Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
File: 1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft (raw, json)
Hash identifier: pWlRJL21zDlFgv8pD4ePKf5LSA4RQpPtZTjmcmnmZ90=
Subject key identifier: 4A:0A:78:B5:B1:BE:9D:2B:9A:DD:73:06:FE:8C:DA:78:29:20:58:D2
Authority key identifier: D4:2C:C4:02:67:E3:59:2E:1B:52:F0:F0:09:6C:B1:F2:F0:AF:16:7D
Certificate issuer: /CN=d42cc40267e3592e1b52f0f0096cb1f2f0af167d
Certificate serial: 01A0DF858E0CEA341AB12E2FF44850FE19EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
Manifest number: 078B
Signing time: Sat 26 Sep 2026 21:01:06 +0000
Manifest this update: Sat 26 Sep 2026 21:01:06 +0000
Manifest next update: Sun 27 Sep 2026 21:01:06 +0000
Files and hashes: 1: 1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl (hash: 30TnL0rBmMT5NCgR5nWQ/Y0mSckVJ6lyURutqXWRKBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:85:8e:0c:ea:34:1a:b1:2e:2f:f4:48:50:fe:19:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42cc40267e3592e1b52f0f0096cb1f2f0af167d
Validity
Not Before: Sep 26 21:01:06 2026 GMT
Not After : Sep 27 21:01:06 2026 GMT
Subject: CN=4a0a78b5b1be9d2b9add7306fe8cda78292058d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d2:c1:0b:6c:7b:a9:d4:e2:39:9d:54:99:cb:
b1:d1:19:c9:da:b4:fe:74:cd:c4:09:de:32:0f:d8:
29:c3:87:af:74:53:50:2d:c0:06:e1:9b:43:2f:ac:
0f:43:ab:0c:a2:7f:c7:85:98:88:43:e7:09:58:17:
98:c5:f5:c6:29:50:11:52:e1:02:c7:0b:f2:e0:99:
87:39:06:5a:4f:4e:d2:75:ca:e6:29:93:cf:e1:d4:
18:9b:87:36:66:4a:05:ac:f0:63:41:38:0b:b0:2c:
45:8c:ed:21:d5:80:fe:47:0a:04:08:76:83:70:ca:
40:49:b1:02:bc:da:48:32:69:97:95:4b:6f:f1:50:
83:c8:fa:d5:76:2c:05:20:a8:d7:e3:82:f8:e7:22:
da:05:62:7c:49:9b:ad:54:9b:15:9d:73:89:70:3f:
7c:42:6f:b3:e2:80:cd:04:d0:20:52:aa:52:f2:a4:
05:63:e2:0c:c5:4d:d8:10:59:be:8e:85:a3:96:6a:
ae:99:5e:65:3a:f7:cc:85:70:d3:40:71:cb:95:a8:
12:16:4c:28:f6:f2:b5:61:55:aa:b7:14:f6:b5:ad:
60:37:25:1c:14:a6:31:86:b1:2d:34:d7:a8:a3:83:
b6:45:7a:91:f9:9a:71:47:0b:df:18:e6:38:7e:33:
f0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0A:78:B5:B1:BE:9D:2B:9A:DD:73:06:FE:8C:DA:78:29:20:58:D2
X509v3 Authority Key Identifier:
keyid:D4:2C:C4:02:67:E3:59:2E:1B:52:F0:F0:09:6C:B1:F2:F0:AF:16:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d9:be:ee:93:58:fc:d2:e7:96:c7:df:ca:a3:c5:62:54:d3:
60:eb:64:43:60:93:4c:ef:16:56:d1:2d:86:94:eb:55:f2:ac:
