Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
File: CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft (raw, json)
Hash identifier: EclgAmma/e4Actnh/zL2QxrfdLEyyaSZRBX4osBefKc=
Subject key identifier: F9:19:1C:3E:E4:26:08:F6:E9:FC:22:9B:C9:63:93:47:91:61:F2:AF
Authority key identifier: 08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
Certificate issuer: /CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Certificate serial: 019D25F143EE132BEF681AE7697E4908BF97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
Manifest number: 1818
Signing time: Wed 25 Mar 2026 17:01:01 +0000
Manifest this update: Wed 25 Mar 2026 17:01:01 +0000
Manifest next update: Thu 26 Mar 2026 17:01:01 +0000
Files and hashes: 1: 9FMdAJpJObGaK-lhU63lLtnTmI8.roa (hash: iIiD99Z2LWAsYTeI+Wi/SqEc7CWMVEjakdaMwbyIs0M=)
2: CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl (hash: buZYIXThNAX6683fIMeWKDHFoSh/Ua/NUADNXrylTHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:43:ee:13:2b:ef:68:1a:e7:69:7e:49:08:bf:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Validity
Not Before: Mar 25 17:01:01 2026 GMT
Not After : Mar 26 17:01:01 2026 GMT
Subject: CN=f9191c3ee42608f6e9fc229bc96393479161f2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:05:4a:40:9b:03:01:90:1a:fe:96:77:98:d8:
7a:86:04:96:f1:69:fa:3b:f2:ce:1b:96:4a:f4:9b:
57:96:b8:b4:5e:bf:ee:93:0d:5f:83:ca:0b:82:14:
27:b7:09:b8:c2:00:31:44:4b:1f:3e:96:5c:bf:ef:
12:c9:9f:a4:30:bf:3a:af:26:37:84:6a:a6:e7:5d:
eb:4f:82:bd:d7:3d:e0:92:8d:22:3d:ee:c1:3a:7b:
f6:16:9c:40:b5:f0:5a:0c:4e:6e:ca:98:dc:9a:ef:
a9:15:95:c3:fa:ce:e0:da:8a:6a:c0:ca:bb:35:0e:
c7:b3:02:83:30:86:fb:24:9b:e3:6f:a5:23:fb:96:
1e:42:6d:21:89:6c:d5:b1:fe:7a:66:f7:d4:a9:df:
47:8a:87:46:1d:d7:0e:17:6e:3d:70:c8:5b:f0:67:
3b:c8:b8:5a:87:36:2b:b5:26:5b:72:6c:84:a6:2e:
60:a0:65:61:b5:13:2c:aa:d2:e0:d0:63:b2:d8:e5:
5c:cc:04:33:da:cf:a2:7a:7c:79:a8:14:79:e3:4f:
2c:2c:8b:b2:04:6d:c7:be:ae:e3:e1:08:64:4a:14:
37:05:08:56:35:2a:ea:7b:4e:be:1f:8e:c1:a6:33:
96:88:af:23:1d:19:77:ed:b2:f2:e2:b1:b6:2b:b2:
0a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:19:1C:3E:E4:26:08:F6:E9:FC:22:9B:C9:63:93:47:91:61:F2:AF
X509v3 Authority Key Identifier:
keyid:08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ae:a3:42:69:39:4e:cc:66:21:14:03:f0:48:58:59:13:fa:
cd:8f:d2:6c:72:09:1c:ef:fd:f0:cb:aa:2f:5d:e0:a9:77:2f:
dc:55:89:68:2c:0b:e5:4c:88:3c:ab:7c:80:68:31:5c:53:bf:
36:f0:ea:3d:47:27:ab:d2:b4:d8:15:2d:da:5d:61:c1:d5:4d:
56:eb:b4:31:79:e9:6b:4e:ee:3c:3f:13:f9:22:af:9b:dd:50:
ac:05:c6:61:1a:6d:52:7d:7d:73:ad:e1:31:eb:21:0d:a4:6a:
e2:9c:58:2d:a7:85:d0:73:62:f3:93:12:21:04:c4:b1:f5:60:
7d:44:59:50:2f:67:f3:a1:62:5b:e6:38:5c:8f:6e:4a:78:99:
12:7e:0f:5c:74:21:4d:82:f7:b0:a4:73:bf:3b:93:11:5a:68:
9f:fb:98:ba:a3:e6:e7:d2:f5:4e:d1:51:8e:38:a7:b4:be:df:
43:25:b9:6a:81:8f:d7:fe:d2:3a:0f:d9:d8:1a:21:6c:74:77:
45:28:37:cc:6e:04:2d:f7:18:43:45:f4:42:e9:c1:e1:60:f1:
27:89:1d:38:40:79:ec:b0:52:91:31:0c:f3:c3:1c:ff:cb:ab:
ea:c2:07:d9:70:e4:99:14:1b:23:ed:37:6a:81:3f:ad:e1:43:
cc:96:08:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:42:03 2026 by rpki-client