Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
File: CzVgh8IMejJUFv2oA8t289p5R6k.mft (raw, json)
Hash identifier: a6MvRMHaDgif36wuEsDsx8KAEdtBz+ijOxWQaUi9tyg=
Subject key identifier: 0D:5A:0E:BB:B9:5B:3A:B8:76:DC:50:B0:0D:19:2C:7D:C3:EE:10:81
Authority key identifier: 0B:35:60:87:C2:0C:7A:32:54:16:FD:A8:03:CB:76:F3:DA:79:47:A9
Certificate issuer: /CN=0b356087c20c7a325416fda803cb76f3da7947a9
Certificate serial: 01A0C88FF8879FAB7CDC986D6D8F6371E82F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
Manifest number: 07F1
Signing time: Tue 22 Sep 2026 10:01:13 +0000
Manifest this update: Tue 22 Sep 2026 10:01:13 +0000
Manifest next update: Wed 23 Sep 2026 10:01:13 +0000
Files and hashes: 1: CzVgh8IMejJUFv2oA8t289p5R6k.crl (hash: my3yZdk3yyT+IzSDnvnO3C5Cvpb2GBlwLj6KUYfkasA=)
2: dh9HELJ4HeZmOUN7AF9in9ZZ-Wk.roa (hash: QD9afYe9Euena6uMhuaF6GPrPcYje7bkgfG0gL/2Snw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:f8:87:9f:ab:7c:dc:98:6d:6d:8f:63:71:e8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b356087c20c7a325416fda803cb76f3da7947a9
Validity
Not Before: Sep 22 10:01:13 2026 GMT
Not After : Sep 23 10:01:13 2026 GMT
Subject: CN=0d5a0ebbb95b3ab876dc50b00d192c7dc3ee1081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4a:f6:90:9a:b1:4e:e3:5d:84:1d:60:a4:92:
67:93:72:40:95:1e:a4:1c:cf:e9:7b:66:bd:88:d9:
43:7c:49:85:fd:0e:62:5b:2c:33:52:21:7f:8f:20:
87:3b:48:ef:c8:d0:e0:d2:7b:25:c7:67:25:3e:dc:
e2:e2:17:56:f4:a3:2c:52:92:e9:a7:d9:75:a3:2a:
fc:e9:0b:60:fe:83:bd:7a:57:cf:97:6d:98:0a:32:
bc:0c:32:23:a7:70:78:50:fc:8f:7a:4c:96:9f:94:
a2:26:64:9e:7c:44:6c:d1:66:dc:bc:5a:42:57:f5:
1d:69:88:e4:34:3b:6b:b7:ee:90:6e:dc:02:e8:a6:
4d:25:6e:e4:5c:0e:2a:da:21:b7:59:2a:5a:c4:cf:
13:e0:60:24:16:1d:4f:04:df:e8:2e:4a:94:50:f5:
f1:7e:14:0f:7d:68:60:74:98:02:db:39:39:5a:bc:
8f:6f:7f:a2:bb:47:45:09:b6:90:e9:ae:58:fd:4f:
e5:77:65:22:ed:af:b8:6b:79:d8:79:ce:d0:ed:d0:
d6:55:f4:f0:1a:9a:03:19:b7:6e:6c:7b:ae:69:f1:
d5:d4:3d:d3:81:43:cc:d9:37:bc:16:0d:5d:46:cc:
7d:82:aa:bd:94:78:df:6e:c2:28:ae:87:2c:25:2b:
4d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5A:0E:BB:B9:5B:3A:B8:76:DC:50:B0:0D:19:2C:7D:C3:EE:10:81
X509v3 Authority Key Identifier:
keyid:0B:35:60:87:C2:0C:7A:32:54:16:FD:A8:03:CB:76:F3:DA:79:47:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:00:49:ab:11:91:0a:b9:e7:1f:eb:e9:de:9a:71:34:09:61:
fa:13:19:f0:1b:cf:8c:d2:4d:43:73:03:00:93:f1:c2:64:20:
c1:49:9e:0c:d0:bd:71:47:45:96:2d:86:23:00:0a:1c:da:b5:
ea:35:25:a5:4d:d2:7b:63:38:78:54:f0:5d:37:f7:d3:98:8f:
c4:d6:43:9c:97:7b:91:e6:a4:7e:9c:fb:76:61:08:40:ea:fe:
fd:23:f0:89:78:37:52:a1:cf:07:7b:a2:16:bf:21:9a:be:dc:
35:ec:da:33:e0:6c:e5:0c:9b:90:3f:d6:a8:cf:9e:da:00:62:
8c:0a:47:39:b8:4f:2f:25:7b:8b:88:8d:e5:cb:de:13:b5:0f:
5f:1e:28:43:65:97:34:9e:a7:d0:f4:d2:14:5b:6f:86:88:de:
73:64:35:0c:48:35:13:06:b4:fb:d9:21:2f:f9:2a:ca:e6:2f:
37:23:dd:cc:b0:3e:de:91:a3:91:26:b9:43:b9:28:fd:b0:d2:
7e:ba:89:b7:9f:b6:6c:08:c4:4e:7a:77:bf:08:0a:c9:87:52:
79:6a:cc:0f:26:ef:17:db:b6:42:c9:36:c2:f4:df:51:d3:ed:
b4:f6:57:44:3c:a6:ad:f6:f8:23:d2:f5:75:19:b6:5c:c0:e2:
06:40:a1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:55:52 2026 by rpki-client