Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
File: CzlpzcC1_wnRmbyl2t25qrUQQOc.mft (raw, json)
Hash identifier: mh/DdddkXJ7Q+S7Bbzge9AwspGxAgs4YsdVWs/YzaXU=
Subject key identifier: 25:18:17:BF:7D:C1:D0:08:03:08:6D:61:82:C7:81:36:58:C4:BB:82
Authority key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
Certificate issuer: /CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Certificate serial: 019E31171F1D010D61D2F520DA3C09F5D2E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
Manifest number: 1551
Signing time: Sat 16 May 2026 14:00:59 +0000
Manifest this update: Sat 16 May 2026 14:00:59 +0000
Manifest next update: Sun 17 May 2026 14:00:59 +0000
Files and hashes: 1: 505iyhrOOU2Q_fBeoqtfWv2GNho.roa (hash: yj3rWCbTMvNId63YkvUyXewgDeaSxoAASwUuP7aFbJE=)
2: CzlpzcC1_wnRmbyl2t25qrUQQOc.crl (hash: D2NXg8pQ+EavKIIyHVS0r7WAxVupkzIseVPG8BKD8KA=)
3: jc2FVDogf_jnYkY28JwjbjPEtCY.roa (hash: moUuZDMz1G4ZG1cN9lqMYWv75YgN2qkJVtQUNQjqg+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:1f:1d:01:0d:61:d2:f5:20:da:3c:09:f5:d2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Validity
Not Before: May 16 14:00:59 2026 GMT
Not After : May 17 14:00:59 2026 GMT
Subject: CN=251817bf7dc1d00803086d6182c7813658c4bb82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:bb:67:43:b4:98:29:4c:f5:0a:53:51:4d:
94:7c:fb:5e:65:41:e6:10:6e:a8:19:6b:d4:22:dc:
de:3e:e9:2e:08:3c:b9:d4:73:53:23:96:fd:01:1b:
67:dc:ef:46:b4:aa:f7:7e:7d:3e:2b:61:9a:32:aa:
49:4f:61:43:2b:58:22:56:69:d1:0a:25:50:05:31:
a8:00:eb:0b:14:f0:3c:92:e1:8b:f9:cf:ef:9f:a2:
3e:f6:7b:81:17:43:b8:ec:53:15:af:cf:2b:20:00:
fc:d3:2b:48:8e:63:ee:95:ed:8f:ff:6c:62:67:51:
97:bd:f1:10:69:8a:fa:43:87:99:51:2e:a4:33:e1:
57:35:33:31:6f:9c:65:41:6a:0a:4a:4d:2e:bb:93:
87:77:30:08:da:17:f0:65:21:8c:39:1a:e7:81:3e:
83:83:20:b6:b0:82:0e:32:12:2e:35:14:77:f6:8d:
be:26:31:df:9d:81:cb:d9:d8:95:06:2a:0f:e1:42:
08:d6:f6:19:50:5b:7b:a1:ea:96:b9:5a:d3:c0:13:
41:82:19:18:e6:64:48:a1:30:be:48:81:cb:73:1d:
78:df:bb:42:2c:ed:89:c0:78:c3:b9:09:f4:cf:7f:
99:9d:6e:bf:2c:6d:63:e5:a8:1c:25:95:f4:6f:95:
d2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:18:17:BF:7D:C1:D0:08:03:08:6D:61:82:C7:81:36:58:C4:BB:82
X509v3 Authority Key Identifier:
keyid:0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ed:a1:af:8b:20:43:fb:57:65:40:aa:07:1c:81:b2:47:5c:
81:7b:be:b6:1e:71:d7:28:c3:cd:b7:96:f2:3d:25:15:a0:30:
09:09:07:0b:11:ef:ad:07:19:50:62:84:71:8f:97:92:5b:99:
61:de:68:cb:2c:95:fa:41:96:cc:72:5a:26:60:f9:91:18:f4:
1f:7d:ff:0a:e4:20:bb:ec:d6:c7:21:0c:16:6c:6c:65:a2:fe:
f9:b6:a2:71:1a:c6:0f:5a:a0:83:8b:a7:d0:ea:dd:19:fa:fd:
df:64:43:09:a2:83:56:30:eb:f5:b8:39:0e:23:f4:ba:9e:ae:
45:92:b8:73:cc:ff:b8:39:6f:40:71:af:b9:03:12:3b:af:c2:
46:98:56:11:0a:2c:3f:ba:01:bc:24:0f:61:23:0f:13:29:d9:
3a:48:de:4c:88:40:d0:7a:1c:40:75:47:cd:c4:65:05:60:8c:
f6:7c:74:cc:f3:7c:7f:ff:e3:32:ff:96:a4:45:84:02:b8:2a:
7f:8d:b6:3e:2e:35:b3:c0:9a:fa:bc:b3:ca:37:31:70:07:42:
57:4a:0f:b7:b4:9a:96:12:89:53:13:a5:c0:ba:11:b2:ae:4f:
d9:73:81:bd:e5:f7:91:51:36:dc:e2:2f:36:a2:b8:e9:25:2e:
44:cd:98:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:23:48 2026 by rpki-client