Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
File: CzVgh8IMejJUFv2oA8t289p5R6k.mft (raw, json)
Hash identifier: JIoW8JaavFwVAwemA7GXTNQ4rOEie+OqKk4PWPttXBU=
Subject key identifier: AA:1C:21:41:D3:E3:AB:A7:77:7A:06:67:9B:FB:2B:BF:BE:F0:B3:C8
Authority key identifier: 0B:35:60:87:C2:0C:7A:32:54:16:FD:A8:03:CB:76:F3:DA:79:47:A9
Certificate issuer: /CN=0b356087c20c7a325416fda803cb76f3da7947a9
Certificate serial: 019FACAD2DF97878E3CB03E77CF599F20B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
Manifest number: 075E
Signing time: Wed 29 Jul 2026 07:00:58 +0000
Manifest this update: Wed 29 Jul 2026 07:00:58 +0000
Manifest next update: Thu 30 Jul 2026 07:00:58 +0000
Files and hashes: 1: CzVgh8IMejJUFv2oA8t289p5R6k.crl (hash: bDy9mYeIdvOU+Pwvd7etWDC/1vJgaRyc82iS8niniZ0=)
2: dh9HELJ4HeZmOUN7AF9in9ZZ-Wk.roa (hash: QD9afYe9Euena6uMhuaF6GPrPcYje7bkgfG0gL/2Snw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:2d:f9:78:78:e3:cb:03:e7:7c:f5:99:f2:0b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b356087c20c7a325416fda803cb76f3da7947a9
Validity
Not Before: Jul 29 07:00:58 2026 GMT
Not After : Jul 30 07:00:58 2026 GMT
Subject: CN=aa1c2141d3e3aba7777a06679bfb2bbfbef0b3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:73:d1:f0:57:28:8c:b9:0f:43:0d:70:91:
cf:15:6e:67:b8:a2:63:ce:8b:e1:5d:88:20:1c:28:
c7:b4:ab:79:fe:de:18:bd:fc:48:58:14:24:ed:a9:
7b:3d:26:14:b0:80:d9:a2:03:d8:84:6b:0a:10:dd:
e6:a1:b8:b2:85:ff:25:32:50:eb:6b:d0:11:0e:da:
0f:30:bc:00:cc:47:10:45:90:c4:b5:ab:7b:b7:9f:
e6:13:06:d8:fc:c6:a4:ca:9e:55:81:63:fb:47:a5:
98:8a:39:e8:c0:27:b9:1e:eb:b2:70:67:3e:a8:98:
28:12:e7:ae:41:3f:27:7f:45:02:36:c4:54:74:e6:
60:87:25:c7:94:94:bf:ad:1d:fd:1c:95:40:c2:ad:
0c:c1:1a:d9:56:2b:27:fc:46:2f:a3:cf:6a:4a:f1:
b2:53:7d:cc:4d:54:86:93:e0:02:3d:a8:3d:29:5c:
1e:36:68:9c:ee:58:1e:50:d2:75:28:40:8c:30:f3:
c9:98:35:1c:64:7e:2d:ae:a1:8a:73:bd:8f:46:ad:
7c:8a:1b:9c:e8:ec:d4:3b:d5:32:83:e0:16:d4:37:
ae:4d:ac:0d:71:88:15:5b:42:1e:11:8a:2c:a3:f1:
74:ff:aa:68:8b:05:0c:39:54:8a:8b:20:20:3a:8a:
4a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1C:21:41:D3:E3:AB:A7:77:7A:06:67:9B:FB:2B:BF:BE:F0:B3:C8
X509v3 Authority Key Identifier:
keyid:0B:35:60:87:C2:0C:7A:32:54:16:FD:A8:03:CB:76:F3:DA:79:47:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:fb:7d:39:4d:5a:f0:28:7d:42:80:7b:59:ef:6e:8e:db:7f:
ae:17:f7:db:52:a5:ab:e2:71:84:da:be:42:85:fc:07:da:41:
6f:9e:4f:ca:f4:e7:be:34:f0:93:01:ef:19:4b:13:fc:44:78:
1d:c2:66:8c:6e:ce:81:4a:02:e6:46:94:17:7b:73:16:15:59:
03:2c:9c:24:01:bb:53:da:8f:cd:c5:ed:d5:34:54:97:48:e8:
38:78:89:c2:35:be:42:77:f0:06:5e:88:05:4b:b5:ac:f2:db:
7e:b4:01:db:0b:ce:41:c0:46:04:d8:aa:d6:8c:1f:44:8a:a3:
fa:14:e7:74:65:e8:24:21:a2:80:cd:13:a0:68:46:6d:97:b2:
a7:62:86:49:a8:a3:34:01:73:7d:07:ba:b2:23:2a:64:14:06:
e0:b2:e7:bd:8a:bf:05:1e:55:78:b8:4d:39:f3:3d:b1:d4:22:
a8:58:77:09:7a:cd:4a:46:65:53:6b:9f:4a:0c:b2:38:98:e7:
7b:02:77:62:05:2e:0c:03:f2:b1:d4:b7:00:ad:71:ea:a2:0c:
b0:6e:4a:d9:ae:e9:b5:5b:ac:a5:2b:a0:82:64:72:9c:80:4d:
25:7b:f8:c9:67:b3:ed:d6:cd:b2:a2:28:0f:06:a9:ce:0b:97:
11:9d:e3:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+srS35eHjjywPnfPWZ8gsxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMzU2MDg3YzIwYzdhMzI1NDE2ZmRhODAzY2I3NmYzZGE3
OTQ3YTkwHhcNMjYwNzI5MDcwMDU4WhcNMjYwNzMwMDcwMDU4WjAzMTEwLwYDVQQD
EyhhYTFjMjE0MWQzZTNhYmE3Nzc3YTA2Njc5YmZiMmJiZmJlZjBiM2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcBz0fBXKIy5D0MNcJHPFW5nuKJj
zovhXYggHCjHtKt5/t4YvfxIWBQk7al7PSYUsIDZogPYhGsKEN3mobiyhf8lMlDr
a9ARDtoPMLwAzEcQRZDEtat7t5/mEwbY/Makyp5VgWP7R6WYijnowCe5HuuycGc+
qJgoEueuQT8nf0UCNsRUdOZghyXHlJS/rR39HJVAwq0MwRrZVisn/EYvo89qSvGy
U33MTVSGk+ACPag9KVweNmic7lgeUNJ1KECMMPPJmDUcZH4trqGKc72PRq18ihuc
6OzUO9Uyg+AW1DeuTawNcYgVW0IeEYoso/F0/6poiwUMOVSKiyAgOopKeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKocIUHT46und3oGZ5v7K7++8LPIMB8GA1UdIwQY
MBaAFAs1YIfCDHoyVBb9qAPLdvPaeUepMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3pWZ2g4SU1lakpVRnYyb0E4dDI4OXA1UjZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kN2NmOTQtYWM2MS00ZmJmLWFkZjAt
NTdlYWY4MzNhYjBiLzEvQ3pWZ2g4SU1lakpVRnYyb0E4dDI4OXA1UjZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9kN2NmOTQtYWM2MS00ZmJmLWFkZjAtNTdlYWY4MzNhYjBi
LzEvQ3pWZ2g4SU1lakpVRnYyb0E4dDI4OXA1UjZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk/t9OU1a
8Ch9QoB7We9ujtt/rhf321Klq+JxhNq+QoX8B9pBb55PyvTnvjTwkwHvGUsT/ER4
HcJmjG7OgUoC5kaUF3tzFhVZAyycJAG7U9qPzcXt1TRUl0joOHiJwjW+QnfwBl6I
BUu1rPLbfrQB2wvOQcBGBNiq1owfRIqj+hTndGXoJCGigM0ToGhGbZeyp2KGSaij
NAFzfQe6siMqZBQG4LLnvYq/BR5VeLhNOfM9sdQiqFh3CXrNSkZlU2ufSgyyOJjn
ewJ3YgUuDAPysdS3AK1x6qIMsG5K2a7ptVuspSuggmRynIBNJXv4yWez7dbNsqIo
DwapzguXEZ3j+A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 16:10:46 2026 by rpki-client