Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.mft
File: czQP17PChWN63ADx5h4rjkAmWPM.mft (raw, json)
Hash identifier: ldAkiLhYLmWEKMBe2GqEa2SQs4qU9nj1YwJm+zcZlSk=
Subject key identifier: 7C:94:6A:3D:2C:88:B4:C3:93:17:05:ED:AA:66:11:02:40:4F:A9:78
Authority key identifier: 73:34:0F:D7:B3:C2:85:63:7A:DC:00:F1:E6:1E:2B:8E:40:26:58:F3
Certificate issuer: /CN=73340fd7b3c285637adc00f1e61e2b8e402658f3
Certificate serial: 01A0E13CD778DC018E25664CA9D419314C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czQP17PChWN63ADx5h4rjkAmWPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.mft
Manifest number: 15F3
Signing time: Sun 27 Sep 2026 05:00:55 +0000
Manifest this update: Sun 27 Sep 2026 05:00:55 +0000
Manifest next update: Mon 28 Sep 2026 05:00:55 +0000
Files and hashes: 1: a3EzX3WcmdhmQvwA-GnAI4JgEtw.roa (hash: C4cMB04OWyPRUy1OSkZ4yaaLwpazM0m/JqgEaW9Hrpg=)
2: czQP17PChWN63ADx5h4rjkAmWPM.crl (hash: OTrRvXt5JQdjojSKeFHRvEygKIFDZXgmDLmtpWOaLPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/czQP17PChWN63ADx5h4rjkAmWPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3c:d7:78:dc:01:8e:25:66:4c:a9:d4:19:31:4c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73340fd7b3c285637adc00f1e61e2b8e402658f3
Validity
Not Before: Sep 27 05:00:55 2026 GMT
Not After : Sep 28 05:00:55 2026 GMT
Subject: CN=7c946a3d2c88b4c3931705edaa661102404fa978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:90:0f:09:26:74:a1:9d:e4:0b:26:65:95:6d:
3a:15:a2:ab:92:55:fd:20:83:20:23:70:0e:8c:cf:
08:1a:03:98:86:0c:3d:4d:95:d8:fd:7a:5d:0b:3f:
44:a8:85:20:c2:d8:b4:3c:14:9a:fe:8e:85:02:9e:
e1:8a:4d:35:42:cb:98:86:3d:3d:c7:1e:11:69:22:
b9:ff:ae:72:67:52:77:a7:96:65:ba:93:25:a6:e2:
62:38:04:71:7b:2c:a0:73:ec:05:80:0a:01:3e:80:
19:57:26:10:85:27:f4:a6:e5:26:0d:27:7d:7d:a9:
ea:04:21:a8:0c:06:ad:ba:6c:15:37:68:57:2b:64:
9b:8a:80:e2:93:06:bc:ff:85:49:42:4d:63:6d:33:
57:e2:30:c0:ed:e5:a9:08:eb:60:a5:02:85:0d:02:
da:8d:3c:02:59:cb:5b:ae:1e:dd:70:bb:ee:90:f5:
b8:f5:33:3c:1d:a4:58:bf:71:f1:d2:fb:46:89:2e:
71:c2:65:66:4a:86:d1:db:22:90:ac:c5:77:0a:69:
ea:d2:48:69:dc:9b:80:5d:82:82:ce:60:23:09:7d:
d4:f1:2d:27:66:82:15:30:09:41:54:1c:f4:c4:47:
fb:ed:1c:78:3b:c6:ce:a7:10:f9:31:a8:3d:cf:69:
a9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:94:6A:3D:2C:88:B4:C3:93:17:05:ED:AA:66:11:02:40:4F:A9:78
X509v3 Authority Key Identifier:
keyid:73:34:0F:D7:B3:C2:85:63:7A:DC:00:F1:E6:1E:2B:8E:40:26:58:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czQP17PChWN63ADx5h4rjkAmWPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e4:49:6a:4b:9c:1a:a7:ae:ba:4c:1a:38:14:b9:a2:8e:1f:
