Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/CzENu2344GIhv_3pKCDHnLsUrlw.mft
File: CzENu2344GIhv_3pKCDHnLsUrlw.mft (raw, json)
Hash identifier: nyFcPoGF+0nBvN/0B2/GLMHaz4SokcSsIBHrqyT7CFo=
Subject key identifier: 1C:A7:AA:0D:88:67:16:2D:FC:E9:81:5B:43:5E:3A:05:40:DC:39:BE
Authority key identifier: 0B:31:0D:BB:6D:F8:E0:62:21:BF:FD:E9:28:20:C7:9C:BB:14:AE:5C
Certificate issuer: /CN=0b310dbb6df8e06221bffde92820c79cbb14ae5c
Certificate serial: 01A0CE249210EC7742F780505EE8A6A81BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzENu2344GIhv_3pKCDHnLsUrlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/CzENu2344GIhv_3pKCDHnLsUrlw.mft
Manifest number: E4
Signing time: Wed 23 Sep 2026 12:01:38 +0000
Manifest this update: Wed 23 Sep 2026 12:01:38 +0000
Manifest next update: Thu 24 Sep 2026 12:01:38 +0000
Files and hashes: 1: 2QbBHswT4LyT9MKxWibJ_ZC77bY.roa (hash: OMywM0jRuHNbVt6pewn8yF5ZOU7J3bKnC67SOzWkkWU=)
2: AMQVPdnd5gupAf5BUQnxLVvfPz4.roa (hash: s2nhQfFPjFWsBfYKQNz+So9BoEG35m98vEDyLpUK0wg=)
3: CzENu2344GIhv_3pKCDHnLsUrlw.crl (hash: oNSN1NRTctV1Zh+tXsdC0dZ/rXyzXQm2ZF79O8lvUi0=)
4: LXXfQN2bkC9puw5dqkTeVg1dAuM.roa (hash: enCJ6utAPOkQVHVt862XMSScyncqVjbigRDYlmgELSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/CzENu2344GIhv_3pKCDHnLsUrlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/CzENu2344GIhv_3pKCDHnLsUrlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzENu2344GIhv_3pKCDHnLsUrlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:92:10:ec:77:42:f7:80:50:5e:e8:a6:a8:1b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b310dbb6df8e06221bffde92820c79cbb14ae5c
Validity
Not Before: Sep 23 12:01:38 2026 GMT
Not After : Sep 24 12:01:38 2026 GMT
Subject: CN=1ca7aa0d8867162dfce9815b435e3a0540dc39be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5d:f7:43:f8:5d:3a:5c:02:98:96:04:f2:73:
c8:87:64:1f:9d:44:57:40:6d:b0:ad:1f:58:82:b1:
a4:c2:b5:70:5c:40:a8:79:90:22:1a:ad:30:51:9b:
ff:97:11:cb:59:06:23:36:c3:a3:d9:f6:84:b8:36:
c9:e2:c2:02:db:81:a0:ef:58:a0:98:d0:4c:a7:94:
4a:66:b8:29:47:4c:16:6a:bb:79:f2:c1:84:0f:b7:
f8:ef:2c:47:93:0b:cb:2a:87:9c:a5:12:b0:c7:a0:
7d:a5:74:15:6c:90:a6:37:be:24:cf:e4:62:e0:83:
6c:a1:0e:05:d1:40:af:2d:a7:62:e3:35:e9:62:f4:
17:aa:e2:51:c9:7a:a3:7e:5a:ea:c1:3d:04:e1:84:
9e:f4:c6:f8:18:46:ea:37:1a:6c:03:00:2a:5e:0d:
36:c1:13:63:d4:9d:09:6b:bf:8e:2a:5a:86:62:b3:
bc:13:57:0e:1a:dc:ae:ad:3e:a1:52:ae:45:fa:70:
3f:c2:ba:72:ce:e8:8b:2d:a7:2c:a5:e3:fa:a4:3a:
af:c2:87:95:be:15:4d:9d:c4:8e:f8:52:95:63:b1:
59:38:31:9d:8c:51:e0:99:f3:87:f7:7a:f6:80:8b:
14:7e:8c:49:4d:eb:0e:4f:dd:f5:32:b6:ca:67:4e:
49:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A7:AA:0D:88:67:16:2D:FC:E9:81:5B:43:5E:3A:05:40:DC:39:BE
X509v3 Authority Key Identifier:
keyid:0B:31:0D:BB:6D:F8:E0:62:21:BF:FD:E9:28:20:C7:9C:BB:14:AE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzENu2344GIhv_3pKCDHnLsUrlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/CzENu2344GIhv_3pKCDHnLsUrlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/CzENu2344GIhv_3pKCDHnLsUrlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ae:28:97:8d:ad:f3:a3:31:91:12:74:f2:d0:44:89:e4:2e:
34:2d:e1:2e:aa:21:d2:78:f1:b9:19:f1:67:41:fc:3f:71:63:
cd:fb:ba:4b:5f:84:7b:dd:7b:89:07:b7:18:bb:ab:53:d4:54:
81:2d:75:8b:93:f3:53:12:cc:40:0a:45:be:c2:6a:b4:ab:c0:
3c:8f:07:39:31:e5:91:42:47:04:e9:4e:17:ee:62:36:78:ab:
ca:48:50:54:67:95:f4:de:6c:59:60:24:0e:e8:76:a9:66:d7:
42:eb:e4:50:2d:2e:3f:67:eb:de:27:82:30:65:66:48:ec:74:
85:ab:d3:c1:c5:14:89:b2:95:f7:dd:1a:bc:2b:f2:73:90:46:
1a:45:02:34:62:c3:9a:a4:db:61:7c:2c:29:5f:f3:a4:7f:24:
f9:49:46:ba:3e:33:a7:d2:d6:64:3d:0a:f4:6f:57:5b:fc:d6:
54:72:3f:f4:ca:26:48:0f:34:d5:51:93:be:1e:4f:58:79:68:
16:ef:10:c6:c8:b1:74:14:3b:86:53:20:4c:3e:a3:8f:9e:0a:
52:35:d5:46:44:9e:40:d4:55:45:e9:39:41:b8:7c:4f:24:20:
2c:87:68:24:7b:af:86:3f:60:32:5c:01:95:a5:41:05:af:13:
74:86:6a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:11:35 2026 by rpki-client