Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
File: czHb7QiXzOhcFINxtHzIB4Ll5ys.mft (raw, json)
Hash identifier: c62M/DLeQk4YllqoVdvTfqClDA6CVEKnr+ij80h7l2U=
Subject key identifier: 9E:AF:BB:EC:DF:C9:48:F0:8D:CB:D9:0E:1F:C4:8C:41:7D:1B:79:24
Authority key identifier: 73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B
Certificate issuer: /CN=7331dbed0897cce85c148371b47cc80782e5e72b
Certificate serial: 019F92ED97C9F7414AAA45398122FF3B768A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
Manifest number: 08B8
Signing time: Fri 24 Jul 2026 07:01:11 +0000
Manifest this update: Fri 24 Jul 2026 07:01:11 +0000
Manifest next update: Sat 25 Jul 2026 07:01:11 +0000
Files and hashes: 1: T0Q1-_qD3Ki2609r9NZI0IvfjS4.roa (hash: +nPlRWGkeYoja770vj9LfCl9js/SDYPB/SeIBGkWDVM=)
2: czHb7QiXzOhcFINxtHzIB4Ll5ys.crl (hash: YXFDU2Mxw9VmtqaMMWpmedEKIHx5ESDkJrNwwUuQRnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:97:c9:f7:41:4a:aa:45:39:81:22:ff:3b:76:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7331dbed0897cce85c148371b47cc80782e5e72b
Validity
Not Before: Jul 24 07:01:11 2026 GMT
Not After : Jul 25 07:01:11 2026 GMT
Subject: CN=9eafbbecdfc948f08dcbd90e1fc48c417d1b7924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:28:c7:83:ca:3b:b9:ab:f0:de:e5:4e:87:d0:
49:e6:aa:b4:79:76:84:73:68:c1:52:af:72:76:58:
f5:87:e8:b9:dc:10:53:55:ee:37:90:ef:b7:d0:09:
72:10:8c:71:77:85:e1:6a:45:60:73:28:7d:bb:d1:
7b:e1:7b:96:33:87:49:61:cb:0f:3d:cd:f2:e5:e4:
5a:16:c1:cd:cd:ec:f9:09:90:5a:34:07:d4:89:61:
13:ab:5c:fc:14:b1:98:de:9e:46:9b:db:f5:68:85:
a8:a9:a4:2f:ba:6a:ae:ca:40:09:92:40:e8:1f:90:
09:7b:cd:7e:cd:3f:00:99:31:c0:da:57:82:fe:eb:
37:56:6d:da:89:5f:c9:18:98:f5:99:64:a4:ca:c1:
41:1b:dd:73:5b:82:1c:d7:4c:54:56:fd:af:a7:28:
4e:9b:08:87:cb:c7:d0:36:4c:dc:47:9c:3f:46:4a:
fa:e2:a8:c1:7a:57:22:04:50:b9:02:d9:da:ce:1b:
95:8c:4e:6f:ba:10:c6:dd:1c:a4:4a:43:e3:05:bd:
5c:92:5a:9e:0b:b7:fe:b1:77:75:b5:61:0e:d2:f3:
56:6a:04:67:ea:69:81:6f:f0:d9:57:b9:09:b9:e2:
11:6c:00:95:d7:b2:c4:21:ef:18:30:8d:46:0b:c5:
e8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AF:BB:EC:DF:C9:48:F0:8D:CB:D9:0E:1F:C4:8C:41:7D:1B:79:24
X509v3 Authority Key Identifier:
keyid:73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e9:05:e2:9b:cd:1f:45:c3:b4:ee:44:11:be:47:84:d9:6b:
dd:ff:62:b4:42:dc:c8:6a:3f:86:a3:71:a2:fb:a1:7c:70:23:
3a:d8:38:4c:c1:56:e5:95:0a:03:3b:32:de:8a:d8:1f:56:97:
75:52:44:75:99:49:5e:4f:11:43:3f:40:f7:22:f7:94:6f:4b:
d9:a3:bf:69:8e:1a:d4:84:93:5b:39:76:a2:34:05:f1:55:89:
3e:e8:6d:67:01:cb:6e:bf:f1:ca:f5:13:c9:d7:c1:03:0b:46:
21:2a:0b:2d:3c:93:21:ae:8b:a1:96:eb:6b:2c:7b:8c:f4:de:
87:a9:b5:b2:88:ea:0f:0d:c3:88:08:51:20:cb:7f:36:ff:83:
ab:86:73:98:c4:86:b9:95:21:92:d5:79:ed:0a:fa:9b:38:44:
6b:83:55:f9:db:2c:64:e3:e0:fe:10:eb:96:2b:fc:3c:32:c2:
72:2a:fe:bb:4d:e8:73:a1:61:d5:47:bc:e8:e6:57:6a:09:22:
4a:2e:e2:9e:6e:a8:7e:08:70:61:e0:9b:f2:f6:04:2e:05:b1:
7b:76:29:8a:57:13:92:9c:ce:35:8f:f7:5d:c6:0e:44:35:7a:
a3:4e:b7:16:8a:2f:6d:7c:c5:ef:4c:a7:8e:6d:7f:8f:48:87:
65:ca:1a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:05:33 2026 by rpki-client