Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
File: C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft (raw, json)
Hash identifier: YbCAYyaecdPF/386y6SHDyJZPM7j5VmWc1143vznFqg=
Subject key identifier: CA:AD:39:B2:79:DF:EC:65:91:BB:5D:3A:83:72:6A:A5:CA:FC:9B:59
Authority key identifier: 0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
Certificate issuer: /CN=0bfa7348d6c1d7186328328720730f684fa20edc
Certificate serial: 01A0CA46CA4222F3530C8550E5F5A881B976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
Manifest number: 1A71
Signing time: Tue 22 Sep 2026 18:00:31 +0000
Manifest this update: Tue 22 Sep 2026 18:00:31 +0000
Manifest next update: Wed 23 Sep 2026 18:00:31 +0000
Files and hashes: 1: Booj1ASQ-cXKqkh-r2x7fAQ_0Uw.roa (hash: zF9nqvpnqLrzZFWAUgKZQIRUSTlgxgEW6M1SkVs+U8w=)
2: C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl (hash: yCtynxUxUnDa7buBaD/nHsWhI4FW5NLo4vuF2VdqeCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:ca:42:22:f3:53:0c:85:50:e5:f5:a8:81:b9:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfa7348d6c1d7186328328720730f684fa20edc
Validity
Not Before: Sep 22 18:00:31 2026 GMT
Not After : Sep 23 18:00:31 2026 GMT
Subject: CN=caad39b279dfec6591bb5d3a83726aa5cafc9b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f1:eb:44:57:4b:cf:e5:5c:c9:65:ed:3f:3d:
8d:7c:6e:90:14:b6:94:8e:e7:6c:09:08:1d:9d:e8:
d2:52:ec:8c:08:50:a2:b8:cd:dd:05:5b:72:c2:da:
ab:c4:b9:31:82:df:b6:96:f6:48:4a:16:dd:68:60:
33:94:44:06:66:c2:e4:b8:f5:24:70:12:1b:63:02:
81:52:1a:46:cb:01:31:aa:c8:9c:66:c2:7a:8e:23:
fe:79:ed:6f:80:f9:aa:2a:39:7e:97:bc:22:c4:f1:
e5:6f:a7:5f:e5:25:f1:da:5c:68:b2:bf:98:14:20:
aa:dc:ef:d9:68:78:d6:9e:a0:bc:68:ec:29:eb:85:
50:53:82:12:cb:fa:39:4a:5d:94:d3:cd:f4:e1:ea:
45:36:bd:8c:cd:78:d7:6f:18:c8:1a:04:42:72:ad:
47:2a:ad:13:4c:72:60:ed:ee:84:5c:13:95:f7:c1:
9a:8d:22:1c:fc:26:a6:7c:93:a1:c0:ee:a6:d1:0a:
1c:8e:15:9c:c4:e0:b5:95:3f:8a:c2:ba:95:33:75:
12:a1:34:1c:f5:79:bc:47:f5:26:23:77:93:a8:1c:
f0:a4:0b:6d:4a:30:09:ea:cb:0c:45:7c:70:fc:c2:
76:94:48:bc:15:f8:60:8c:b1:be:0b:ca:9f:22:63:
7b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AD:39:B2:79:DF:EC:65:91:BB:5D:3A:83:72:6A:A5:CA:FC:9B:59
X509v3 Authority Key Identifier:
keyid:0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:35:b9:3a:4d:29:2e:4d:eb:f4:a6:8b:0b:ff:e4:4c:26:86:
26:47:cf:fe:52:e6:d9:46:65:c2:a7:1e:62:31:8a:8e:a8:24:
df:cf:8e:ae:89:28:6b:00:0a:4a:b2:12:44:ff:30:3e:bf:50:
68:b6:f4:2e:1e:f4:19:4f:2e:41:74:eb:33:1b:9a:ec:19:1b:
d2:45:bf:36:2a:32:ca:f4:0c:f7:8b:6d:81:72:d2:2e:61:e4:
f8:9b:e2:73:cd:4a:1c:9a:90:13:fe:c6:bf:3f:65:cc:3d:d8:
72:d7:d7:aa:2e:d8:79:22:71:a2:ca:97:28:80:7b:94:e0:0d:
3d:43:69:7e:da:55:ac:ad:89:1c:2c:43:c3:3c:bf:b9:5c:7c:
2e:2e:34:25:6c:67:24:f1:02:46:fc:4a:d4:df:c6:38:69:0b:
ba:91:88:3e:81:4e:f6:ea:dd:96:b7:e4:2e:ce:78:db:2f:65:
1e:f4:1c:49:bf:18:88:95:40:b7:bf:20:68:63:3f:cb:ac:c1:
08:02:da:bd:1e:80:0a:a4:6d:77:db:69:00:8f:10:2f:34:cc:
c9:9a:08:7c:4b:ea:98:f4:d6:87:73:ed:47:b6:71:b9:19:a9:
a4:82:da:47:b1:be:e5:a7:97:86:ac:8d:62:0b:95:53:60:50:
1a:fa:30:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:54:24 2026 by rpki-client