Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/f1f0a0-da3c-4d95-a638-506672769d9c/1/CZoxZcQAepQBMaMnzHfMIhzBadk.mft
File: CZoxZcQAepQBMaMnzHfMIhzBadk.mft (raw, json)
Hash identifier: VpQfuW+mh2sCOGxnM01t35QTOMY7+FFpA+6Z/1aOhJY=
Subject key identifier: B8:42:78:31:3A:5C:8E:76:E6:3D:CB:B2:5B:44:17:1A:18:77:33:CA
Authority key identifier: 09:9A:31:65:C4:00:7A:94:01:31:A3:27:CC:77:CC:22:1C:C1:69:D9
Certificate issuer: /CN=099a3165c4007a940131a327cc77cc221cc169d9
Certificate serial: 01A1249DB0B4D6EAB9123B2927D2813F00EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZoxZcQAepQBMaMnzHfMIhzBadk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f1f0a0-da3c-4d95-a638-506672769d9c/1/CZoxZcQAepQBMaMnzHfMIhzBadk.mft
Manifest number: 1A93
Signing time: Sat 10 Oct 2026 07:01:16 +0000
Manifest this update: Sat 10 Oct 2026 07:01:16 +0000
Manifest next update: Sun 11 Oct 2026 07:01:16 +0000
Files and hashes: 1: CZoxZcQAepQBMaMnzHfMIhzBadk.crl (hash: pwFuGtLFDJ1BAeWFEQD84qw5XicLSLjSkz6vJZWcq3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f1f0a0-da3c-4d95-a638-506672769d9c/1/CZoxZcQAepQBMaMnzHfMIhzBadk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f1f0a0-da3c-4d95-a638-506672769d9c/1/CZoxZcQAepQBMaMnzHfMIhzBadk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZoxZcQAepQBMaMnzHfMIhzBadk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:9d:b0:b4:d6:ea:b9:12:3b:29:27:d2:81:3f:00:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a3165c4007a940131a327cc77cc221cc169d9
Validity
Not Before: Oct 10 07:01:16 2026 GMT
Not After : Oct 11 07:01:16 2026 GMT
Subject: CN=b84278313a5c8e76e63dcbb25b44171a187733ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c1:04:72:7a:8c:69:53:4f:10:84:7b:db:15:
b1:61:e5:62:0e:96:3e:2c:31:f5:d3:9c:17:f1:fb:
5b:9a:46:df:61:d6:e8:63:e8:b6:28:f5:d7:5b:f0:
97:a4:ed:f5:25:78:40:c1:40:5e:0b:5b:98:89:1c:
fb:54:70:d0:82:1e:e0:c9:76:5f:c8:2a:08:9a:b0:
c1:35:83:83:ee:5a:cf:f9:79:83:28:c7:46:53:ab:
c2:ee:34:fa:eb:bd:8c:c8:be:5c:83:d7:17:1c:0e:
c2:a5:91:7e:16:92:18:b2:e0:3c:f5:8a:5f:99:9a:
f1:97:92:db:ba:ff:b2:87:0e:2a:db:54:89:5c:36:
9e:01:89:e3:ac:89:51:05:ae:ae:5e:af:52:2e:5f:
ce:53:a5:ed:cc:f9:01:eb:a7:6f:ab:b0:ff:92:c6:
29:4b:19:ca:eb:cf:d5:f2:6d:95:fe:3a:9d:ce:b8:
c0:ec:a8:5c:4a:c9:99:94:1f:93:dc:a3:be:c8:ed:
7a:12:ba:3c:68:87:97:b4:ae:0e:c2:74:cf:4d:4f:
3a:a1:9f:f5:d6:0e:fb:aa:e2:e5:df:ed:da:60:b5:
55:8c:ee:6a:cf:06:78:cb:26:db:c6:f9:e8:13:b0:
bf:c6:c3:79:0d:3f:bc:46:96:ac:9b:fa:9a:4c:ac:
71:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:42:78:31:3A:5C:8E:76:E6:3D:CB:B2:5B:44:17:1A:18:77:33:CA
X509v3 Authority Key Identifier:
keyid:09:9A:31:65:C4:00:7A:94:01:31:A3:27:CC:77:CC:22:1C:C1:69:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZoxZcQAepQBMaMnzHfMIhzBadk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f1f0a0-da3c-4d95-a638-506672769d9c/1/CZoxZcQAepQBMaMnzHfMIhzBadk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f1f0a0-da3c-4d95-a638-506672769d9c/1/CZoxZcQAepQBMaMnzHfMIhzBadk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:90:0c:2a:d6:b1:6c:5d:b1:98:dd:c1:f8:88:aa:c9:39:fb:
9a:49:c3:33:a9:6f:11:39:2f:9d:78:0e:86:18:d7:24:7b:b5:
1a:1a:37:63:94:b6:5b:9f:99:44:21:fa:f5:39:f4:89:7a:26:
29:2d:d7:26:72:07:dc:77:93:79:3e:eb:36:9b:48:1c:5d:7c:
33:b4:4b:e7:4c:79:b6:42:99:db:19:ce:a6:b1:e2:d6:23:1d:
1b:e5:7d:92:6f:83:1f:f3:bc:01:b8:52:08:33:35:15:cd:bc:
95:93:29:d7:34:48:3e:89:12:21:21:42:07:89:b3:74:51:4b:
5d:8b:64:82:60:c4:b2:dd:c4:53:49:f8:7f:20:34:a9:cb:02:
2f:fb:ed:48:ab:cc:c4:d5:54:cf:07:57:4c:6e:f4:76:dd:b3:
3b:04:4b:b6:57:f1:2a:27:f8:8c:c1:2c:c9:68:3e:35:d5:9c:
e9:6a:21:f2:95:9f:10:46:8b:f4:cd:8f:37:a8:53:22:b9:47:
98:1c:3e:dc:33:ad:44:25:7a:78:4a:ad:dc:20:fe:8e:bb:eb:
f9:17:26:a7:a2:f4:90:e5:b3:d2:09:d4:fe:8d:84:00:e4:96:
9e:4f:3d:ed:a8:02:46:50:22:01:13:b4:86:1a:2c:c5:e8:c8:
76:e2:16:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:59:18 2026 by rpki-client