Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
File: CzlpzcC1_wnRmbyl2t25qrUQQOc.mft (raw, json)
Hash identifier: B9IpRbIx2Px6qnBirpn/A6dALsYUmXPcA0QDUVXdKiA=
Subject key identifier: DD:42:74:85:92:DA:E3:D6:A8:B3:23:FF:60:C0:D7:F3:71:94:22:09
Authority key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
Certificate issuer: /CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Certificate serial: 019F84FA51C22F365495926E0607734D0445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
Manifest number: 1601
Signing time: Tue 21 Jul 2026 14:00:24 +0000
Manifest this update: Tue 21 Jul 2026 14:00:24 +0000
Manifest next update: Wed 22 Jul 2026 14:00:24 +0000
Files and hashes: 1: 505iyhrOOU2Q_fBeoqtfWv2GNho.roa (hash: yj3rWCbTMvNId63YkvUyXewgDeaSxoAASwUuP7aFbJE=)
2: CzlpzcC1_wnRmbyl2t25qrUQQOc.crl (hash: HRzqZs2IochdZRJ7ZPqtRb7J+JFtsRGhvThNAt8L6ys=)
3: jc2FVDogf_jnYkY28JwjbjPEtCY.roa (hash: moUuZDMz1G4ZG1cN9lqMYWv75YgN2qkJVtQUNQjqg+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fa:51:c2:2f:36:54:95:92:6e:06:07:73:4d:04:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Validity
Not Before: Jul 21 14:00:24 2026 GMT
Not After : Jul 22 14:00:24 2026 GMT
Subject: CN=dd42748592dae3d6a8b323ff60c0d7f371942209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:52:80:bd:72:41:e4:15:bb:2e:08:35:50:e8:
ef:b7:0b:c7:57:33:71:f5:70:9a:4c:a8:49:dd:e5:
4f:8c:4f:11:7b:bd:2a:ae:15:46:bb:0a:b5:80:c3:
3e:e3:61:1c:ac:83:47:d6:b9:18:27:fb:ba:d1:b2:
e7:e5:e7:0d:59:44:9c:1c:8c:db:06:45:55:bb:45:
80:c6:28:f0:da:0d:da:ba:1c:d8:72:cf:2f:c2:61:
90:ff:f1:8b:e2:0e:2a:f7:ab:a4:3e:19:0e:c1:b3:
0b:11:e5:a6:2c:08:7a:fa:6a:d7:76:aa:eb:88:9f:
c6:ff:2b:56:56:98:2f:ea:08:56:37:94:f8:ae:2b:
ed:e5:a9:79:7e:00:67:99:51:6a:cf:72:a1:5d:43:
62:f0:19:ed:97:df:be:16:53:2e:e6:d2:76:14:1b:
15:23:b1:eb:17:69:17:2b:99:5c:2c:24:03:13:44:
37:20:fd:7a:7a:21:03:f8:d7:be:8f:d1:f6:4a:08:
a1:06:d7:36:98:e0:8d:3e:94:14:1d:0f:c9:2f:ca:
51:d6:e2:eb:75:22:c8:4f:0d:4e:41:65:a8:83:47:
1f:9c:a8:ca:56:a6:73:df:37:e8:05:90:2c:26:31:
e6:ad:89:a9:80:d9:68:bd:a4:88:05:65:3d:4e:ba:
62:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:42:74:85:92:DA:E3:D6:A8:B3:23:FF:60:C0:D7:F3:71:94:22:09
X509v3 Authority Key Identifier:
keyid:0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:91:8f:32:b0:a6:37:ce:fc:65:36:48:3d:03:b8:84:57:49:
3c:04:56:81:44:18:3a:11:68:df:12:1d:02:68:fd:d2:58:b6:
