Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
File: CzlpzcC1_wnRmbyl2t25qrUQQOc.mft (raw, json)
Hash identifier: ot1uCyffIfIztznguGb8+nndciv4umdqds//2LKsHDc=
Subject key identifier: 8B:5C:F1:1A:BA:86:34:F1:73:64:2A:B9:9F:7A:F3:A4:AC:50:27:BF
Authority key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
Certificate issuer: /CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Certificate serial: 019D9C634F53B5AADD908865CE8209D1E0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
Manifest number: 1504
Signing time: Fri 17 Apr 2026 17:00:47 +0000
Manifest this update: Fri 17 Apr 2026 17:00:47 +0000
Manifest next update: Sat 18 Apr 2026 17:00:47 +0000
Files and hashes: 1: 505iyhrOOU2Q_fBeoqtfWv2GNho.roa (hash: yj3rWCbTMvNId63YkvUyXewgDeaSxoAASwUuP7aFbJE=)
2: CzlpzcC1_wnRmbyl2t25qrUQQOc.crl (hash: GUTQs4zz22h4bnOtOM3EQzhNdqGFrjXUnJqc53OEbbY=)
3: jc2FVDogf_jnYkY28JwjbjPEtCY.roa (hash: moUuZDMz1G4ZG1cN9lqMYWv75YgN2qkJVtQUNQjqg+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:4f:53:b5:aa:dd:90:88:65:ce:82:09:d1:e0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Validity
Not Before: Apr 17 17:00:47 2026 GMT
Not After : Apr 18 17:00:47 2026 GMT
Subject: CN=8b5cf11aba8634f173642ab99f7af3a4ac5027bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0b:c5:3d:7f:24:c8:81:fd:aa:37:7a:c7:59:
3f:10:03:67:e4:73:9c:48:4f:14:ff:47:d4:00:a3:
bd:da:ce:1e:4f:3e:17:01:f7:43:f0:af:8e:f3:8a:
42:29:e7:91:6f:f3:34:39:8f:0c:83:98:cf:34:3c:
f2:2c:a5:ce:3f:09:60:74:4e:e3:b5:db:9b:f4:14:
90:d8:0b:66:96:f3:34:63:3d:4f:e2:6e:70:95:e9:
ea:fc:26:b2:bd:2f:20:df:40:52:a9:07:ef:a7:b6:
53:b2:c7:02:36:f0:dd:b2:8b:89:61:55:c7:40:3c:
ad:74:d8:fe:50:ce:8a:cb:90:e5:f6:52:9e:b3:ff:
9c:6c:a9:f9:c0:27:c7:4a:5a:c0:1a:9e:a3:39:cc:
26:ae:b6:70:83:a0:cf:43:d9:cf:ce:57:2d:ff:7a:
43:12:95:33:b5:88:b2:0f:30:31:43:4a:e5:cc:3c:
ae:9c:1a:bd:45:41:55:c4:c0:52:1c:b0:37:7d:ee:
83:05:80:c8:e4:9a:00:8d:2d:8f:29:19:97:0a:b4:
71:69:c7:5c:71:f2:2f:69:97:f6:ef:9c:f0:56:53:
da:08:75:20:00:80:b1:eb:53:0b:0a:0c:e7:e9:0a:
32:8a:38:54:79:81:e0:49:6d:b3:20:ca:f6:46:77:
a1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5C:F1:1A:BA:86:34:F1:73:64:2A:B9:9F:7A:F3:A4:AC:50:27:BF
X509v3 Authority Key Identifier:
keyid:0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c3:fd:00:95:62:d7:2f:cc:a9:37:6b:09:7e:d5:cf:0c:aa:
7a:44:82:a8:8d:40:95:f3:42:00:49:c2:cd:ad:50:7c:b4:a5:
a1:10:3a:25:49:7a:e4:05:22:2f:42:08:2b:45:d3:5c:12:0d:
22:e6:18:ff:b1:bc:a4:5e:0a:f7:fe:2f:9e:d4:f3:02:66:ca:
f6:b6:e6:70:5c:b6:ec:95:be:52:fd:cc:d9:12:e7:d4:3c:5d:
34:d4:eb:3b:b8:19:ef:c9:26:f8:d6:b0:3d:12:22:b2:a1:87:
c6:8e:53:8d:62:63:bb:46:af:1e:73:24:ae:ce:29:9b:e4:1b:
61:c1:35:7b:e0:35:73:a0:25:f6:da:85:5d:f7:be:f0:90:d0:
ca:6c:bd:12:0e:3c:a0:2e:e3:56:65:59:e2:2a:b1:35:76:b2:
2e:03:a1:8a:bf:ae:d0:27:8c:89:ce:7b:56:00:66:02:37:06:
74:1a:73:62:a6:98:0e:3c:d9:20:c6:fa:0d:24:8b:ea:c2:1a:
4a:dd:49:17:9c:b0:3e:f0:c5:ea:6f:04:04:a8:2a:81:5b:95:
98:37:f2:6f:c9:ee:4e:7d:ff:e7:9b:63:89:35:51:0d:16:24:
36:82:20:b4:60:ea:01:dc:0c:30:75:fa:30:d9:a4:df:52:0f:
87:60:27:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:19:31 2026 by rpki-client