
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
File: CRzF2QybaBpstOdyzK6-w0L7mwU.mft (raw, json)
Hash identifier: U0jNlFJd7n2b7n3AAC44Ik1ayu8iRN0tW/+p+D5aQIM=
Subject key identifier: F7:1B:E4:89:83:15:B2:B4:96:22:DF:6F:6C:FF:37:B0:5D:0A:29:5D
Authority key identifier: 09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
Certificate issuer: /CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Certificate serial: 019F8F7F88012A4E7FB0431EAF8ED3A17D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
Manifest number: 0D75
Signing time: Thu 23 Jul 2026 15:02:07 +0000
Manifest this update: Thu 23 Jul 2026 15:02:07 +0000
Manifest next update: Fri 24 Jul 2026 15:02:07 +0000
Files and hashes: 1: CRzF2QybaBpstOdyzK6-w0L7mwU.crl (hash: ONyAAqkTa9i4WZ9Llux2FKB+tjAEKw60pyKx7yc3/jg=)
2: zrtaoEiavdgjJ45IAZF5NnPo3Rs.roa (hash: z2iZziOE5JN+RJazqLZp00E5SjB0TdkmZt0o09ieR34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:88:01:2a:4e:7f:b0:43:1e:af:8e:d3:a1:7d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Validity
Not Before: Jul 23 15:02:07 2026 GMT
Not After : Jul 24 15:02:07 2026 GMT
Subject: CN=f71be4898315b2b49622df6f6cff37b05d0a295d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ab:2a:4b:a3:73:06:f9:a6:93:a5:fd:2d:f7:
1f:d8:65:90:d4:d6:f1:6d:3c:73:d2:e7:fb:9e:0f:
e5:7c:dd:b5:b4:73:57:cd:bb:48:25:14:4d:a9:60:
ef:84:2b:3d:12:d6:01:b2:e8:42:c8:cd:3f:cb:33:
f5:62:0b:89:bc:60:d4:b2:f4:e5:ca:05:fb:1a:d4:
0e:b5:d5:08:0d:b6:e6:a2:6f:03:c2:7d:ed:c2:6f:
e6:8c:bf:44:8b:5e:bc:8a:2e:7a:dc:a2:56:2e:1d:
c4:a2:e3:51:99:13:06:9d:87:2c:da:00:4c:e9:1b:
39:f6:8c:3d:60:fb:c7:0c:6f:f3:9d:ec:7d:dd:2d:
f2:b0:c9:f5:69:77:02:73:26:95:77:eb:db:8d:a7:
28:5b:eb:16:cc:39:ea:e7:6c:27:0b:21:e5:98:8b:
9e:bb:48:ed:40:7a:a8:c3:30:36:20:1d:a6:01:d2:
9d:5c:4d:39:4b:52:a1:e3:01:fa:b7:ed:40:e1:f2:
29:b6:25:2a:10:ae:33:bb:09:47:da:45:e5:eb:42:
69:36:9f:e6:a7:12:be:02:41:6f:07:14:ff:6c:e9:
3c:1b:5b:ce:da:b5:1e:8d:46:ec:cc:ce:cf:3d:c6:
a2:8b:5a:9e:55:14:58:9e:58:59:86:e2:89:c7:9a:
5f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1B:E4:89:83:15:B2:B4:96:22:DF:6F:6C:FF:37:B0:5D:0A:29:5D
X509v3 Authority Key Identifier:
keyid:09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c8:1e:4a:33:3c:ed:cf:8a:3d:de:15:10:d5:62:2c:6d:9f:
6a:bf:2d:d5:1b:4a:65:a9:46:ce:44:2b:9d:85:b3:9a:45:6b:
6d:eb:20:83:8d:c3:1d:d1:f2:44:d7:b0:0e:56:03:e5:c3:20:
0b:b3:5e:f0:4b:dd:58:63:11:08:a5:fb:ff:f8:64:87:12:0b:
b8:e9:2d:76:6f:70:ff:51:e1:09:91:1b:0b:9e:69:1f:e6:7b:
cd:f7:59:dd:6a:7a:76:a2:6d:f1:b1:c6:3c:43:b8:04:9a:61:
7c:f2:e7:b8:32:5c:82:dd:88:de:3f:0e:90:02:ab:8e:49:28:
3b:b0:82:b0:6c:8d:8d:98:7b:a8:e6:6b:bf:3e:ad:10:48:1a:
34:c1:eb:dd:5f:7f:4d:94:50:8b:32:ef:99:03:e9:9c:f4:fc:
2c:3c:4f:c2:19:a4:ca:9d:db:01:da:11:83:a6:15:24:3f:f3:
75:38:fd:fd:fb:3d:9f:a2:d6:5d:b1:0c:ac:3c:65:a4:28:83:
30:9b:91:7b:65:39:27:62:00:be:ef:80:fc:33:66:43:52:da:
58:f5:72:1f:45:18:7d:e9:6c:10:58:55:dd:53:76:0c:2f:53:
f7:81:2c:7d:04:a8:51:da:1a:bb:14:01:bb:29:ae:ea:d3:9f:
d2:9a:0c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:07:33 2026 by rpki-client