Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft
File: czaDy4VtbZ_1jih-ipBdKS3KazQ.mft (raw, json)
Hash identifier: NZpD22PiubsCfm7DK7PlhwyyMXcHB2MkFaMqmPGXmtE=
Subject key identifier: C8:B3:E3:D4:1D:33:4F:99:F5:64:65:2C:79:CA:C1:9F:15:D6:56:E9
Authority key identifier: 73:36:83:CB:85:6D:6D:9F:F5:8E:28:7E:8A:90:5D:29:2D:CA:6B:34
Certificate issuer: /CN=733683cb856d6d9ff58e287e8a905d292dca6b34
Certificate serial: 019D27040FE6A1C334569E1DCC19471E3DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czaDy4VtbZ_1jih-ipBdKS3KazQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft
Manifest number: 14CC
Signing time: Wed 25 Mar 2026 22:01:10 +0000
Manifest this update: Wed 25 Mar 2026 22:01:10 +0000
Manifest next update: Thu 26 Mar 2026 22:01:10 +0000
Files and hashes: 1: FhBG6EZ_K984KUIz81WFHdsRYxw.roa (hash: KOb98v+CSmeD7NnmSTq6hlY5QkxEZeCFyxvl1RnJ2hw=)
2: czaDy4VtbZ_1jih-ipBdKS3KazQ.crl (hash: aB41VqcHi+529qfCpKpPMI9oZruG1dWDTl8Q22XCTWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/czaDy4VtbZ_1jih-ipBdKS3KazQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:0f:e6:a1:c3:34:56:9e:1d:cc:19:47:1e:3d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733683cb856d6d9ff58e287e8a905d292dca6b34
Validity
Not Before: Mar 25 22:01:10 2026 GMT
Not After : Mar 26 22:01:10 2026 GMT
Subject: CN=c8b3e3d41d334f99f564652c79cac19f15d656e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b7:85:99:c5:79:e0:40:b4:d5:a0:05:a9:f8:
25:63:6b:e5:2b:b1:d2:7a:99:0f:50:50:81:9f:14:
3d:d2:9f:5a:eb:f0:42:64:63:76:3d:ec:85:62:07:
07:0a:d1:77:9c:09:37:41:e5:2d:26:24:99:f6:58:
4f:5f:4c:33:76:da:e5:89:93:38:42:8a:d2:20:26:
62:23:24:71:27:b2:f1:4d:f1:d9:5a:73:86:0d:12:
22:04:8a:39:1f:2c:4f:6c:65:76:37:4a:fd:d1:30:
ab:a7:bb:53:ff:34:a7:88:21:15:dc:71:71:f7:1e:
db:8c:77:c8:7b:82:92:ac:75:9f:9e:c3:22:a3:ba:
42:cb:31:78:c1:ed:15:8f:f7:f6:fa:c0:19:59:89:
f5:c6:97:b3:9c:ae:b7:fa:bc:ed:13:30:50:33:cc:
a9:b8:63:ab:9a:38:da:c6:39:47:21:b7:5e:f5:af:
a7:ec:65:45:fc:f4:7a:e8:92:d9:54:ee:86:8c:c8:
da:27:3e:5c:22:8f:f1:f3:29:69:f5:44:34:13:f2:
d1:56:bb:54:d4:34:e8:be:dd:14:2a:af:53:2a:b8:
fa:49:63:b9:35:08:1f:ec:86:29:a0:af:d4:9a:99:
cb:e1:de:1e:1f:4c:ae:8b:d2:59:34:c4:37:db:55:
55:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B3:E3:D4:1D:33:4F:99:F5:64:65:2C:79:CA:C1:9F:15:D6:56:E9
X509v3 Authority Key Identifier:
keyid:73:36:83:CB:85:6D:6D:9F:F5:8E:28:7E:8A:90:5D:29:2D:CA:6B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czaDy4VtbZ_1jih-ipBdKS3KazQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d3:cd:4b:f4:3b:5e:7e:a7:c5:99:ac:da:d4:99:fc:f3:28:
