Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
File: CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft (raw, json)
Hash identifier: g6I5g7iGKGDy3PM86HhaqvqEXVWya+Rvtddl33MZPEY=
Subject key identifier: 7D:CB:40:27:A7:1B:D9:36:15:2E:2C:24:4F:1A:46:D5:69:C3:96:75
Authority key identifier: 08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
Certificate issuer: /CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Certificate serial: 01A0D83B8F2A47C1DCA1D3E81C3C81919776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
Manifest number: 1A02
Signing time: Fri 25 Sep 2026 11:02:56 +0000
Manifest this update: Fri 25 Sep 2026 11:02:56 +0000
Manifest next update: Sat 26 Sep 2026 11:02:56 +0000
Files and hashes: 1: 9FMdAJpJObGaK-lhU63lLtnTmI8.roa (hash: iIiD99Z2LWAsYTeI+Wi/SqEc7CWMVEjakdaMwbyIs0M=)
2: CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl (hash: DUKgVMpjVQqrgBC2BcwihtCw6UO51JhWq2IkNIjt1pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:8f:2a:47:c1:dc:a1:d3:e8:1c:3c:81:91:97:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Validity
Not Before: Sep 25 11:02:56 2026 GMT
Not After : Sep 26 11:02:56 2026 GMT
Subject: CN=7dcb4027a71bd936152e2c244f1a46d569c39675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f6:d9:7f:6d:cd:66:5e:f9:d0:a4:c8:64:f7:
cf:3f:61:18:f8:af:20:f7:46:9a:c7:3c:8f:d6:68:
23:79:a0:06:e5:dc:e1:89:45:16:34:68:10:52:8b:
82:a1:9d:71:82:95:b1:46:5f:72:07:5d:38:f3:b2:
1e:1c:17:c5:c5:17:a4:b4:11:57:08:76:d8:a8:d7:
29:e0:26:9b:9e:ee:05:a3:bf:6f:38:bc:69:65:56:
7e:de:0f:ac:70:91:d9:00:a0:46:fc:77:16:d8:27:
0b:2b:05:b1:a9:75:8a:ec:a1:60:b0:4e:f5:4e:77:
4f:80:ee:59:f2:a6:97:3c:8c:15:36:65:03:12:88:
23:5d:9e:e9:13:59:ec:f6:b2:49:ca:67:7f:22:a9:
a6:d1:5c:07:d0:88:92:a0:93:75:7e:a8:b1:15:0b:
9e:f4:96:34:b2:e9:be:4c:d4:92:0b:5f:a2:06:c6:
4e:f5:91:32:7e:8e:59:c9:cb:71:1e:fb:e1:50:88:
c4:3f:2b:61:e6:ec:22:fe:ba:d5:79:97:8c:d7:0a:
b8:53:e4:b9:9f:65:24:88:2f:9c:9b:69:cd:7f:4a:
2a:63:03:cb:3a:b1:1c:f0:09:9d:c4:5f:b0:d8:15:
f1:69:9d:42:d6:9b:2a:54:b0:ea:4f:83:dd:1b:2a:
e6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CB:40:27:A7:1B:D9:36:15:2E:2C:24:4F:1A:46:D5:69:C3:96:75
X509v3 Authority Key Identifier:
keyid:08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ab:80:90:5d:e1:11:c8:4b:51:05:2a:18:bc:ca:52:9b:88:
95:58:a2:2a:da:b9:7a:f6:27:e1:7c:0f:84:c9:65:4e:aa:72:
24:3f:a8:91:89:de:14:fa:26:69:94:28:15:a8:67:8c:7f:fb:
d2:65:20:10:fe:78:4d:4f:b4:6d:06:ea:ec:f0:85:df:3d:9e:
f8:3e:9b:e9:fb:af:3f:3e:87:7e:0c:13:94:a8:2d:4f:6d:32:
32:ec:d5:ee:77:3a:fd:f7:83:f3:cc:f9:bd:3e:73:73:af:12:
b7:ba:b2:75:e7:9d:24:77:c6:20:47:84:00:74:ab:4d:1d:16:
1f:49:b7:0e:85:e4:b3:c1:13:27:fd:6a:10:4c:20:17:be:71:
ed:c3:00:ec:23:94:fd:4d:56:ec:f7:5e:3d:6d:09:7b:6a:71:
f1:0d:2e:c5:97:df:7a:d8:e3:47:de:d5:92:5a:de:e1:a4:d9:
8e:01:f3:79:50:52:6c:30:1b:ab:62:d8:9c:89:d2:7e:57:f4:
8c:e3:ba:4e:be:b5:5e:72:56:ac:94:54:ad:ee:e5:ab:21:92:
3d:a8:26:b5:1c:14:c6:86:b4:23:b0:3d:d4:77:1a:42:44:63:
81:e1:87:4f:51:2c:59:a1:e0:d6:0c:56:d4:c1:8e:e3:6b:2b:
30:7d:3f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:29:28 2026 by rpki-client