ed:81:8e:11:43:06:95:29:8a:dd:c9:57:62:a9:ff:61:64:0b:
3d:91:21:d8:2f:18:2d:9f:8f:8e:f7:b4:cf:78:66:70:01:41:
8b:32:01:ea:08:7c:7a:e2:e6:33:5a:ab:6b:95:b8:48:74:93:
b1:e8:e8:89:90:a8:c1:83:ef:cd:bf:9b:2d:1e:bd:c3:9e:a5:
58:c6:bf:f1:a2:74:7e:8a:58:f8:dd:47:06:ea:c0:f1:ed:b5:
04:bb:8d:d6:2d:77:d0:ba:0f:25:3e:a9:11:42:b8:19:ad:90:
27:19:29:93:3c:02:16:33:fc:a2:c3:57:7a:39:13:24:3e:8a:
15:82:a9:49:51:50:ab:71:9a:09:9f:bb:a4:24:93:8e:93:22:
47:dc:b3:b4:a7:c5:2c:96:6e:a3:7c:0a:ed:53:d0:30:af:ce:
0b:c1:ac:99:89:a1:b3:fe:f9:0d:a6:6b:8e:bf:fc:f0:e1:15:
37:28:6d:15:b0:42:30:82:93:8e:fc:79:c3:d1:00:ec:fc:f9:
c5:99:52:a9:72:21:ef:ad:51:64:6f:4b:2f:8f:32:e9:dc:c7:
c9:bf:22:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfhY4M6jQasS4v9EhQ/hnvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MmNjNDAyNjdlMzU5MmUxYjUyZjBmMDA5NmNiMWYyZjBh
ZjE2N2QwHhcNMjYwOTI2MjEwMTA2WhcNMjYwOTI3MjEwMTA2WjAzMTEwLwYDVQQD
Eyg0YTBhNzhiNWIxYmU5ZDJiOWFkZDczMDZmZThjZGE3ODI5MjA1OGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9LBC2x7qdTiOZ1Umcux0RnJ2rT+
dM3ECd4yD9gpw4evdFNQLcAG4ZtDL6wPQ6sMon/HhZiIQ+cJWBeYxfXGKVARUuEC
xwvy4JmHOQZaT07SdcrmKZPP4dQYm4c2ZkoFrPBjQTgLsCxFjO0h1YD+RwoECHaD
cMpASbECvNpIMmmXlUtv8VCDyPrVdiwFIKjX44L45yLaBWJ8SZutVJsVnXOJcD98
Qm+z4oDNBNAgUqpS8qQFY+IMxU3YEFm+joWjlmqumV5lOvfMhXDTQHHLlagSFkwo
9vK1YVWqtxT2ta1gNyUcFKYxhrEtNNeoo4O2RXqR+ZpxRwvfGOY4fjPwqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoKeLWxvp0rmt1zBv6M2ngpIFjSMB8GA1UdIwQY
MBaAFNQsxAJn41kuG1Lw8AlssfLwrxZ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUN6RUFtZmpXUzRiVXZEd0NXeXg4dkN2Rm4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83MTM0NWQtMmYyZC00YjU5LTllNjct
MTZlMTMwODczN2IwLzEvMUN6RUFtZmpXUzRiVXZEd0NXeXg4dkN2Rm4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My83MTM0NWQtMmYyZC00YjU5LTllNjctMTZlMTMwODczN2Iw
LzEvMUN6RUFtZmpXUzRiVXZEd0NXeXg4dkN2Rm4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUdm+7pNY
/NLnlsffyqPFYlTTYOtkQ2CTTO8WVtEthpTrVfKs7YGOEUMGlSmK3clXYqn/YWQL
PZEh2C8YLZ+Pjve0z3hmcAFBizIB6gh8euLmM1qra5W4SHSTsejoiZCowYPvzb+b
LR69w56lWMa/8aJ0fopY+N1HBurA8e21BLuN1i130LoPJT6pEUK4Ga2QJxkpkzwC
FjP8osNXejkTJD6KFYKpSVFQq3GaCZ+7pCSTjpMiR9yztKfFLJZuo3wK7VPQMK/O
C8GsmYmhs/75DaZrjr/88OEVNyhtFbBCMIKTjvx5w9EA7Pz5xZlSqXIh761RZG9L
L48y6dzHyb8iLw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 02:50:39 2026 by rpki-client