Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
File: czHb7QiXzOhcFINxtHzIB4Ll5ys.mft (raw, json)
Hash identifier: gAAvM+7bWHlCDz1PTm0R2eO+6m0W+FIh44vYFdSjKlU=
Subject key identifier: C8:87:2D:E2:8D:5A:43:49:0D:79:18:43:3F:E5:6E:3B:02:31:B1:83
Authority key identifier: 73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B
Certificate issuer: /CN=7331dbed0897cce85c148371b47cc80782e5e72b
Certificate serial: 019D270482EC3FDFC5F6F1A484EBE1366C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
Manifest number: 0777
Signing time: Wed 25 Mar 2026 22:01:40 +0000
Manifest this update: Wed 25 Mar 2026 22:01:40 +0000
Manifest next update: Thu 26 Mar 2026 22:01:40 +0000
Files and hashes: 1: T0Q1-_qD3Ki2609r9NZI0IvfjS4.roa (hash: +nPlRWGkeYoja770vj9LfCl9js/SDYPB/SeIBGkWDVM=)
2: czHb7QiXzOhcFINxtHzIB4Ll5ys.crl (hash: GSIAE0XXwxnlc1I2BTNQ+1FPi7xHVLO9ZUhFrEkGyBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:82:ec:3f:df:c5:f6:f1:a4:84:eb:e1:36:6c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7331dbed0897cce85c148371b47cc80782e5e72b
Validity
Not Before: Mar 25 22:01:40 2026 GMT
Not After : Mar 26 22:01:40 2026 GMT
Subject: CN=c8872de28d5a43490d7918433fe56e3b0231b183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f2:2b:f4:6b:1a:6f:92:d5:fc:a3:03:b7:e4:
ec:1b:25:84:77:8e:55:21:e7:dd:ce:9c:2a:ff:6b:
b2:ea:83:bb:2e:fc:48:70:6a:3f:6e:6f:1b:f4:04:
bf:21:6f:22:06:7c:42:fe:23:1e:9d:31:05:df:be:
b4:36:70:20:de:fa:5d:ed:55:fa:ff:b4:36:bf:7d:
f3:e4:7a:6a:53:3b:b3:86:49:37:0d:ca:ce:b2:53:
89:84:58:74:a5:a8:b5:e8:c7:fd:29:1f:67:c2:44:
75:b9:6d:e1:b8:b0:88:03:56:d3:de:f1:39:16:92:
f8:67:ed:96:11:f5:4e:13:02:c8:57:25:1e:f9:af:
e3:10:7c:02:ab:4d:4a:2c:b5:c4:24:30:45:f0:12:
96:bf:64:5b:7e:39:a1:e8:3b:8f:28:81:db:c4:33:
c8:ee:30:b2:20:5a:c3:02:8f:37:9a:2a:b2:b6:35:
bd:8a:1a:0e:4f:6a:e1:34:35:11:61:cc:9a:cd:6f:
27:f1:3e:9d:4b:33:02:9c:99:83:8e:75:72:3f:81:
51:35:81:7a:bb:05:19:f6:4e:82:74:f7:4e:12:90:
2f:7b:a3:24:4c:23:b1:61:9a:bc:d9:92:36:c7:77:
9d:5d:fb:c1:32:9b:19:57:fa:72:fe:f8:03:56:72:
4b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:87:2D:E2:8D:5A:43:49:0D:79:18:43:3F:E5:6E:3B:02:31:B1:83
X509v3 Authority Key Identifier:
keyid:73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:81:46:78:90:aa:4f:44:23:07:a7:6f:49:f1:95:13:02:eb:
d0:0a:47:d4:11:21:7c:91:82:3c:a1:44:b8:cd:67:df:a9:8e:
e8:f2:6a:ef:4d:51:47:1c:bf:4e:81:82:a5:25:57:4a:29:03:
5c:b2:b0:ab:7a:6f:d4:0b:51:00:ea:58:e8:06:f2:72:5f:63:
6f:2d:60:9b:95:5e:70:db:e5:47:46:64:23:d0:76:b1:b2:90:
4d:2b:8a:ad:4f:e9:00:df:b8:11:36:13:36:51:9f:cd:0a:c1:
bb:a6:38:4a:ed:f0:bc:17:16:e8:9e:73:76:8a:14:7a:54:7e:
3c:ff:13:e7:c0:52:84:71:0b:a5:36:d5:ec:71:f9:86:80:ec:
0c:cd:d8:f9:01:05:31:4f:da:eb:64:3e:44:ec:7a:39:4d:2c:
6e:b3:59:e6:9d:6c:74:c1:d6:5c:9c:e5:80:87:62:97:2c:d4:
89:82:16:02:fe:49:9f:4a:44:cb:1b:5b:2f:fc:12:b5:d1:3e:
06:55:78:c8:c0:e8:dc:fa:5b:5e:6d:a8:9d:17:b3:64:44:de:
13:e6:da:2b:e5:bc:89:18:a9:04:53:4f:9a:2e:22:1f:d7:16:
ff:db:e6:4f:4b:ed:30:99:76:f6:13:78:f0:04:18:64:13:10:
4c:8d:f4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:24 2026 by rpki-client