Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
File: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft (raw, json)
Hash identifier: fMKyTWJXop99y23Tl5LJyDSPszE+7p85w1/seaOuei0=
Subject key identifier: 22:04:EF:76:8C:9D:42:2A:EE:66:07:98:09:D9:62:A0:CC:85:17:7E
Authority key identifier: 0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
Certificate issuer: /CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Certificate serial: 019CACB4B150711CF27254969781C3937D27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
Manifest number: 1535
Signing time: Mon 02 Mar 2026 04:00:48 +0000
Manifest this update: Mon 02 Mar 2026 04:00:48 +0000
Manifest next update: Tue 03 Mar 2026 04:00:48 +0000
Files and hashes: 1: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl (hash: 1mMrWZfWGtfzoBkRmkGvL567wQuumXOsIvNb7AuGHsY=)
2: ZJDmPvzDE__eYUkVLrAmHcTbK2E.roa (hash: mZslKl2yoouF0x/HaqlGPF55VMLSQDizBAGrzjr6tuY=)
3: bipK7OOAYGpHrw7S5fmJoRnxSxQ.roa (hash: rrZJyfnTOVyxttfXNIKKI76uVK5IaaBMN4ZDEVeQY94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:b1:50:71:1c:f2:72:54:96:97:81:c3:93:7d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Validity
Not Before: Mar 2 04:00:48 2026 GMT
Not After : Mar 3 04:00:48 2026 GMT
Subject: CN=2204ef768c9d422aee66079809d962a0cc85177e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e5:c4:04:9e:38:33:c5:b9:7f:6d:54:74:38:
fe:af:95:be:5e:79:f0:87:6a:0a:95:6a:c4:36:82:
4e:f0:99:1a:1e:d0:70:4f:0f:52:5d:6c:d8:08:bc:
e6:82:b6:5b:d5:f1:21:f4:21:39:49:eb:0f:c3:23:
2b:6d:4a:14:0a:af:3e:a1:f1:13:02:99:d8:04:de:
e3:47:ae:31:fe:f0:2e:be:60:17:34:19:6f:ba:f8:
79:39:f8:32:35:bc:21:11:d3:83:8b:ef:ce:8a:23:
e6:b8:88:19:29:a5:bf:e9:78:3f:a1:4b:69:28:3d:
09:11:da:02:fd:13:b2:d8:e6:2a:b6:ab:c7:db:9e:
19:c6:59:23:1b:02:8b:14:c0:48:35:c5:30:ca:92:
01:83:fe:db:dc:75:54:79:0d:9c:2e:8c:e7:da:e9:
76:c1:25:0c:1a:a6:69:20:b0:69:d6:da:61:0e:5d:
be:f4:3e:17:d1:72:83:72:af:b7:ee:dd:e6:7f:60:
53:0f:a6:cd:88:2a:70:c8:31:e0:28:2f:2c:22:75:
f2:f9:f7:72:63:95:4b:23:fe:fa:b6:64:8a:72:cb:
fc:f3:c7:f8:c1:5b:6f:32:04:29:25:31:e5:dd:0c:
ff:4f:db:85:16:52:14:ca:f6:68:5b:d7:e2:05:39:
33:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:04:EF:76:8C:9D:42:2A:EE:66:07:98:09:D9:62:A0:CC:85:17:7E
X509v3 Authority Key Identifier:
keyid:0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:35:6a:38:bd:4c:50:b3:bc:97:43:42:4a:dc:ce:ae:c1:21:
ba:d1:64:2c:b3:35:62:4c:7b:fb:3b:c3:b4:87:c6:5d:17:e9:
56:66:c1:87:e8:9d:d1:50:c7:aa:c0:87:6a:ac:c1:d8:bb:39:
5c:c7:f0:dd:39:df:e0:95:2a:5b:d0:af:dd:00:a4:61:52:9c:
1a:bf:c4:d7:73:ef:3b:2a:9a:c4:24:e1:8f:a2:cc:54:8d:7a:
fe:05:94:01:94:be:b6:ee:09:96:7c:85:94:18:bf:2d:f2:c1:
f1:4d:b3:82:fa:5a:af:52:4f:2b:e0:1a:29:79:6c:76:22:9e:
83:73:43:ee:e1:72:5d:df:ed:4b:93:a2:7b:0e:31:01:ce:c6:
39:4e:fe:a8:18:de:58:e4:67:6f:8f:7e:71:03:34:68:f3:ab:
0c:79:21:a2:69:55:96:58:f8:fc:0f:77:2b:a4:63:3e:fa:bd:
b8:20:1e:41:96:0b:7d:8c:a6:e7:b1:1a:b2:11:34:ec:bf:43:
55:ec:db:74:ef:69:19:4d:de:b8:60:84:8f:a9:3c:f5:f5:7b:
38:d4:97:6c:d9:bf:36:ab:48:55:e4:5d:58:eb:0d:6d:91:17:
51:5a:4c:a5:cd:e5:f5:39:13:0c:a2:80:3b:0e:48:30:d9:91:
5d:80:23:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:36:21 2026 by rpki-client