Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
File: CzlpzcC1_wnRmbyl2t25qrUQQOc.mft (raw, json)
Hash identifier: oTwhTMi8VNwsLtrYwqWeuB2CQcn6DMG30Oa4cH8IKqA=
Subject key identifier: 44:81:39:DA:EA:77:FF:DC:50:51:24:A5:8D:30:0D:38:AD:63:94:21
Authority key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
Certificate issuer: /CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Certificate serial: 01A06EA81AB271B71283D07A192B56D96D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
Manifest number: 167A
Signing time: Fri 04 Sep 2026 23:01:45 +0000
Manifest this update: Fri 04 Sep 2026 23:01:45 +0000
Manifest next update: Sat 05 Sep 2026 23:01:45 +0000
Files and hashes: 1: 505iyhrOOU2Q_fBeoqtfWv2GNho.roa (hash: yj3rWCbTMvNId63YkvUyXewgDeaSxoAASwUuP7aFbJE=)
2: CzlpzcC1_wnRmbyl2t25qrUQQOc.crl (hash: wAU+sKQ6UXiBBN+8x3pm/Y4AWgkI3EQtZ+/isNVIa7Y=)
3: jc2FVDogf_jnYkY28JwjbjPEtCY.roa (hash: moUuZDMz1G4ZG1cN9lqMYWv75YgN2qkJVtQUNQjqg+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a8:1a:b2:71:b7:12:83:d0:7a:19:2b:56:d9:6d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Validity
Not Before: Sep 4 23:01:45 2026 GMT
Not After : Sep 5 23:01:45 2026 GMT
Subject: CN=448139daea77ffdc505124a58d300d38ad639421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6f:a9:5c:b5:c0:1c:c7:3c:95:b8:52:61:15:
c3:d9:a4:9a:7a:c5:11:6b:01:6d:a2:85:ad:66:e8:
67:21:4c:c4:1c:01:8c:48:47:5b:30:58:31:e1:2d:
ee:7e:ce:0e:ab:5e:76:07:ef:cf:27:c6:52:28:71:
aa:e4:8a:1d:52:14:ee:41:9b:87:dc:4b:de:14:ac:
d0:36:90:36:93:58:c7:fd:9e:43:f2:95:ea:a9:35:
ba:4b:3e:5f:43:e7:43:45:73:29:79:b5:80:ae:69:
3c:62:48:8f:af:ae:e7:74:fa:c2:d0:9a:51:6b:af:
8e:e9:31:55:fb:0d:ac:19:6b:24:c0:c1:21:f5:9d:
c4:ad:c5:87:10:d2:3c:54:37:f2:af:d5:40:b9:d6:
0c:f5:d3:2e:00:c4:f6:00:68:93:5a:b0:8c:ae:8e:
a2:38:c2:bc:f3:a4:9e:51:69:c3:f7:fa:a1:18:85:
fc:15:1e:dd:f6:7e:8d:35:f1:1b:13:87:da:da:d3:
10:18:7a:b9:ff:2b:61:55:94:a5:e7:81:01:d3:a7:
cb:d2:12:d8:3f:48:65:d7:69:d1:8d:4d:c0:be:71:
44:b5:ea:b9:e4:54:b9:4f:23:ed:05:a4:b7:7f:19:
a8:15:cb:90:21:ce:ad:7d:f0:53:5f:c6:60:4e:05:
56:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:81:39:DA:EA:77:FF:DC:50:51:24:A5:8D:30:0D:38:AD:63:94:21
X509v3 Authority Key Identifier:
keyid:0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:29:8b:b4:b2:17:30:43:68:67:83:8c:9a:2b:46:64:e1:f2:
5a:99:ea:3c:fd:5a:21:50:69:cc:c5:6b:8a:97:15:93:af:be:
d1:5b:eb:67:91:56:6c:07:e8:5c:31:39:e7:1b:d4:6d:e0:ec:
2c:a3:db:35:2d:be:1b:21:3c:78:9b:d8:b9:dd:08:ac:c7:67:
29:da:d4:80:4a:8c:2a:f8:08:8d:e8:ec:96:56:68:36:f5:ec:
c6:0c:ac:ed:2b:44:b6:a8:4c:14:63:c6:ec:e1:2e:fc:95:29:
c0:1c:8a:86:35:6a:60:cf:ca:35:16:b4:1e:5e:92:46:4c:32:
bc:0d:59:01:d5:ea:68:74:83:64:48:1a:59:f8:82:42:9a:a1:
47:d8:0c:73:85:e7:95:44:53:d3:02:85:87:92:4f:f1:4c:2d:
3b:d0:e9:2b:63:75:55:cf:1b:c4:4d:be:e8:8f:a0:e3:f4:dc:
d2:e7:a8:24:ba:5e:ef:3e:08:0b:b7:57:a1:da:28:3b:24:ac:
79:11:cc:40:12:48:69:f2:27:f3:b4:b7:57:4c:95:0f:ef:59:
5c:d9:5d:d1:b6:d9:23:9b:f8:74:05:3a:c8:29:4d:9e:aa:75:
5b:09:a5:8e:93:27:b5:bd:cd:7c:f2:ef:7d:d0:a8:4f:9b:23:
b5:15:20:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:52:18 2026 by rpki-client