Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
File: CzlpzcC1_wnRmbyl2t25qrUQQOc.mft (raw, json)
Hash identifier: fMkumkHaKJ+2cSwID1T1rEOzCUgtqKBccrYkeIDlkug=
Subject key identifier: EF:9A:1C:66:96:81:57:A8:8C:8A:B0:EA:94:ED:EF:73:36:6F:F3:5F
Authority key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
Certificate issuer: /CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Certificate serial: 019EC1ED93901013A13A19B498ECBBC7A6D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
Manifest number: 159C
Signing time: Sat 13 Jun 2026 17:00:32 +0000
Manifest this update: Sat 13 Jun 2026 17:00:32 +0000
Manifest next update: Sun 14 Jun 2026 17:00:32 +0000
Files and hashes: 1: 505iyhrOOU2Q_fBeoqtfWv2GNho.roa (hash: yj3rWCbTMvNId63YkvUyXewgDeaSxoAASwUuP7aFbJE=)
2: CzlpzcC1_wnRmbyl2t25qrUQQOc.crl (hash: ssZunMhtBvzPsXRxpSrLyM6bXz7+/xWpXqhSIjIx6+I=)
3: jc2FVDogf_jnYkY28JwjbjPEtCY.roa (hash: moUuZDMz1G4ZG1cN9lqMYWv75YgN2qkJVtQUNQjqg+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:93:90:10:13:a1:3a:19:b4:98:ec:bb:c7:a6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Validity
Not Before: Jun 13 17:00:32 2026 GMT
Not After : Jun 14 17:00:32 2026 GMT
Subject: CN=ef9a1c66968157a88c8ab0ea94edef73366ff35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:91:2f:01:38:91:a5:24:28:83:d7:51:92:b3:
d0:34:09:96:3e:24:cd:fa:f1:57:93:3a:6b:ef:49:
86:d6:01:4b:e0:00:fc:8f:43:04:aa:da:c2:da:18:
7c:55:67:32:07:cd:16:36:a4:3f:b0:a2:9c:82:2e:
3c:d0:c8:aa:96:01:da:b0:8c:7c:6d:b0:aa:05:1a:
8f:03:49:41:ea:15:fb:ae:3e:82:8f:fe:c5:9c:68:
d9:75:9e:ac:24:cf:c4:81:c9:89:7d:a0:fe:a5:cf:
77:29:04:92:6f:60:c1:ea:02:fe:3d:85:41:09:2e:
9e:94:f5:92:c4:23:a2:87:f8:38:b0:0a:7a:15:d8:
ca:b7:78:ca:3d:cd:b6:2c:c2:b0:9d:54:f2:34:2d:
59:72:8a:da:60:5c:77:bb:cf:45:a2:47:9d:af:93:
52:c1:8f:b9:bf:dc:b9:36:9d:a7:aa:aa:de:58:b9:
39:eb:52:0d:f2:7d:12:66:68:f6:aa:62:01:5f:c1:
cd:5d:f9:ff:fe:26:9c:db:67:28:3a:fd:c8:cd:8e:
c0:36:35:c3:15:1a:bb:a5:18:46:84:03:49:7b:31:
62:4d:a0:57:5f:19:d4:b7:b5:fd:fb:42:7f:1d:ee:
14:ed:50:5e:3d:3b:12:f9:68:9d:c8:af:c4:a5:dd:
35:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9A:1C:66:96:81:57:A8:8C:8A:B0:EA:94:ED:EF:73:36:6F:F3:5F
X509v3 Authority Key Identifier:
keyid:0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:34:11:9b:91:9e:13:6d:4b:0a:d0:85:3d:39:89:6d:a2:1d:
67:3b:14:6b:24:bd:37:cf:b6:7f:eb:32:34:6a:a1:2e:b7:27:
49:db:94:6d:21:72:9c:ba:b2:37:28:a5:99:19:ea:74:12:c2:
6b:83:80:92:9b:b3:97:cd:d6:45:4d:09:fa:cd:cc:23:10:77:
3c:3d:43:ad:c8:d6:a7:fe:0d:20:91:50:db:ea:12:5e:c9:fc:
4e:2a:85:15:9c:b3:2c:6c:88:17:29:4f:ef:ae:9a:76:1c:12:
d8:93:40:08:a2:70:76:75:22:06:59:ed:a8:36:80:de:d9:00:
cc:5c:e3:05:46:e3:04:88:5f:56:26:ca:19:21:30:3b:08:be:
81:6f:a3:e3:58:b7:eb:fc:68:f4:41:7e:e4:11:ea:48:c5:ed:
8f:39:4e:58:6e:14:18:77:ef:b4:b7:a6:e6:a4:ec:cd:4e:c0:
cc:65:00:04:06:24:fd:17:98:ac:48:1b:4d:a7:f0:4a:ef:f8:
2f:fa:2a:72:58:2d:cb:5e:fc:69:f0:82:c9:de:30:c4:ac:fc:
8d:95:c8:29:a3:ac:81:b8:5d:90:3b:a8:88:6e:30:c1:a1:e6:
4e:e6:d3:71:ab:7b:e2:e6:4a:b1:69:02:85:dd:ca:bc:0d:56:
ce:aa:ba:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:08:46 2026 by rpki-client