Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
File: czHb7QiXzOhcFINxtHzIB4Ll5ys.mft (raw, json)
Hash identifier: x+jeMvBDwnpaygFgDS3woiKb9CDhJCJgQ22C+WZkAMU=
Subject key identifier: D7:EC:8B:27:71:5B:F5:9C:83:04:10:20:99:C9:D0:A4:B0:D6:19:5F
Authority key identifier: 73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B
Certificate issuer: /CN=7331dbed0897cce85c148371b47cc80782e5e72b
Certificate serial: 01A0DF179513AA1B1537B1360FD349D3D3DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
Manifest number: 0964
Signing time: Sat 26 Sep 2026 19:00:59 +0000
Manifest this update: Sat 26 Sep 2026 19:00:59 +0000
Manifest next update: Sun 27 Sep 2026 19:00:59 +0000
Files and hashes: 1: T0Q1-_qD3Ki2609r9NZI0IvfjS4.roa (hash: +nPlRWGkeYoja770vj9LfCl9js/SDYPB/SeIBGkWDVM=)
2: czHb7QiXzOhcFINxtHzIB4Ll5ys.crl (hash: jHxBQUczSueuox2tQKUiqWiKJIfHvbzIZukhWyRgusQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:17:95:13:aa:1b:15:37:b1:36:0f:d3:49:d3:d3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7331dbed0897cce85c148371b47cc80782e5e72b
Validity
Not Before: Sep 26 19:00:59 2026 GMT
Not After : Sep 27 19:00:59 2026 GMT
Subject: CN=d7ec8b27715bf59c8304102099c9d0a4b0d6195f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:58:26:cb:d7:f5:60:dc:db:51:49:9e:8e:96:
e6:b1:a0:ac:9f:99:37:19:ab:1c:b8:c2:02:51:46:
9f:64:04:c6:f5:4a:17:b5:52:66:11:6b:b3:44:04:
f5:19:7a:c6:d5:55:ee:af:c0:aa:42:3b:d8:41:89:
14:c0:66:6d:45:6d:2c:28:7f:e6:db:9d:a8:b6:b4:
58:53:41:65:d0:d8:7c:fb:35:aa:23:38:e6:ea:8a:
06:95:3e:6a:7b:52:27:c7:33:6c:2a:32:a2:6a:00:
ed:c7:73:42:84:c5:67:d2:5a:a0:95:b8:b7:87:cb:
17:d0:69:ca:34:75:55:26:87:b4:44:33:a8:30:0c:
28:9c:64:03:a5:f9:d0:b8:a4:56:7f:f0:a6:dc:4f:
bf:e9:af:f2:25:3c:10:22:71:d6:68:f7:fc:e2:70:
d8:8c:24:d7:82:79:47:9c:ee:63:b8:ae:38:7b:a8:
d2:bf:a3:00:f4:2b:60:65:e1:bb:69:87:a4:88:58:
9d:df:05:ba:a9:e1:0a:96:72:61:6d:7c:12:4c:33:
c8:fe:a3:5b:bb:4d:bc:3e:46:b0:28:5b:4f:be:a4:
9b:e0:5f:d9:0c:98:6b:f3:42:58:1a:f6:1d:ea:0b:
d3:68:42:65:47:86:ec:1b:03:dd:0f:bb:f4:ec:83:
0f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EC:8B:27:71:5B:F5:9C:83:04:10:20:99:C9:D0:A4:B0:D6:19:5F
X509v3 Authority Key Identifier:
keyid:73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:69:9e:3d:8c:c4:0a:a7:bb:ff:15:f0:83:56:17:04:ad:33:
1b:7f:4e:8b:8c:30:b7:62:8b:05:0d:47:39:2b:e8:5e:b7:18:
08:5c:96:2b:00:44:16:7b:3f:75:73:5c:bf:b5:30:44:70:65:
93:6b:b1:31:ba:2f:88:59:16:3c:d8:2a:51:22:5f:4e:c6:1c:
88:27:fe:ed:25:83:f6:dc:a9:68:86:45:ab:2d:ba:46:39:29:
5c:68:46:20:a1:1e:b7:27:e2:62:46:28:f8:38:b6:8f:61:0e:
2c:65:3e:e5:fb:2f:ff:ac:f3:d2:15:7f:ee:0d:90:97:06:01:
27:2c:37:3d:56:56:e5:3a:97:86:da:9e:63:b3:6b:4f:c8:49:
7c:f7:bc:7b:b8:a0:f5:ac:f9:48:dd:e3:e6:eb:9a:ed:ed:ff:
83:fc:8c:2b:cb:16:30:ad:9b:d9:7f:f1:98:13:1a:89:8e:93:
31:4e:90:d3:5d:8e:0b:21:69:7a:ca:c0:84:6f:20:4d:ca:cf:
1f:65:84:b6:ad:ed:d6:0e:a8:7c:8a:a8:1f:cf:46:72:0a:f4:
59:f2:17:67:d1:8a:06:26:b8:91:7b:27:db:e5:03:2c:37:f1:
40:ce:32:e9:22:9d:1d:1b:54:10:48:63:ad:77:d9:43:52:8d:
be:e8:dd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:47:46 2026 by rpki-client