Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
File: CzVgh8IMejJUFv2oA8t289p5R6k.mft (raw, json)
Hash identifier: xBf3CsEDSi1jaUOPAGuCQDQHkwAi8XSCJZW8et+kDWw=
Subject key identifier: 20:00:E8:76:B6:38:72:A1:7C:A6:E4:95:13:C3:79:10:88:41:2B:1F
Authority key identifier: 0B:35:60:87:C2:0C:7A:32:54:16:FD:A8:03:CB:76:F3:DA:79:47:A9
Certificate issuer: /CN=0b356087c20c7a325416fda803cb76f3da7947a9
Certificate serial: 01A1065CC493917875F16F0CAA093E449DD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
Manifest number: 0811
Signing time: Sun 04 Oct 2026 10:01:45 +0000
Manifest this update: Sun 04 Oct 2026 10:01:45 +0000
Manifest next update: Mon 05 Oct 2026 10:01:45 +0000
Files and hashes: 1: CzVgh8IMejJUFv2oA8t289p5R6k.crl (hash: QdKzlvceGCsihnYRS4ciCFS983QFjnvAkj9deBxw2zg=)
2: dh9HELJ4HeZmOUN7AF9in9ZZ-Wk.roa (hash: QD9afYe9Euena6uMhuaF6GPrPcYje7bkgfG0gL/2Snw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 10:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:5c:c4:93:91:78:75:f1:6f:0c:aa:09:3e:44:9d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b356087c20c7a325416fda803cb76f3da7947a9
Validity
Not Before: Oct 4 10:01:45 2026 GMT
Not After : Oct 5 10:01:45 2026 GMT
Subject: CN=2000e876b63872a17ca6e49513c3791088412b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:69:5d:83:32:f5:40:07:06:16:b8:a6:ce:10:
a6:15:db:7f:6c:c9:01:21:87:7d:e4:a0:05:26:18:
98:2f:3f:d7:13:92:eb:4e:05:32:9a:86:18:46:ac:
31:48:3f:a7:4a:27:9b:df:9e:2f:e0:c5:47:ac:bb:
dd:80:a1:27:9b:3b:a4:89:00:6f:61:fb:5b:e7:e2:
d5:ef:9d:d8:ad:12:f8:9b:4f:70:9a:4d:b0:54:5a:
62:da:b3:bb:d8:6d:a8:f3:2b:2a:19:92:0b:c3:92:
65:0c:5d:e7:c2:63:b1:0b:1c:a2:95:e4:ff:47:07:
1c:00:8a:52:0a:6a:7b:72:dd:bc:c8:51:5a:02:e2:
94:f2:c0:f4:59:38:81:6b:35:f0:42:8c:fd:ec:a7:
4a:79:ca:c2:94:3b:4b:63:01:b1:8e:ec:d6:fb:48:
09:81:de:73:36:44:a2:67:53:3f:5a:10:24:48:0a:
78:f0:a7:99:e1:3c:f6:e2:ef:e5:25:94:71:d7:e6:
62:aa:db:2a:19:6f:7d:28:97:04:22:0a:a3:e9:86:
1a:ca:17:40:40:26:46:2a:91:09:ee:51:d3:fb:d4:
05:9f:6a:a3:b7:3e:fb:31:30:b5:c2:52:bb:00:0d:
6b:0c:1e:57:ad:5c:87:f1:54:e2:e8:f4:4a:2c:9e:
b5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:00:E8:76:B6:38:72:A1:7C:A6:E4:95:13:C3:79:10:88:41:2B:1F
X509v3 Authority Key Identifier:
keyid:0B:35:60:87:C2:0C:7A:32:54:16:FD:A8:03:CB:76:F3:DA:79:47:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:97:3d:aa:4a:dc:d7:c4:ac:ec:0e:0f:b6:19:d1:41:37:9f:
59:4c:96:8c:27:ad:e5:18:6e:ba:34:70:7d:70:75:39:57:41:
75:52:fd:72:81:d8:22:2b:7d:83:cf:68:e2:6a:32:d0:59:04:
d4:9b:f3:4b:a1:8f:b8:0d:f5:26:08:eb:11:77:fa:33:68:b6:
c6:a1:90:3f:c3:02:86:cc:84:57:17:9d:60:53:1f:dd:dd:71:
87:9b:93:de:66:95:ad:f6:02:99:df:1e:3e:e1:d2:74:1a:72:
2f:31:1f:82:03:79:23:78:2f:d7:bd:b0:fb:3c:31:99:c9:a3:
f2:97:e3:64:be:7d:0f:04:cb:bb:fb:fe:b0:07:de:1f:76:93:
aa:03:78:f6:d0:44:8f:0f:bc:f0:97:65:32:0d:f0:a7:09:f6:
ba:21:5d:c3:ed:2a:cd:21:0b:a0:4b:b0:60:d7:ae:c0:e8:3a:
98:a6:9e:04:2b:00:54:c9:e4:0f:29:da:19:9e:f1:6c:72:1f:
bc:c6:9b:b1:8a:89:71:09:8e:48:88:6a:31:08:01:f3:06:19:
6f:e3:43:9c:2a:ac:8f:54:79:36:fb:79:43:dd:59:97:f2:11:
6b:77:e4:fe:fe:76:f1:f4:f5:3f:54:d7:7f:dc:89:e0:0d:33:
57:f4:49:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:06:25 2026 by rpki-client