Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
File: CzlpzcC1_wnRmbyl2t25qrUQQOc.mft (raw, json)
Hash identifier: VaSOFOhSP7R/hM6eFqVWnOvg/YJpTBdNW8+ItyvtjpA=
Subject key identifier: 23:7F:8E:A5:C9:12:8B:CC:78:0D:88:A1:F4:7D:4E:20:31:3A:49:68
Authority key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
Certificate issuer: /CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Certificate serial: 01A1905542158D17BBD71D8CEC0FCE12FA73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
Manifest number: 1710
Signing time: Sat 31 Oct 2026 05:01:08 +0000
Manifest this update: Sat 31 Oct 2026 05:01:08 +0000
Manifest next update: Sun 01 Nov 2026 05:01:08 +0000
Files and hashes: 1: 505iyhrOOU2Q_fBeoqtfWv2GNho.roa (hash: yj3rWCbTMvNId63YkvUyXewgDeaSxoAASwUuP7aFbJE=)
2: CzlpzcC1_wnRmbyl2t25qrUQQOc.crl (hash: jPcTXVy9BxuKbWPvm5f8pIFtglj46tAePMG2TRu0tnI=)
3: jc2FVDogf_jnYkY28JwjbjPEtCY.roa (hash: moUuZDMz1G4ZG1cN9lqMYWv75YgN2qkJVtQUNQjqg+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:90:55:42:15:8d:17:bb:d7:1d:8c:ec:0f:ce:12:fa:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Validity
Not Before: Oct 31 05:01:08 2026 GMT
Not After : Nov 1 05:01:08 2026 GMT
Subject: CN=237f8ea5c9128bcc780d88a1f47d4e20313a4968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:44:b2:d4:33:f3:1a:95:f3:ff:a2:16:26:de:
f6:1d:73:19:66:99:55:81:ff:95:8f:8b:5d:0b:f3:
45:dc:2a:aa:45:72:b5:ae:5f:d7:42:45:a9:26:25:
ee:ee:84:4b:67:09:83:11:17:05:ac:19:4c:1a:ee:
4b:bf:18:dc:6a:ee:48:a6:83:69:41:d1:d9:d1:19:
91:41:c1:37:60:dd:ca:f2:62:af:37:6e:92:e9:8d:
5e:f6:b6:2c:95:26:a8:62:9a:b3:03:6b:76:8e:e0:
ee:94:49:db:fd:80:53:68:54:b5:e1:7d:76:cb:67:
be:ae:14:40:bc:c8:31:d6:14:4e:a7:d2:b5:8e:7b:
8d:06:6f:a4:2a:f0:10:3a:8e:fb:1c:74:ff:7b:0b:
be:4a:7e:1a:02:56:fd:30:1a:90:79:1b:97:9f:f2:
b6:b5:b9:35:cc:dc:70:f7:a9:fa:0a:38:67:ef:8f:
96:fe:50:35:01:bf:2d:8c:e8:6a:79:83:cb:6f:57:
22:f3:18:30:65:2b:87:21:07:86:22:a4:bb:ec:79:
56:34:15:85:7f:01:16:ec:df:29:61:2e:7a:d6:3a:
39:5e:c5:ce:64:a1:a0:b2:bc:82:a2:1d:ad:9e:7a:
6b:de:2d:73:f2:bc:4c:8a:f1:9d:77:44:55:b4:11:
dc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7F:8E:A5:C9:12:8B:CC:78:0D:88:A1:F4:7D:4E:20:31:3A:49:68
X509v3 Authority Key Identifier:
keyid:0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:1b:c4:f2:f9:93:0c:c6:09:ee:1c:61:64:87:45:54:3c:e5:
f4:3e:f1:db:bc:f0:67:6e:a9:86:91:e1:7d:c4:79:ed:10:58:
ca:3a:d3:94:49:cd:7d:16:17:2a:20:ee:fc:2b:b7:b2:cf:f0:
7e:e7:ba:78:00:a3:c2:fb:a6:d3:0a:4a:64:c1:0e:69:3c:d7:
cd:29:2d:8c:66:7f:67:f6:33:68:e0:27:d8:ad:08:2a:ae:a7:
29:03:26:24:7a:b9:97:45:42:1b:34:3f:63:7f:54:88:4a:5a:
1a:58:6c:e0:1a:18:b1:b2:9b:c2:3a:11:20:9c:4c:5f:a6:03:
fe:72:bf:41:00:8a:c0:ac:a4:d3:b7:08:0c:98:37:cf:c7:63:
dc:7d:46:1e:b5:d4:1d:1b:ca:3d:fc:44:83:74:37:c9:92:60:
a1:d2:88:94:10:9c:18:a2:20:3d:1a:97:cd:1c:c6:4f:98:19:
03:82:5e:4d:3d:77:ce:f7:bb:59:51:88:f3:73:50:11:85:0f:
7e:1d:b9:b6:94:8b:78:6a:ac:c4:25:25:25:86:fa:20:b4:54:
af:9e:e0:9f:c7:55:8d:28:78:db:4f:d4:fe:35:2e:f3:b3:55:
17:51:d8:fa:e6:91:6e:fd:b0:13:0c:94:78:76:98:41:4d:c0:
4f:2b:b0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 10:56:44 2026 by rpki-client