Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
File: CRzF2QybaBpstOdyzK6-w0L7mwU.mft (raw, json)
Hash identifier: SmNTZgJG+RVXiVLlDTeAIZZMxOPJSW5jBoDbKvfW+UU=
Subject key identifier: A2:6D:D9:B3:95:DB:25:3A:55:9F:34:FA:4C:77:36:7F:D8:D9:A2:EA
Authority key identifier: 09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
Certificate issuer: /CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Certificate serial: 019FAA879BC67C1B63A6F5F06A4B1F48681D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
Manifest number: 0D83
Signing time: Tue 28 Jul 2026 21:00:41 +0000
Manifest this update: Tue 28 Jul 2026 21:00:41 +0000
Manifest next update: Wed 29 Jul 2026 21:00:41 +0000
Files and hashes: 1: CRzF2QybaBpstOdyzK6-w0L7mwU.crl (hash: FlUnO2+H0FjTF5ibXBEkTJFJ3po9RtrloyC+APdt8LA=)
2: zrtaoEiavdgjJ45IAZF5NnPo3Rs.roa (hash: z2iZziOE5JN+RJazqLZp00E5SjB0TdkmZt0o09ieR34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:9b:c6:7c:1b:63:a6:f5:f0:6a:4b:1f:48:68:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Validity
Not Before: Jul 28 21:00:41 2026 GMT
Not After : Jul 29 21:00:41 2026 GMT
Subject: CN=a26dd9b395db253a559f34fa4c77367fd8d9a2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:19:01:29:de:58:7d:60:34:d8:e5:ac:a8:25:
40:2c:1a:ee:8d:86:5f:ff:fe:81:c3:36:75:9c:d4:
4c:34:ed:d5:5f:15:3b:2c:47:47:78:7a:93:ee:27:
37:71:d8:f0:50:5d:4d:3b:20:77:ce:7c:83:ad:fa:
62:fb:6e:3e:6f:d7:d4:09:b7:b9:a9:0c:e1:a4:ab:
73:12:bd:51:11:d2:c8:9a:aa:31:84:ca:93:b4:af:
d1:4c:77:1a:27:72:f0:b6:56:23:54:99:3b:3c:86:
7e:94:8f:b3:b5:8f:a5:64:9a:2e:02:cf:95:4b:d7:
f7:77:ce:4f:dd:d0:a6:b7:5c:f2:55:a7:10:0b:32:
9f:e0:41:e6:24:8f:7c:73:26:5a:c2:2b:69:ef:ef:
fc:8d:6d:61:1c:1b:9f:25:3b:7a:49:56:6f:05:82:
aa:7b:4d:e5:80:d4:e2:6d:76:ac:2a:94:e4:21:66:
e7:14:3c:ef:a5:56:05:4f:9d:5c:5e:e1:79:4d:51:
a1:0f:87:ed:f6:a3:05:06:53:64:b9:03:57:5b:f7:
f3:6e:b2:b3:3b:d2:60:3e:69:bb:46:fc:26:37:bd:
17:c8:4a:1b:c3:0a:fa:c2:a2:0e:a7:05:5e:c1:48:
20:5f:a3:36:01:7f:29:e8:5c:73:70:0d:e0:14:37:
57:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6D:D9:B3:95:DB:25:3A:55:9F:34:FA:4C:77:36:7F:D8:D9:A2:EA
X509v3 Authority Key Identifier:
keyid:09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e0:ae:57:e3:16:fc:d6:37:e5:14:5a:1e:76:08:ab:6a:ca:
08:31:0f:f4:a5:ce:c4:c6:1f:16:8e:09:fc:7d:ed:a4:61:eb:
35:4a:ca:02:d2:6b:ed:bc:a7:c9:09:a5:c8:c8:6c:df:d0:c1:
42:1c:32:55:16:75:71:d2:05:ac:3e:0e:7b:20:f3:97:55:97:
28:75:3d:52:08:d4:0b:12:90:d3:25:a8:99:c5:3e:3c:3e:ff:
bd:71:fe:71:2e:b3:b3:5c:2e:3f:1c:2e:2e:f7:c8:8f:17:23:
0b:da:45:3a:d7:55:17:fb:33:78:45:00:a6:ab:de:f8:ec:8f:
6c:51:f0:70:70:85:d1:8f:54:9a:dc:5f:40:f9:2e:9e:c0:8f:
c2:ab:73:ad:d0:a5:35:c3:94:4c:c9:77:aa:21:ec:bd:ac:b6:
16:6d:23:99:91:f5:7a:e2:1a:8e:44:54:83:03:28:17:25:53:
cf:e4:dd:47:8d:0b:52:be:c0:d0:6b:20:b0:67:6e:82:fe:16:
8e:5d:54:78:b6:f5:c3:81:54:3d:8b:1c:4b:44:69:a1:c5:88:
6c:df:7e:03:d1:01:b7:b6:af:1b:16:48:1b:92:1e:a8:db:26:
35:ed:9a:54:50:01:f2:eb:58:fd:1d:99:56:f9:cb:ef:02:51:
ea:90:4c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:13:26 2026 by rpki-client