Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/f1f0a0-da3c-4d95-a638-506672769d9c/1/CZoxZcQAepQBMaMnzHfMIhzBadk.mft
File: CZoxZcQAepQBMaMnzHfMIhzBadk.mft (raw, json)
Hash identifier: vcoH94gFVyxCk2Eo1287k/5J5mlPnZSDs691G5T9TIU=
Subject key identifier: 43:12:E8:CB:50:BD:E3:32:AD:8E:3D:4A:09:06:4D:97:28:A0:2A:B6
Authority key identifier: 09:9A:31:65:C4:00:7A:94:01:31:A3:27:CC:77:CC:22:1C:C1:69:D9
Certificate issuer: /CN=099a3165c4007a940131a327cc77cc221cc169d9
Certificate serial: 01A139DB7AF19251F3EC6DD5A0755A985DE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZoxZcQAepQBMaMnzHfMIhzBadk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f1f0a0-da3c-4d95-a638-506672769d9c/1/CZoxZcQAepQBMaMnzHfMIhzBadk.mft
Manifest number: 1A9E
Signing time: Wed 14 Oct 2026 10:00:47 +0000
Manifest this update: Wed 14 Oct 2026 10:00:47 +0000
Manifest next update: Thu 15 Oct 2026 10:00:47 +0000
Files and hashes: 1: CZoxZcQAepQBMaMnzHfMIhzBadk.crl (hash: oOoX87pFomnENSh9fudv3FRH9WcM0XZTxlTgM1xA6As=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f1f0a0-da3c-4d95-a638-506672769d9c/1/CZoxZcQAepQBMaMnzHfMIhzBadk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f1f0a0-da3c-4d95-a638-506672769d9c/1/CZoxZcQAepQBMaMnzHfMIhzBadk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZoxZcQAepQBMaMnzHfMIhzBadk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:db:7a:f1:92:51:f3:ec:6d:d5:a0:75:5a:98:5d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a3165c4007a940131a327cc77cc221cc169d9
Validity
Not Before: Oct 14 10:00:47 2026 GMT
Not After : Oct 15 10:00:47 2026 GMT
Subject: CN=4312e8cb50bde332ad8e3d4a09064d9728a02ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5d:54:18:2a:67:5d:4b:66:91:e6:32:34:2e:
d9:67:ea:69:6c:74:00:ab:13:ce:c0:fb:30:a6:5e:
56:9e:64:d9:59:c3:c6:98:0e:c1:b5:d6:c6:24:70:
af:00:86:0a:47:5d:a3:9d:d5:6a:7e:e7:6c:05:18:
0e:94:81:d8:20:b4:67:15:95:8d:6f:7f:2a:5a:ce:
7f:a4:f1:6f:b1:31:c6:38:89:1b:c5:2f:d4:91:5c:
5c:00:19:f6:0d:e5:70:5b:36:42:1a:8b:38:23:ea:
b2:85:e8:05:0e:27:2d:f2:75:b5:f8:99:7a:c5:0a:
52:96:40:38:46:a8:fb:be:f8:20:25:d9:fa:cb:12:
c5:7b:02:e5:5c:77:d6:60:64:da:95:b0:6b:ef:2a:
8c:34:a5:99:b2:1a:72:28:04:af:17:f7:7b:06:5b:
b6:31:f8:f9:69:8a:bf:53:0e:e1:72:e6:d5:18:a0:
f2:97:3c:9f:b9:ea:be:cd:e1:57:7b:5d:ed:e2:ef:
af:91:4f:70:50:2b:3e:05:dd:83:93:c6:a2:99:57:
1e:0c:67:97:5b:fa:5a:10:25:7e:e8:80:7b:86:14:
f4:38:bf:89:fd:65:06:14:66:61:76:fe:64:8f:d2:
a8:8d:7d:58:a4:ee:a0:11:16:1d:c0:9d:6c:5c:14:
07:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:12:E8:CB:50:BD:E3:32:AD:8E:3D:4A:09:06:4D:97:28:A0:2A:B6
X509v3 Authority Key Identifier:
keyid:09:9A:31:65:C4:00:7A:94:01:31:A3:27:CC:77:CC:22:1C:C1:69:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZoxZcQAepQBMaMnzHfMIhzBadk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f1f0a0-da3c-4d95-a638-506672769d9c/1/CZoxZcQAepQBMaMnzHfMIhzBadk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f1f0a0-da3c-4d95-a638-506672769d9c/1/CZoxZcQAepQBMaMnzHfMIhzBadk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d4:ff:8e:ad:2c:10:47:a7:d4:d5:6e:e9:91:2e:1d:1e:54:
48:c2:96:eb:43:63:03:c0:17:69:b9:47:d9:a4:e0:b6:1e:87:
05:42:93:a6:e3:b4:aa:a2:9b:b1:dd:4b:f5:91:ef:95:3a:91:
de:60:84:23:0e:f9:4e:44:52:cc:eb:ab:86:53:9d:0f:09:07:
55:f4:44:03:bc:22:26:10:72:96:06:8c:c9:ac:01:74:34:41:
ac:60:a2:42:61:5a:b1:fe:77:73:38:38:22:5e:a9:2f:8a:16:
89:90:a8:80:94:44:f8:f5:04:13:a1:2e:26:e7:eb:d7:2e:18:
f9:c8:74:a0:f6:a8:7e:05:d2:56:71:d8:9b:f9:8c:f6:e8:f3:
39:90:79:9c:0e:31:ce:76:ae:8d:99:53:56:b6:a1:03:ee:48:
9e:f8:e9:83:19:0e:85:3c:ca:d9:a4:c8:46:da:31:7e:69:2b:
e2:60:33:5c:b6:35:54:35:54:9e:42:c7:1c:4e:a9:79:15:84:
64:0c:cf:24:00:59:44:41:1c:37:06:7b:17:97:15:b7:91:da:
4f:5c:ff:38:d0:91:1a:d5:89:b0:fc:d5:4b:85:59:3a:82:66:
33:20:0e:45:2d:19:cd:a5:51:be:c9:00:a2:28:2d:c2:05:a9:
23:fd:56:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:29:04 2026 by rpki-client