4d:d2:a2:9d:1f:52:c8:31:17:24:c2:9a:1a:85:63:fe:87:51:
54:2a:ff:88:27:c7:ed:63:82:ed:6e:23:1d:0a:0a:c2:51:6b:
1b:fc:87:44:63:8b:e3:cf:26:75:7a:90:be:8f:85:35:3c:cd:
84:e0:a4:d7:2f:9c:77:b3:ac:86:c8:0b:3c:4a:59:33:b9:38:
ca:88:f4:a8:63:54:77:49:48:03:57:95:ef:0a:d3:35:ac:33:
49:4a:51:f2:59:fe:98:33:70:12:e3:73:b6:97:eb:15:e8:04:
17:ba:b5:97:c9:f3:0b:e5:3a:75:69:91:80:a6:f7:6f:54:41:
15:4c:e5:b5:2d:88:4a:b1:21:9d:7b:e5:72:80:2a:12:6f:25:
e0:17:cf:a9:a3:2a:9b:7a:3d:9a:18:31:46:59:d7:7d:c4:0c:
98:f6:da:89:c7:bc:77:27:5f:60:87:a0:c3:66:0d:a6:04:eb:
16:c2:b2:4b:eb:7b:04:b9:c3:aa:a3:b5:b1:a6:1a:d7:ea:67:
c5:95:c8:06:b2:4b:72:71:be:a5:f6:42:9d:2f:65:0c:f4:2a:
21:d5:eb:92:c3:27:23:e1:d9:bf:7b:bb:81:2a:54:6f:b4:f2:
b0:7d:b1:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhPNd43AGOJWZMqdQZMUxxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMzQwZmQ3YjNjMjg1NjM3YWRjMDBmMWU2MWUyYjhlNDAy
NjU4ZjMwHhcNMjYwOTI3MDUwMDU1WhcNMjYwOTI4MDUwMDU1WjAzMTEwLwYDVQQD
Eyg3Yzk0NmEzZDJjODhiNGMzOTMxNzA1ZWRhYTY2MTEwMjQwNGZhOTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pAPCSZ0oZ3kCyZllW06FaKrklX9
IIMgI3AOjM8IGgOYhgw9TZXY/XpdCz9EqIUgwti0PBSa/o6FAp7hik01QsuYhj09
xx4RaSK5/65yZ1J3p5ZlupMlpuJiOARxeyygc+wFgAoBPoAZVyYQhSf0puUmDSd9
fanqBCGoDAatumwVN2hXK2SbioDikwa8/4VJQk1jbTNX4jDA7eWpCOtgpQKFDQLa
jTwCWctbrh7dcLvukPW49TM8HaRYv3Hx0vtGiS5xwmVmSobR2yKQrMV3Cmnq0khp
3JuAXYKCzmAjCX3U8S0nZoIVMAlBVBz0xEf77Rx4O8bOpxD5Mag9z2mpKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHyUaj0siLTDkxcF7apmEQJAT6l4MB8GA1UdIwQY
MBaAFHM0D9ezwoVjetwA8eYeK45AJljzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3pRUDE3UENoV042M0FEeDVoNHJqa0FtV1BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8wYjRkYmEtMDc0Ny00ZTBmLTgwMzYt
ZjIyMjM2MDZjNTM4LzEvY3pRUDE3UENoV042M0FEeDVoNHJqa0FtV1BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC8wYjRkYmEtMDc0Ny00ZTBmLTgwMzYtZjIyMjM2MDZjNTM4
LzEvY3pRUDE3UENoV042M0FEeDVoNHJqa0FtV1BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMORJakuc
GqeuukwaOBS5oo4fTdKinR9SyDEXJMKaGoVj/odRVCr/iCfH7WOC7W4jHQoKwlFr
G/yHRGOL488mdXqQvo+FNTzNhOCk1y+cd7OshsgLPEpZM7k4yoj0qGNUd0lIA1eV
7wrTNawzSUpR8ln+mDNwEuNztpfrFegEF7q1l8nzC+U6dWmRgKb3b1RBFUzltS2I
SrEhnXvlcoAqEm8l4BfPqaMqm3o9mhgxRlnXfcQMmPbaice8dydfYIegw2YNpgTr
FsKyS+t7BLnDqqO1saYa1+pnxZXIBrJLcnG+pfZCnS9lDPQqIdXrksMnI+HZv3u7
gSpUb7TysH2xjA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 09:47:42 2026 by rpki-client