Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
File: CzlpzcC1_wnRmbyl2t25qrUQQOc.mft (raw, json)
Hash identifier: aW2PBNMUYwdqO1MRsyvzkA21WTK1SfTXGHbIbEUtBtY=
Subject key identifier: D4:C1:58:4D:8D:12:65:6E:11:CB:68:44:DB:88:1F:19:71:AB:62:29
Authority key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
Certificate issuer: /CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Certificate serial: 019CAEDA347C1226DB60E50BACA305C134E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
Manifest number: 1489
Signing time: Mon 02 Mar 2026 14:01:01 +0000
Manifest this update: Mon 02 Mar 2026 14:01:01 +0000
Manifest next update: Tue 03 Mar 2026 14:01:01 +0000
Files and hashes: 1: 505iyhrOOU2Q_fBeoqtfWv2GNho.roa (hash: yj3rWCbTMvNId63YkvUyXewgDeaSxoAASwUuP7aFbJE=)
2: CzlpzcC1_wnRmbyl2t25qrUQQOc.crl (hash: hY6pp40yh+y1Mad6v1qe2gB111JBqZXu0sBbiQdiSWc=)
3: jc2FVDogf_jnYkY28JwjbjPEtCY.roa (hash: moUuZDMz1G4ZG1cN9lqMYWv75YgN2qkJVtQUNQjqg+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:34:7c:12:26:db:60:e5:0b:ac:a3:05:c1:34:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Validity
Not Before: Mar 2 14:01:01 2026 GMT
Not After : Mar 3 14:01:01 2026 GMT
Subject: CN=d4c1584d8d12656e11cb6844db881f1971ab6229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:02:7f:7a:df:57:26:a8:22:d7:df:5d:49:89:
48:19:45:bd:c2:67:f4:82:75:8d:5f:23:61:a0:17:
35:e0:d3:b9:96:37:e6:56:3d:60:cd:ac:84:4c:bd:
e9:2f:12:e9:15:a1:40:e6:a6:9a:96:c8:96:51:c1:
50:5c:fc:f2:aa:c5:65:0d:9a:81:20:ae:75:b4:6e:
c0:da:73:05:f7:f3:35:4b:5b:c9:54:98:69:cd:f0:
09:13:2f:c7:49:bf:64:89:60:b3:b0:4b:f4:96:ed:
a6:80:e3:33:c6:aa:ca:af:aa:61:ec:d3:d9:1c:65:
cf:6a:b1:d4:a2:0b:f8:1e:80:cd:89:06:6a:28:13:
85:20:11:a8:85:f2:76:13:2f:6a:8e:6c:2a:80:65:
53:8e:04:0b:ef:79:d2:d0:99:5e:6d:e5:fb:63:40:
1b:d4:bb:ed:ac:0b:96:fa:4a:78:cc:4d:d3:d2:41:
3c:b7:ca:08:fe:2a:ee:27:42:9e:bd:7c:84:87:d4:
38:74:f3:89:0f:3f:c0:b8:20:6b:13:b1:d7:cc:4a:
2b:65:07:08:3f:58:75:4b:89:00:3b:37:ea:1f:da:
4a:e9:c3:4a:fb:93:cb:44:e8:b8:4e:11:76:24:29:
84:da:1d:31:95:a8:f1:59:9e:03:43:d9:e4:a2:53:
0a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C1:58:4D:8D:12:65:6E:11:CB:68:44:DB:88:1F:19:71:AB:62:29
X509v3 Authority Key Identifier:
keyid:0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7d:57:ef:55:f0:60:bc:c9:10:f1:54:12:18:82:6a:b5:7e:
c7:d0:04:af:57:81:e8:8c:ea:18:14:02:c4:5d:a1:ab:f9:bd:
d8:ea:11:41:dc:72:86:5a:87:8f:e0:6d:0c:7a:bd:e6:a3:23:
17:ca:ca:44:c3:db:03:32:a2:55:59:d7:84:97:8d:f3:65:42:
ae:2c:f2:9c:33:87:f5:d3:7c:0b:6a:51:c2:4f:b2:c8:f1:f6:
11:9a:19:56:0d:7d:15:a6:d4:29:b8:d7:48:d1:92:6d:27:02:
9e:a1:a8:35:14:c0:85:72:60:9a:df:b1:61:51:66:4c:a4:b5:
ff:a1:fd:0c:28:ec:51:ab:de:1d:f1:ab:09:0e:b0:d1:9b:32:
e9:66:c5:b3:b0:c5:9a:9d:3c:3c:5a:fe:68:fb:76:55:a6:d6:
ad:5e:ad:8b:df:79:70:8f:cf:d4:98:35:c4:12:54:5b:71:b9:
42:f7:9b:7d:01:75:1f:8d:eb:95:6e:c6:c0:79:b7:74:b7:e5:
4a:cf:fb:55:e5:9a:10:eb:9c:96:17:85:8d:57:36:1b:12:5e:
8b:f8:d2:41:81:48:38:75:50:f7:1e:b0:e3:f2:a3:aa:f8:dd:
40:9f:47:2c:3a:1d:c7:e7:11:c2:cb:0b:e3:e0:89:fb:32:c4:
48:22:b0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:07 2026 by rpki-client