da:69:79:77:2b:06:aa:e4:32:ff:de:b8:8b:c5:83:0e:eb:81:
88:8a:cf:dd:81:cf:eb:d1:99:65:c6:0f:86:0c:e0:5a:9f:a4:
69:2d:2c:60:21:db:ee:eb:9c:dc:da:6a:f9:93:29:79:9e:21:
43:0e:81:fe:75:87:38:10:dc:5a:0a:eb:93:82:a8:28:4d:af:
33:51:03:d2:0e:95:72:38:d7:a9:68:d6:b0:e8:04:25:46:98:
19:68:e7:65:ad:0a:92:25:33:82:7a:ed:e6:17:1a:0d:23:03:
1a:ac:77:e8:b7:12:40:99:e9:96:0f:db:98:cc:90:be:a0:5c:
16:3c:ae:11:cf:9b:a8:fb:d1:e6:7e:18:fd:82:15:93:be:0d:
ae:6c:de:c0:4f:31:4e:23:5f:38:1e:c1:50:88:c2:d1:f9:40:
ba:a5:ff:98:a1:2f:20:8f:53:fd:22:82:e6:e4:d6:d3:a6:5c:
8e:62:24:83:6a:13:f3:3b:c7:78:53:07:99:7b:7a:c6:71:3b:
85:17:cb:ed:c0:5c:55:37:db:4d:6b:71:2c:e1:7a:6f:69:74:
82:41:69:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+E+lHCLzZUlZJuBgdzTQRFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMzk2OWNkYzBiNWZmMDlkMTk5YmNhNWRhZGRiOWFhYjUx
MDQwZTcwHhcNMjYwNzIxMTQwMDI0WhcNMjYwNzIyMTQwMDI0WjAzMTEwLwYDVQQD
EyhkZDQyNzQ4NTkyZGFlM2Q2YThiMzIzZmY2MGMwZDdmMzcxOTQyMjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1KAvXJB5BW7Lgg1UOjvtwvHVzNx
9XCaTKhJ3eVPjE8Re70qrhVGuwq1gMM+42EcrINH1rkYJ/u60bLn5ecNWUScHIzb
BkVVu0WAxijw2g3auhzYcs8vwmGQ//GL4g4q96ukPhkOwbMLEeWmLAh6+mrXdqrr
iJ/G/ytWVpgv6ghWN5T4rivt5al5fgBnmVFqz3KhXUNi8Bntl9++FlMu5tJ2FBsV
I7HrF2kXK5lcLCQDE0Q3IP16eiED+Ne+j9H2SgihBtc2mOCNPpQUHQ/JL8pR1uLr
dSLITw1OQWWog0cfnKjKVqZz3zfoBZAsJjHmrYmpgNlovaSIBWU9TrpipwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1CdIWS2uPWqLMj/2DA1/NxlCIJMB8GA1UdIwQY
MBaAFAs5ac3Atf8J0Zm8pdrduaq1EEDnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3pscHpjQzFfd25SbWJ5bDJ0MjVxclVRUU9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lZDUwMWEtNmVkNy00NTJkLThjNzYt
NmJiNGZlZTg1NzM1LzEvQ3pscHpjQzFfd25SbWJ5bDJ0MjVxclVRUU9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9lZDUwMWEtNmVkNy00NTJkLThjNzYtNmJiNGZlZTg1NzM1
LzEvQ3pscHpjQzFfd25SbWJ5bDJ0MjVxclVRUU9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJpGPMrCm
N878ZTZIPQO4hFdJPARWgUQYOhFo3xIdAmj90li22ml5dysGquQy/964i8WDDuuB
iIrP3YHP69GZZcYPhgzgWp+kaS0sYCHb7uuc3Npq+ZMpeZ4hQw6B/nWHOBDcWgrr
k4KoKE2vM1ED0g6VcjjXqWjWsOgEJUaYGWjnZa0KkiUzgnrt5hcaDSMDGqx36LcS
QJnplg/bmMyQvqBcFjyuEc+bqPvR5n4Y/YIVk74NrmzewE8xTiNfOB7BUIjC0flA
uqX/mKEvII9T/SKC5uTW06ZcjmIkg2oT8zvHeFMHmXt6xnE7hRfL7cBcVTfbTWtx
LOF6b2l0gkFpJg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:50:59 2026 by rpki-client