Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
File: 1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft (raw, json)
Hash identifier: v6xJkmGzjMNDJY5rIKV9HN36bEClyFYAOu+qBgBEAwQ=
Subject key identifier: 1A:48:4D:F5:CB:D4:8B:00:1A:72:70:76:C6:B2:DF:53:AA:38:4C:20
Authority key identifier: D4:2C:C4:02:67:E3:59:2E:1B:52:F0:F0:09:6C:B1:F2:F0:AF:16:7D
Certificate issuer: /CN=d42cc40267e3592e1b52f0f0096cb1f2f0af167d
Certificate serial: 01A0C8581216F5128EEDD8FB2951D42420CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
Manifest number: 077F
Signing time: Tue 22 Sep 2026 09:00:09 +0000
Manifest this update: Tue 22 Sep 2026 09:00:09 +0000
Manifest next update: Wed 23 Sep 2026 09:00:09 +0000
Files and hashes: 1: 1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl (hash: wD4BpQ1AJXwaiXEQAeg9G/3yjb1pSpkdWxyt1hIif8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:12:16:f5:12:8e:ed:d8:fb:29:51:d4:24:20:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42cc40267e3592e1b52f0f0096cb1f2f0af167d
Validity
Not Before: Sep 22 09:00:09 2026 GMT
Not After : Sep 23 09:00:09 2026 GMT
Subject: CN=1a484df5cbd48b001a727076c6b2df53aa384c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:fd:98:0e:39:6b:c4:f0:30:1f:27:9f:1c:
c4:d8:fc:04:7f:ca:1b:32:ea:f1:38:17:b2:51:94:
01:e0:62:8c:62:ba:f9:7b:62:a7:a7:e1:08:e4:40:
b0:50:8a:fe:c5:7c:d4:03:a3:f4:1d:e9:6a:15:d5:
16:e4:b4:6a:cb:44:38:8a:d1:e9:aa:cd:e9:aa:53:
ad:19:24:0c:4b:d1:32:0a:27:cb:3c:37:55:31:83:
51:97:67:50:8d:bf:4a:41:2f:cb:d0:06:fc:28:25:
58:b1:ae:c2:da:1c:9e:1c:7b:14:54:43:d8:c4:48:
25:09:be:46:14:5c:04:ff:52:40:a7:19:9e:dc:44:
e3:5e:14:34:a2:ba:cd:fb:98:af:66:3c:55:94:90:
df:60:bc:90:6e:3f:64:49:68:7a:33:c8:1e:a8:52:
79:12:91:be:a0:4a:a4:d2:05:ad:27:50:02:48:a4:
fa:43:94:4c:70:f3:53:d1:24:fb:ba:0b:62:cd:15:
97:73:e0:b7:5f:9b:93:40:52:ce:c8:f9:bd:5b:3e:
80:63:39:1e:40:37:55:dc:c8:39:e3:b1:16:33:f4:
ae:78:83:18:a1:b7:a9:e3:c3:43:64:96:cc:82:d4:
cb:24:89:6a:d9:83:87:f7:67:30:13:e2:1f:be:b2:
08:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:48:4D:F5:CB:D4:8B:00:1A:72:70:76:C6:B2:DF:53:AA:38:4C:20
X509v3 Authority Key Identifier:
keyid:D4:2C:C4:02:67:E3:59:2E:1B:52:F0:F0:09:6C:B1:F2:F0:AF:16:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:9e:7e:af:78:ce:02:db:e6:f5:6e:ad:17:c3:4b:e9:3a:b2:
ce:15:a9:d1:5f:4a:97:d3:8e:59:91:df:b1:31:a7:6c:07:d7:
d3:39:72:10:fa:94:f5:ed:5e:48:4c:b5:38:00:72:f9:ad:6e:
2a:59:f7:b7:6a:99:7b:24:cb:0c:fa:35:be:0c:08:f2:40:39:
be:54:b4:dd:53:ef:3b:b8:2c:8b:fb:2f:ab:74:7f:04:e8:e6:
89:54:9c:22:7d:ff:79:65:e8:36:64:ac:04:17:64:72:4b:15:
8e:56:3b:d7:be:5c:90:71:17:5e:7e:a8:6b:a7:ce:bd:d2:83:
22:ad:36:63:0e:bd:f6:26:08:9e:1f:d1:1f:c8:68:9a:83:7f:
e6:3b:a8:e7:19:12:76:6e:57:32:26:b2:0f:8a:3d:7a:6a:bd:
5b:b0:de:a8:e2:98:0d:5b:aa:a1:ad:56:13:45:74:da:9d:c3:
56:79:5d:99:38:3b:6c:d0:93:78:05:27:68:8f:e7:ab:65:3e:
9f:94:37:3a:df:47:65:d0:13:af:6a:ed:a2:36:db:66:1c:18:
01:f4:4e:3b:3d:da:96:7b:3a:69:55:0d:4c:69:41:2a:f0:c4:
ec:6d:58:ca:85:22:10:e5:eb:ab:51:b4:ca:a9:9c:de:b4:94:
1c:7f:6e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:41:41 2026 by rpki-client