Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft
File: czmHDhAmLGcJt7YWNxNLX5pseMo.mft (raw, json)
Hash identifier: Ea14K82Bao2FxXQ4PQKelBMLb2m1LYgo3N6/aUi0xXc=
Subject key identifier: 51:C5:9C:D1:CF:A1:5F:85:6A:F7:CC:9B:0E:C2:39:05:33:57:76:CC
Authority key identifier: 73:39:87:0E:10:26:2C:67:09:B7:B6:16:37:13:4B:5F:9A:6C:78:CA
Certificate issuer: /CN=7339870e10262c6709b7b61637134b5f9a6c78ca
Certificate serial: 01A13BC96E40601E32384C954128BB3EE777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czmHDhAmLGcJt7YWNxNLX5pseMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft
Manifest number: 1AA3
Signing time: Wed 14 Oct 2026 19:00:18 +0000
Manifest this update: Wed 14 Oct 2026 19:00:18 +0000
Manifest next update: Thu 15 Oct 2026 19:00:18 +0000
Files and hashes: 1: Amuu6Txw-fMcXNv05W6lA1k97YQ.roa (hash: XAwaHImrJWvBTZ1p8VHnIGXkYFDyyQQtG8lODIvH8Sk=)
2: czmHDhAmLGcJt7YWNxNLX5pseMo.crl (hash: TLz8eAGdcY8cf6pNG0I87+uQJjsLYl7Z+lMqLNvCzgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/czmHDhAmLGcJt7YWNxNLX5pseMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:c9:6e:40:60:1e:32:38:4c:95:41:28:bb:3e:e7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7339870e10262c6709b7b61637134b5f9a6c78ca
Validity
Not Before: Oct 14 19:00:18 2026 GMT
Not After : Oct 15 19:00:18 2026 GMT
Subject: CN=51c59cd1cfa15f856af7cc9b0ec23905335776cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:db:51:56:16:5f:70:92:73:53:7a:f6:33:80:
bc:78:72:83:66:7f:81:c0:9f:4d:60:4e:0c:47:a1:
7c:4a:18:aa:c1:b0:a0:b1:9f:5c:cb:c5:95:78:62:
55:92:0d:81:47:27:7c:1a:ae:9b:32:26:8b:61:8d:
c3:f9:25:1a:b1:ed:5c:e3:ed:99:07:e1:8f:50:17:
5f:81:a0:52:50:70:7c:01:53:61:d6:f7:1a:63:9d:
55:6b:da:48:37:9b:a9:e3:16:37:d1:a3:77:bb:48:
90:00:6f:91:49:31:ea:c1:a9:f4:a6:ec:6e:96:e2:
a0:e7:27:74:20:64:a5:be:36:3f:4c:07:6c:a9:b0:
5e:e9:2e:66:fe:d5:9d:31:a5:91:09:7c:3d:fc:f0:
b9:8f:61:43:cb:58:03:6d:1e:49:60:68:89:ae:98:
07:33:ed:36:c5:65:72:5a:73:70:29:8f:e8:14:d5:
be:12:a9:cf:8b:bf:5c:c0:d4:e0:17:b4:0a:50:2b:
6d:8b:50:74:7a:c8:4d:91:70:32:6e:cb:f4:b3:55:
38:a5:f9:3d:68:d5:5f:7a:66:9a:db:47:59:d8:6e:
26:92:59:92:13:0b:1c:64:ae:30:52:fb:d7:02:cf:
53:1d:49:c6:e2:c3:a7:9c:06:ed:36:16:23:65:a2:
a2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C5:9C:D1:CF:A1:5F:85:6A:F7:CC:9B:0E:C2:39:05:33:57:76:CC
X509v3 Authority Key Identifier:
keyid:73:39:87:0E:10:26:2C:67:09:B7:B6:16:37:13:4B:5F:9A:6C:78:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czmHDhAmLGcJt7YWNxNLX5pseMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c2:58:c6:3f:fc:b4:1b:1e:9f:bc:c0:e4:e8:aa:85:f3:e1:
ce:f0:f3:d9:ae:26:9b:9e:dd:18:b9:ba:86:e9:70:35:34:ad:
cc:f2:6c:fe:8a:f2:72:8c:7e:95:6f:c3:f4:af:c5:e0:4b:cc:
2c:f1:f5:58:46:61:7f:44:ed:db:f8:eb:a6:b8:bc:06:ba:72:
89:6e:b0:5a:b2:0a:32:8c:6c:99:7a:c3:61:40:c6:07:ec:ff:
4a:44:cc:09:b6:da:41:27:43:28:1a:5a:cb:82:91:85:6c:05:
c3:84:0d:41:85:2f:5d:10:d3:69:64:3e:e1:20:91:ed:49:a0:
54:ac:9f:66:32:a7:fa:6c:eb:4a:43:0a:b2:7a:cd:e2:de:50:
9c:ab:9b:cf:00:b2:5f:90:ec:f9:6e:70:46:0c:6c:57:1f:ba:
5c:c9:65:1a:90:f6:dc:ee:6e:e6:55:77:12:12:ff:b5:0f:ef:
20:5a:30:b3:9b:40:56:c0:0c:69:6d:45:d2:a5:82:af:e9:ad:
b8:1b:3a:bf:de:a8:1e:35:5d:a2:85:14:4b:c7:6e:13:3a:8e:
26:01:16:a9:e9:03:57:d5:48:ee:57:d6:e9:69:c9:22:85:e8:
9c:81:28:6d:b6:d9:52:8a:e1:11:6b:60:3c:0a:33:42:39:66:
e0:d1:5b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:04:59 2026 by rpki-client