Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
File: CzlpzcC1_wnRmbyl2t25qrUQQOc.mft (raw, json)
Hash identifier: QOzhej2sMtLhcgpzJ/63a8HUybIRIvhAl8EVed3DFVw=
Subject key identifier: DA:E2:BC:A5:8C:64:46:DF:31:D6:04:0C:2C:EF:B6:7E:D0:5C:2D:20
Authority key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
Certificate issuer: /CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Certificate serial: 01A1377F4047183BED8DBDC5A5138A93786F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
Manifest number: 16E2
Signing time: Tue 13 Oct 2026 23:00:48 +0000
Manifest this update: Tue 13 Oct 2026 23:00:48 +0000
Manifest next update: Wed 14 Oct 2026 23:00:48 +0000
Files and hashes: 1: 505iyhrOOU2Q_fBeoqtfWv2GNho.roa (hash: yj3rWCbTMvNId63YkvUyXewgDeaSxoAASwUuP7aFbJE=)
2: CzlpzcC1_wnRmbyl2t25qrUQQOc.crl (hash: F4LnnJKS/B4vlULxW+0STwB00BvQHWB1Em3I9KR/MR0=)
3: jc2FVDogf_jnYkY28JwjbjPEtCY.roa (hash: moUuZDMz1G4ZG1cN9lqMYWv75YgN2qkJVtQUNQjqg+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:7f:40:47:18:3b:ed:8d:bd:c5:a5:13:8a:93:78:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Validity
Not Before: Oct 13 23:00:48 2026 GMT
Not After : Oct 14 23:00:48 2026 GMT
Subject: CN=dae2bca58c6446df31d6040c2cefb67ed05c2d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:38:23:d3:ed:03:7f:54:62:bf:2d:e5:d8:20:
21:e3:7d:21:ea:a8:18:93:53:0b:03:9b:64:63:78:
03:ce:0f:55:d0:b7:6d:2a:4b:98:ab:6e:ac:90:ef:
a9:04:97:b0:06:bb:a8:23:af:41:9c:e1:13:36:50:
a5:02:a1:79:f6:06:ea:20:a1:53:94:44:80:fd:18:
a4:e9:c5:8c:6b:1e:d1:5f:9a:99:8b:94:db:69:39:
18:80:53:b1:78:e6:37:52:b8:c8:bf:b0:de:ef:85:
a7:60:72:96:3a:f7:76:3d:37:f1:cb:7c:79:99:f5:
78:4d:f6:4c:b1:b5:4d:23:9e:90:47:52:e8:3a:f3:
77:f6:72:5b:a0:1d:cc:e9:71:e1:70:eb:33:d2:d9:
95:1c:32:75:ea:53:67:73:39:e8:8b:23:03:ef:36:
57:52:35:60:75:0c:8e:f1:d4:45:73:ff:1a:8b:aa:
b9:db:06:79:28:91:f2:f2:63:fa:5c:cb:db:43:74:
8a:d1:b6:af:00:b5:c0:2d:c4:c3:57:b2:32:6b:5b:
e6:55:56:1a:11:fa:d7:56:97:36:f6:e8:96:be:a4:
db:12:f9:c0:a3:7b:49:a6:79:4b:c5:92:14:c7:f4:
2a:bc:31:12:e4:93:c3:9e:b7:23:ec:e6:be:1a:a0:
7f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E2:BC:A5:8C:64:46:DF:31:D6:04:0C:2C:EF:B6:7E:D0:5C:2D:20
X509v3 Authority Key Identifier:
keyid:0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:29:0d:54:86:af:de:22:2a:da:0c:c4:d0:68:42:16:b8:f0:
be:f3:e0:04:7c:ec:50:66:a1:a6:2f:2f:b5:8e:a8:c1:21:61:
bd:54:29:e9:91:6f:4f:53:33:c0:dd:94:c0:4b:a9:69:34:23:
b6:4c:60:1d:82:c7:f6:07:d7:1a:f0:dc:55:16:86:06:10:f5:
23:ae:41:5c:12:c5:7e:9e:37:49:76:a4:ed:f1:9c:bc:1b:35:
e4:d1:50:65:a2:91:94:27:48:f7:68:02:dd:e5:53:18:4e:ab:
5b:85:d9:02:68:3d:4b:1d:63:8b:17:d4:27:92:52:d5:35:78:
2e:fc:09:85:8b:10:20:cb:d4:ee:17:c1:61:b0:20:53:1b:b0:
5a:df:d6:a3:23:86:6f:93:af:95:9c:ba:44:53:12:e2:fd:fb:
2c:6c:1f:6e:ad:d2:05:3b:78:2f:34:68:c2:1b:d1:c3:99:0a:
3c:73:82:e0:04:72:b9:fa:5b:74:e3:b2:95:34:1b:12:24:34:
e3:7a:21:d2:a4:f6:fb:fa:c4:11:3b:6d:8b:9f:f4:92:70:7c:
03:0d:73:05:60:32:46:9c:f1:14:83:23:0c:90:66:83:53:ab:
51:27:b6:b3:b6:a6:77:6c:d4:af:80:6a:8b:85:77:1b:74:7e:
e0:5e:44:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:12:57 2026 by rpki-client