Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
File: CRzF2QybaBpstOdyzK6-w0L7mwU.mft (raw, json)
Hash identifier: XEBlRBzv8pHWIJyKGauML3PQyXk96wxim9BNWJyUJCg=
Subject key identifier: C9:41:8D:8C:91:72:77:39:B3:45:49:82:9A:BE:AA:FE:DA:EB:07:D3
Authority key identifier: 09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
Certificate issuer: /CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Certificate serial: 01A0C47BCCDCD9961D82C0A90E91E3AAD022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
Manifest number: 0E15
Signing time: Mon 21 Sep 2026 15:00:42 +0000
Manifest this update: Mon 21 Sep 2026 15:00:42 +0000
Manifest next update: Tue 22 Sep 2026 15:00:42 +0000
Files and hashes: 1: CRzF2QybaBpstOdyzK6-w0L7mwU.crl (hash: AcZAAuoSJtQemZj7PKpQ5wvywyazzo2QmlPF4Q0zEeM=)
2: zrtaoEiavdgjJ45IAZF5NnPo3Rs.roa (hash: z2iZziOE5JN+RJazqLZp00E5SjB0TdkmZt0o09ieR34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:cc:dc:d9:96:1d:82:c0:a9:0e:91:e3:aa:d0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Validity
Not Before: Sep 21 15:00:42 2026 GMT
Not After : Sep 22 15:00:42 2026 GMT
Subject: CN=c9418d8c91727739b34549829abeaafedaeb07d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f2:23:80:b8:60:04:93:1c:ef:2c:ba:34:52:
75:83:7a:0f:a9:bc:0f:56:fc:15:d8:fa:2c:f3:68:
ca:55:63:c0:04:30:55:46:19:e5:30:cd:3d:71:e8:
58:be:08:24:9a:cf:5f:8d:36:f0:14:a0:6a:8d:b3:
8d:07:70:17:e5:08:d8:89:41:d8:ff:19:ab:8d:c8:
65:af:d4:5d:1c:98:de:6f:c7:37:0a:27:39:5b:58:
8a:85:cd:79:df:dd:21:16:66:09:62:46:3a:3a:65:
45:54:e8:79:36:6a:fa:84:bb:4e:84:e2:4f:dc:08:
cc:cd:21:30:11:8e:ab:a8:07:eb:74:bc:2e:54:00:
59:06:ac:59:ed:20:18:57:06:b2:21:d6:93:07:94:
4b:c8:60:ac:90:0d:2b:b2:e4:28:41:1f:a4:c8:1d:
37:c9:b2:78:98:f9:88:ca:21:a0:61:5e:e1:2f:e4:
12:b3:d4:f3:8f:11:d6:e8:c4:12:e8:e4:a7:d0:5d:
d2:15:af:1c:c8:73:98:d1:13:a0:d0:d7:70:03:08:
d6:82:87:fc:5e:d4:ce:c5:01:98:fd:ba:b7:9c:87:
c8:49:3e:88:68:2c:ef:2a:17:da:54:10:13:f4:61:
4b:9e:60:49:1b:8d:be:67:89:6c:be:30:de:13:32:
ee:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:41:8D:8C:91:72:77:39:B3:45:49:82:9A:BE:AA:FE:DA:EB:07:D3
X509v3 Authority Key Identifier:
keyid:09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:08:4f:7c:9b:12:8f:e4:c4:19:12:82:d5:33:b5:0c:49:a0:
b8:81:32:19:a7:99:9c:b1:e3:d3:22:98:e0:a7:bb:4b:68:ad:
1f:7b:c3:e5:72:59:ee:f7:ca:cd:55:42:f9:4f:97:28:83:a9:
15:4b:c3:75:27:50:95:cf:1d:a0:fe:cb:8a:e3:99:4a:96:e1:
db:fb:60:96:15:27:75:04:f4:a1:70:dc:f5:9b:1d:c6:57:31:
30:be:28:a2:01:f8:95:23:ae:61:ad:1e:33:7f:25:3a:86:60:
52:81:f8:42:e3:cd:03:ae:95:da:9e:72:95:a1:18:25:5e:18:
88:b7:62:75:24:2d:17:13:9a:f5:71:99:ba:7f:9f:31:8a:0a:
c8:26:d0:96:75:a2:6c:61:10:76:be:05:d3:dd:62:ae:e9:7b:
6f:7f:d7:77:72:7b:05:3c:6d:05:63:d6:03:3c:08:4d:22:90:
5c:3e:92:ce:5d:a7:db:58:bb:7d:3a:80:4b:23:f5:d1:9c:8d:
9d:51:64:27:cf:ff:9f:7c:cd:62:0b:7b:0b:f6:10:49:98:23:
10:c3:0e:0c:a8:33:31:3c:cb:59:83:05:e4:7b:d7:e6:36:19:
5f:71:52:bb:b5:dd:af:65:9a:3a:c4:4d:b8:e3:d2:51:05:66:
2e:9d:e1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:59:08 2026 by rpki-client