Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.mft
File: czFVtC-vxzVab8gJx9nM9bL4zcI.mft (raw, json)
Hash identifier: rXay/8Nb5Jqsm3rskn4fvPYuzllVb4h6/a/mw4HimHY=
Subject key identifier: AC:97:B3:38:63:34:8D:0A:A7:19:E9:15:B4:0D:EC:0E:D0:F5:EC:0D
Authority key identifier: 73:31:55:B4:2F:AF:C7:35:5A:6F:C8:09:C7:D9:CC:F5:B2:F8:CD:C2
Certificate issuer: /CN=733155b42fafc7355a6fc809c7d9ccf5b2f8cdc2
Certificate serial: 019F93FF75602803C77F2825E42FFB093091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czFVtC-vxzVab8gJx9nM9bL4zcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.mft
Manifest number: 08F0
Signing time: Fri 24 Jul 2026 12:00:20 +0000
Manifest this update: Fri 24 Jul 2026 12:00:20 +0000
Manifest next update: Sat 25 Jul 2026 12:00:20 +0000
Files and hashes: 1: 5-xO46xG92m4RLESqBYUlz1rTO0.roa (hash: VW7h/KCsNr8SieeOMajNaHxkUL9nYiq4PR2CnWkp8G8=)
2: czFVtC-vxzVab8gJx9nM9bL4zcI.crl (hash: mRVyf3NGHkCB9LrlaRP737Bztr2Pkp962TnEqdAq9xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/czFVtC-vxzVab8gJx9nM9bL4zcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:75:60:28:03:c7:7f:28:25:e4:2f:fb:09:30:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733155b42fafc7355a6fc809c7d9ccf5b2f8cdc2
Validity
Not Before: Jul 24 12:00:20 2026 GMT
Not After : Jul 25 12:00:20 2026 GMT
Subject: CN=ac97b33863348d0aa719e915b40dec0ed0f5ec0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:56:da:27:56:ef:cb:95:2b:e1:da:77:01:00:
26:f5:45:5f:b9:13:ce:f5:4f:a6:2b:8b:c5:f5:94:
13:b9:34:0f:a8:cb:27:fc:55:ac:65:ee:fe:06:9f:
b5:14:94:cf:7f:31:83:fd:a0:98:c9:6a:89:5e:dd:
a6:2c:90:69:b9:94:1d:04:75:b7:97:21:fa:e0:1e:
c3:c7:5c:7f:5e:ef:46:1a:e1:48:b8:8c:02:53:19:
99:96:65:c0:44:8a:72:b0:5e:f8:54:b4:ae:9e:ba:
70:09:0c:fe:22:5d:a0:a0:c9:1d:b8:a4:f0:f0:88:
d8:a2:a2:83:e5:7a:d0:de:a6:92:32:16:2c:e9:ce:
3f:25:27:cc:86:fd:7a:d8:02:d9:a1:c9:a0:59:e9:
89:7c:7c:5d:44:2a:cf:1f:42:e1:9d:af:24:72:b5:
75:49:1e:e7:5a:47:06:2c:d5:9f:ee:f9:47:2f:52:
3a:6b:aa:b9:ae:ce:1d:26:74:30:ff:de:8b:a5:40:
e4:43:19:31:21:e8:dc:1b:a7:72:1c:c4:64:26:01:
33:b4:ce:ae:6a:c1:ed:e7:30:b1:63:67:18:6f:a8:
43:a3:7e:98:c4:eb:c9:4f:ae:fc:11:de:9c:ff:ab:
f5:3a:9e:84:23:cc:7d:bd:06:dc:a8:83:2f:02:c9:
05:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:97:B3:38:63:34:8D:0A:A7:19:E9:15:B4:0D:EC:0E:D0:F5:EC:0D
X509v3 Authority Key Identifier:
keyid:73:31:55:B4:2F:AF:C7:35:5A:6F:C8:09:C7:D9:CC:F5:B2:F8:CD:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czFVtC-vxzVab8gJx9nM9bL4zcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:5c:e1:01:4e:cd:85:a7:37:bc:e6:41:50:c8:54:c9:75:9c:
ea:b2:63:68:07:7c:f0:f1:99:b3:a0:6f:3c:a7:51:5c:94:ca:
a6:73:09:06:6b:f1:15:83:65:87:0a:c9:22:f0:8b:c0:fc:81:
18:42:28:d6:cd:89:13:e2:04:ed:97:db:13:37:84:ba:03:fe:
aa:6c:92:aa:ad:e5:55:87:4a:db:8c:92:19:b3:3b:14:9a:b8:
4d:b5:54:0a:ad:aa:75:68:28:e1:a0:5a:20:36:b3:d8:35:fc:
c0:04:32:d4:a3:ff:3a:3e:23:50:6c:39:a2:e8:16:b0:51:b4:
28:72:75:bc:9f:a4:94:6d:fe:de:6f:2f:e1:2e:fb:3f:3b:f3:
07:c3:0d:6b:46:5a:ac:87:4e:da:dd:91:35:10:ed:79:5c:1f:
98:c5:54:09:82:78:83:fb:c1:96:28:55:c4:2c:09:6f:cb:fc:
84:af:1b:ce:97:14:83:ca:1f:7c:39:64:ab:e0:58:e4:0d:53:
8f:a8:ed:76:25:e5:a9:44:46:de:65:7d:1c:e6:db:f8:57:e8:
70:ed:be:20:2d:5f:e5:5b:d8:48:3b:bf:e6:e5:08:8f:d6:23:
ce:0a:f6:b4:b7:33:5b:3d:1c:12:61:78:95:81:fd:d7:ed:10:
a0:c6:1e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:56:56 2026 by rpki-client