Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
File: 01CzV9ze5o--vcVVPbMknG6Clsc.mft (raw, json)
Hash identifier: 50aImU90CgbLshnzBhsIac5/F2kBmPM6DIDzvW8r+Cg=
Subject key identifier: 71:AF:57:DD:C5:A6:57:10:B1:1E:A9:1F:65:2D:92:DA:C8:20:32:35
Authority key identifier: D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
Certificate issuer: /CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Certificate serial: 019CABA255E4611BC387B2D07298EDDA6132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
Manifest number: 0750
Signing time: Sun 01 Mar 2026 23:01:08 +0000
Manifest this update: Sun 01 Mar 2026 23:01:08 +0000
Manifest next update: Mon 02 Mar 2026 23:01:08 +0000
Files and hashes: 1: 01CzV9ze5o--vcVVPbMknG6Clsc.crl (hash: s/S0kqtN1sBscSpIN0zXwQXDnB/yXzjjLm0OGCjgK0Y=)
2: 4VA7wZJaiHWG2GAPtA5u1BDcn4I.roa (hash: PqJvEzmh32UVxsDr7waFI7G4gmqJkPLZ5CaOrNIefv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:55:e4:61:1b:c3:87:b2:d0:72:98:ed:da:61:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Validity
Not Before: Mar 1 23:01:08 2026 GMT
Not After : Mar 2 23:01:08 2026 GMT
Subject: CN=71af57ddc5a65710b11ea91f652d92dac8203235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3b:b4:42:0a:07:4f:a6:a3:3f:d3:78:6d:1b:
04:d6:68:0c:c2:82:9b:df:eb:87:a3:a0:f5:d1:83:
50:7a:94:25:35:f7:bd:cd:0e:a6:d9:6b:be:18:be:
33:33:f8:e3:41:7b:63:e8:c8:87:ab:33:cf:c3:4e:
d8:a9:57:d8:eb:37:a7:cc:69:76:58:4c:98:c2:f2:
90:47:7f:be:10:f9:0c:a5:25:60:0f:72:3f:87:f4:
36:73:b6:48:97:32:8d:f9:d4:2e:1d:4f:03:17:c8:
8f:44:e1:b4:4f:8d:a7:e5:bf:fc:ef:1c:46:cb:36:
14:ec:0a:4b:7a:6f:c3:00:47:5c:24:2e:4d:6c:40:
6a:45:70:f4:0c:2c:94:bf:d0:fa:63:9c:67:dc:40:
1f:56:5a:89:05:49:a5:6f:50:b5:9b:aa:9d:89:77:
f4:62:be:a2:d5:8d:d7:7d:9d:5c:17:fa:17:02:65:
86:4a:d5:a8:34:c5:91:a2:bd:f8:6f:eb:4b:20:80:
96:57:1a:9f:47:08:12:9d:aa:34:3c:0d:01:ba:95:
ac:f0:4c:ae:77:fb:a2:3f:8b:74:4d:f8:c7:2b:69:
5a:59:5d:1a:50:cb:29:2d:ec:c8:c7:a2:95:cf:5e:
5d:c2:f5:3f:02:1b:a2:62:a4:1a:65:8b:6e:71:62:
39:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AF:57:DD:C5:A6:57:10:B1:1E:A9:1F:65:2D:92:DA:C8:20:32:35
X509v3 Authority Key Identifier:
keyid:D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c9:c8:00:57:9a:13:1b:40:87:7b:ef:8d:5b:02:04:98:00:
80:9f:28:ab:bf:09:c4:a0:79:0a:9b:ea:2c:74:40:d6:9c:ed:
7f:22:ab:43:2d:e5:57:7c:49:e3:6d:9a:07:09:20:04:bf:27:
12:9a:2a:db:73:01:47:83:c8:70:4a:08:de:f9:e5:3d:2a:57:
ff:16:0d:99:bf:f6:e7:32:ab:86:95:c1:dc:9c:c3:45:85:ee:
4a:fc:fc:cd:e1:cf:0b:70:a5:8b:9e:49:af:a1:d9:d8:f7:89:
43:ee:06:48:c0:13:bf:90:ea:17:6e:ae:de:bf:de:a7:8a:40:
15:d0:ae:3d:db:6a:20:96:56:6a:8d:f2:63:57:71:8c:5a:77:
92:61:37:52:b9:50:5c:84:aa:ce:5c:b8:40:3c:6e:2e:30:ed:
38:58:22:7e:97:e8:05:41:c4:03:fe:05:67:cf:ad:c2:9d:fd:
f1:7d:61:79:79:19:95:7e:2f:88:b6:46:f0:1f:04:84:01:2a:
82:88:1a:a3:0d:37:51:a3:d5:b1:78:e7:36:5b:e7:3c:ec:9b:
85:98:86:6a:7b:16:9f:30:83:a4:ad:f9:d9:3a:14:09:7d:84:
5e:60:34:50:33:24:69:34:71:1e:0b:f6:bc:73:9e:c5:a0:7e:
4a:c2:93:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:28 2026 by rpki-client