Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
File: CzlpzcC1_wnRmbyl2t25qrUQQOc.mft (raw, json)
Hash identifier: Pqfd4EaoQ8qtJavm2uQFcGZnR/MnMgogTjLAj4Qecfg=
Subject key identifier: 54:8F:46:FC:74:FE:2B:90:33:7A:B5:56:F7:DF:1E:9C:CC:B6:FB:10
Authority key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
Certificate issuer: /CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Certificate serial: 019D37F6E404124C6F374CD4371AED97CC33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
Manifest number: 14D0
Signing time: Sun 29 Mar 2026 05:00:20 +0000
Manifest this update: Sun 29 Mar 2026 05:00:20 +0000
Manifest next update: Mon 30 Mar 2026 05:00:20 +0000
Files and hashes: 1: 505iyhrOOU2Q_fBeoqtfWv2GNho.roa (hash: yj3rWCbTMvNId63YkvUyXewgDeaSxoAASwUuP7aFbJE=)
2: CzlpzcC1_wnRmbyl2t25qrUQQOc.crl (hash: QfLPyZYjEkrHn7knKXIP+FHEXxCWs/ZnUM/Sz+hDaOM=)
3: jc2FVDogf_jnYkY28JwjbjPEtCY.roa (hash: moUuZDMz1G4ZG1cN9lqMYWv75YgN2qkJVtQUNQjqg+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:e4:04:12:4c:6f:37:4c:d4:37:1a:ed:97:cc:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Validity
Not Before: Mar 29 05:00:20 2026 GMT
Not After : Mar 30 05:00:20 2026 GMT
Subject: CN=548f46fc74fe2b90337ab556f7df1e9cccb6fb10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:d6:0f:0d:7d:d8:f5:aa:b5:b1:38:f3:c9:
4e:15:b8:54:3a:b5:d6:6b:bb:df:24:fc:b8:91:35:
79:3e:28:94:36:38:c5:9f:37:67:44:d2:2c:a1:62:
d7:97:b6:06:0a:db:af:16:8e:35:6f:a7:b3:0b:ec:
3e:eb:f6:65:2f:17:68:5b:8f:cd:c8:d5:6f:e2:0c:
99:49:24:74:92:37:47:03:29:07:dd:17:ea:a9:cc:
b9:e5:53:14:a8:23:c8:75:76:92:52:5b:3d:27:84:
ed:95:1f:76:5f:ed:ac:26:55:d5:22:6b:45:19:65:
ec:76:35:b5:a7:2b:9b:71:70:eb:00:99:e3:50:4a:
0d:ba:68:12:e2:19:33:2f:1d:e0:51:5a:ad:20:09:
17:f0:0a:92:cb:a6:5f:b4:27:65:72:1c:b4:7d:99:
63:af:42:ee:0c:5d:c3:79:90:3f:a5:bf:6b:fd:29:
d0:05:fc:ce:46:0c:8d:d7:85:ab:ec:28:d5:48:13:
37:0c:75:39:0a:73:ba:5b:f0:cd:d0:79:06:c7:b7:
78:ef:a7:ec:21:ff:0b:fd:9f:61:0b:88:54:da:3e:
06:99:66:7e:a0:63:e4:7e:c4:e0:c5:f0:01:65:69:
fa:23:bd:0a:50:b7:13:91:26:66:54:9b:02:5d:31:
47:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8F:46:FC:74:FE:2B:90:33:7A:B5:56:F7:DF:1E:9C:CC:B6:FB:10
X509v3 Authority Key Identifier:
keyid:0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e9:14:ab:bd:2b:a8:97:48:b6:00:25:3d:1b:0d:f1:23:1d:
ae:82:c1:7a:59:81:39:f9:66:02:07:18:31:74:b8:f7:dd:5a:
ac:ba:fd:3e:9c:5f:0e:f4:e7:74:d4:29:59:23:fa:6f:89:d3:
41:6b:c7:ec:05:98:4b:ad:53:a3:d7:60:8b:18:12:30:09:bb:
8d:e4:14:f1:89:19:b9:04:7e:52:2b:75:06:6f:a7:f3:90:a5:
ff:59:fe:ca:c3:5c:70:4f:cd:bd:55:4b:12:1b:1f:b0:8f:f7:
7f:84:5b:fd:34:a3:3c:27:a6:ef:47:38:b5:c3:bb:e5:45:47:
dd:d9:c9:15:fd:dc:81:4e:b5:3a:24:8b:07:18:ce:58:e1:83:
a5:a1:1e:38:49:be:ae:33:64:19:dc:28:20:60:a6:82:cc:e0:
7a:09:e4:1f:69:60:af:58:b4:58:0c:02:b5:9a:8d:7d:46:e2:
af:ef:81:26:aa:ea:86:46:6b:85:40:39:c2:69:2d:c8:a1:b8:
6c:1c:f3:d5:e6:03:59:46:d4:0e:e5:6e:75:9e:4b:74:24:04:
9a:48:9e:7c:5e:b0:4f:f7:6b:66:7a:1b:01:ff:27:4d:0b:ab:
bf:48:12:64:34:64:a9:56:ca:e0:4e:c6:d3:f1:2e:20:32:2c:
9f:01:99:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:01 2026 by rpki-client