02:f6:b0:02:de:c9:b9:3f:15:fb:5a:56:e7:fb:3a:b6:53:4e:
95:29:96:97:02:a9:bf:83:41:a2:53:cd:f7:f7:85:2d:f5:94:
34:69:00:4f:ad:34:9f:89:e2:9b:13:09:b3:96:05:04:59:d1:
bc:c4:6e:0a:07:c0:31:9a:94:39:c8:8f:79:21:ea:0d:5b:f5:
be:0e:74:e5:e1:e4:2e:9d:99:53:c5:15:af:17:8e:e5:45:6a:
09:8f:d5:11:f7:26:ee:5c:cd:92:e8:5e:1d:55:d3:bf:7e:ee:
d0:0a:36:85:1f:82:ca:f9:7b:40:8a:1b:e4:2b:ac:fc:16:b5:
70:3a:6b:24:bc:cb:b9:ae:7b:da:63:cd:2a:37:a6:f6:66:58:
4d:94:e8:95:ef:a4:41:c7:6b:54:68:62:d2:72:a9:da:2c:2d:
bc:11:86:a2:d2:bc:16:b4:f4:59:af:e8:79:3f:16:99:17:07:
10:fe:eb:62:61:5a:bf:c8:8f:4b:6e:5a:2d:d6:df:da:88:b5:
cc:be:df:c6:40:8f:8e:9b:ea:a4:85:7e:5a:2d:11:60:ce:2f:
dd:2e:32:3e:14:34:ba:ce:f6:c3:13:20:5d:7d:a9:76:d4:7a:
84:97:19:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBA/mocM0Vp4dzBlHHj2nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMzY4M2NiODU2ZDZkOWZmNThlMjg3ZThhOTA1ZDI5MmRj
YTZiMzQwHhcNMjYwMzI1MjIwMTEwWhcNMjYwMzI2MjIwMTEwWjAzMTEwLwYDVQQD
EyhjOGIzZTNkNDFkMzM0Zjk5ZjU2NDY1MmM3OWNhYzE5ZjE1ZDY1NmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7eFmcV54EC01aAFqfglY2vlK7HS
epkPUFCBnxQ90p9a6/BCZGN2PeyFYgcHCtF3nAk3QeUtJiSZ9lhPX0wzdtrliZM4
QorSICZiIyRxJ7LxTfHZWnOGDRIiBIo5HyxPbGV2N0r90TCrp7tT/zSniCEV3HFx
9x7bjHfIe4KSrHWfnsMio7pCyzF4we0Vj/f2+sAZWYn1xpeznK63+rztEzBQM8yp
uGOrmjjaxjlHIbde9a+n7GVF/PR66JLZVO6GjMjaJz5cIo/x8ylp9UQ0E/LRVrtU
1DTovt0UKq9TKrj6SWO5NQgf7IYpoK/UmpnL4d4eH0yui9JZNMQ321VVPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiz49QdM0+Z9WRlLHnKwZ8V1lbpMB8GA1UdIwQY
MBaAFHM2g8uFbW2f9Y4ofoqQXSktyms0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3phRHk0VnRiWl8xamloLWlwQmRLUzNLYXpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS84NDQ3NjktY2IzZS00NWNkLTkxNjUt
Njg3YWU2ZmJhM2FkLzEvY3phRHk0VnRiWl8xamloLWlwQmRLUzNLYXpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS84NDQ3NjktY2IzZS00NWNkLTkxNjUtNjg3YWU2ZmJhM2Fk
LzEvY3phRHk0VnRiWl8xamloLWlwQmRLUzNLYXpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtPNS/Q7
Xn6nxZms2tSZ/PMoAvawAt7JuT8V+1pW5/s6tlNOlSmWlwKpv4NBolPN9/eFLfWU
NGkAT600n4nimxMJs5YFBFnRvMRuCgfAMZqUOciPeSHqDVv1vg505eHkLp2ZU8UV
rxeO5UVqCY/VEfcm7lzNkuheHVXTv37u0Ao2hR+Cyvl7QIob5Cus/Ba1cDprJLzL
ua572mPNKjem9mZYTZTole+kQcdrVGhi0nKp2iwtvBGGotK8FrT0Wa/oeT8WmRcH
EP7rYmFav8iPS25aLdbf2oi1zL7fxkCPjpvqpIV+Wi0RYM4v3S4yPhQ0us72wxMg
XX2pdtR6hJcZiw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:19:44 2026 by rpki-client