b:71:dc:30:a6:9c:0d:28:10:69:
1d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:24:B9:B2:8A:36:34:57:57:2C:E9:8E:FD:52:B0:D9:3C:1F:04:11
X509v3 Authority Key Identifier:
keyid:D4:2C:C4:02:67:E3:59:2E:1B:52:F0:F0:09:6C:B1:F2:F0:AF:16:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:94:e0:d0:28:0f:bb:20:59:63:32:f4:15:6e:94:59:f9:b8:
3f:0c:d2:55:cd:49:b1:f1:90:1b:a6:b1:93:34:d9:77:64:48:
98:91:7a:34:ab:85:7b:39:1f:f3:c0:51:4a:8d:c7:bc:5d:5c:
6c:05:bc:9c:47:cc:d0:a1:10:be:5b:98:79:b4:34:13:64:23:
61:4f:22:a7:7f:0d:a0:32:bc:5b:81:50:35:ca:71:91:60:c2:
aa:8b:dc:43:05:de:55:03:43:83:0f:15:eb:23:62:4c:de:3d:
60:bb:19:31:80:5a:5d:23:c6:1c:8f:27:2f:9e:9b:fd:db:41:
7d:ea:c8:bf:e4:1c:4b:f3:91:7f:96:85:59:26:03:7f:b3:8b:
a2:b3:e7:3e:df:c8:eb:d5:dc:64:ff:7e:7b:b0:33:09:e4:6f:
f5:2d:46:42:32:fa:64:f5:af:30:a7:7d:f2:d6:c6:4b:32:5b:
4d:c0:6d:95:7e:cf:ac:5f:41:5b:ef:21:43:7b:04:2a:86:85:
5e:e1:52:2a:d3:b0:27:69:55:f7:03:a6:e7:35:3b:3f:9d:5f:
5f:d8:68:fa:dc:0f:29:2d:e0:7f:0a:2a:e8:a1:ed:5c:57:10:
0a:50:2a:90:a5:ab:c8:0a:c8:a0:41:9c:78:04:3f:38:cf:21:
14:fa:ea:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:25:21 2026 by rpki-client