Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
File: CRzF2QybaBpstOdyzK6-w0L7mwU.mft (raw, json)
Hash identifier: iqrOSXF/BQ7nL6/e1G5BpQqC2JR3PPOWzGy6lVGEanA=
Subject key identifier: 87:7F:94:AF:5E:F8:CE:A8:AC:49:F2:5F:3D:97:AC:86:FD:1E:A1:BF
Authority key identifier: 09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
Certificate issuer: /CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Certificate serial: 01A0E174665BA1EFF0615BFD5261E7FD60CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
Manifest number: 0E24
Signing time: Sun 27 Sep 2026 06:01:36 +0000
Manifest this update: Sun 27 Sep 2026 06:01:36 +0000
Manifest next update: Mon 28 Sep 2026 06:01:36 +0000
Files and hashes: 1: CRzF2QybaBpstOdyzK6-w0L7mwU.crl (hash: emEWMm5tPZWUSdKHYyQWyHQ0v82bTmZn3xEp5F8bsh8=)
2: zrtaoEiavdgjJ45IAZF5NnPo3Rs.roa (hash: z2iZziOE5JN+RJazqLZp00E5SjB0TdkmZt0o09ieR34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:66:5b:a1:ef:f0:61:5b:fd:52:61:e7:fd:60:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Validity
Not Before: Sep 27 06:01:36 2026 GMT
Not After : Sep 28 06:01:36 2026 GMT
Subject: CN=877f94af5ef8cea8ac49f25f3d97ac86fd1ea1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:bf:7b:cc:ae:90:23:d7:aa:87:9f:be:4d:
16:e0:1a:1c:ff:a1:d4:06:be:39:39:0e:5e:83:af:
d7:6a:10:19:75:4c:2f:fe:de:a6:8c:c2:8e:fc:2e:
97:47:2d:a1:25:bb:4d:ce:c4:c2:19:51:6b:3b:8f:
a2:30:cd:7f:b4:d4:53:e0:dd:ac:ff:f8:b2:e6:64:
30:4d:3b:6b:62:75:a2:72:32:9d:38:bc:22:08:4a:
3d:84:86:6e:bb:ce:78:85:60:81:f3:41:9f:1c:05:
0a:a9:17:7a:6f:29:f3:aa:d4:1d:66:45:65:81:7f:
15:91:93:c3:30:fe:41:94:55:c1:70:af:9c:28:9c:
62:df:42:a3:b4:f6:24:c6:4b:a0:4b:93:53:e7:01:
af:7a:0b:d2:fd:0c:2d:55:9e:6e:a9:80:64:a0:94:
9b:48:87:c6:6a:3c:ae:ed:71:8b:25:fd:e3:20:3d:
98:a3:b9:c1:00:1a:a2:4b:d8:9e:74:61:e6:41:98:
2e:90:1b:62:7b:72:f8:5a:70:3e:f0:15:c7:85:ef:
3c:6a:54:83:4c:9c:fc:27:35:07:91:fc:3f:aa:c4:
27:48:7e:6f:ab:89:ec:6d:d7:42:fe:c2:eb:0a:5b:
b7:d9:7a:05:15:9e:02:8c:1e:2c:86:80:ef:32:b7:
9c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7F:94:AF:5E:F8:CE:A8:AC:49:F2:5F:3D:97:AC:86:FD:1E:A1:BF
X509v3 Authority Key Identifier:
keyid:09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3f:95:d8:69:9f:a7:90:54:3e:ea:98:34:00:4c:fa:9c:7e:
b1:2a:a8:45:1b:a0:e7:ab:52:d1:6e:c2:4e:05:0f:ab:e5:ec:
6f:41:4e:31:11:60:69:15:ec:e2:43:f6:a4:11:c4:63:44:78:
53:00:aa:82:10:17:0a:0f:42:0a:89:2a:52:8f:b5:5b:e5:d6:
b1:c7:15:17:ad:ba:95:83:82:37:9e:00:c4:d2:cb:b3:f9:a1:
76:55:07:ad:2d:b0:a4:51:0e:01:8a:ab:63:71:74:72:20:1f:
fc:5b:6d:c4:d6:31:24:db:d4:15:a9:4e:8b:fe:15:32:c4:75:
c7:6b:23:27:f0:cc:7b:87:e7:34:2d:9a:af:53:64:65:15:e4:
5e:de:33:3f:09:94:75:0b:00:db:08:87:da:fd:a3:5a:5e:3a:
79:80:71:ce:a3:fa:46:99:0e:8d:90:81:1f:ad:24:07:31:79:
f6:ac:af:44:52:f7:52:fc:6a:0c:3b:02:6b:cf:36:87:73:16:
47:ca:48:c8:77:9e:ac:87:c3:b3:4d:85:61:37:f5:26:65:54:
88:43:62:5d:c5:85:e3:03:8b:1c:fd:0b:2f:ce:49:55:4e:12:
00:b5:59:44:e8:80:a0:88:b6:89:f8:28:2b:e9:d9:5f:d9:4d:
dd:bb:93:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 09:57:32 2026 by rpki-client