Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
File: CzVgh8IMejJUFv2oA8t289p5R6k.mft (raw, json)
Hash identifier: KrRZqhmGbEC1DP8mTxfI/8F7tmD1+y5EjUSOkuJSyak=
Subject key identifier: A1:1B:EA:B7:71:3B:A3:DF:59:EB:41:DA:E6:9F:A2:4C:51:FD:74:4A
Authority key identifier: 0B:35:60:87:C2:0C:7A:32:54:16:FD:A8:03:CB:76:F3:DA:79:47:A9
Certificate issuer: /CN=0b356087c20c7a325416fda803cb76f3da7947a9
Certificate serial: 019E303BC6858FAC1FD38F3FE6A7C0C0209F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
Manifest number: 0699
Signing time: Sat 16 May 2026 10:01:24 +0000
Manifest this update: Sat 16 May 2026 10:01:24 +0000
Manifest next update: Sun 17 May 2026 10:01:24 +0000
Files and hashes: 1: CzVgh8IMejJUFv2oA8t289p5R6k.crl (hash: HUrIdm2VhbovblZFS12P3r71j6tuXLX47hBmOFZHaZo=)
2: dh9HELJ4HeZmOUN7AF9in9ZZ-Wk.roa (hash: QD9afYe9Euena6uMhuaF6GPrPcYje7bkgfG0gL/2Snw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:c6:85:8f:ac:1f:d3:8f:3f:e6:a7:c0:c0:20:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b356087c20c7a325416fda803cb76f3da7947a9
Validity
Not Before: May 16 10:01:24 2026 GMT
Not After : May 17 10:01:24 2026 GMT
Subject: CN=a11beab7713ba3df59eb41dae69fa24c51fd744a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:06:2f:ed:13:62:0b:f8:f6:67:d7:44:df:
88:c2:99:8d:76:f0:2c:f5:c4:76:bb:4b:fb:d5:24:
4d:06:90:82:90:e4:be:37:5b:ba:f0:37:90:ef:08:
cf:e3:7b:17:a1:51:45:fe:1c:a8:6c:da:00:99:79:
a3:fb:2d:e6:5a:a8:71:19:02:8b:9a:06:dc:48:89:
f9:b7:c0:69:17:97:70:64:23:e0:6f:69:79:3e:44:
37:3e:0f:cd:93:07:ae:35:d6:6f:47:df:5c:25:41:
d9:86:45:4e:15:b9:88:d1:c6:47:64:61:f3:1d:91:
74:13:0a:4a:c3:4f:b9:b3:33:59:6d:e6:e3:57:4c:
8f:ae:4e:5d:fc:b0:25:af:a2:d8:7f:72:01:10:34:
6c:63:b8:b4:7a:44:16:a6:dc:4d:7b:90:20:62:26:
a6:a2:9c:1b:a3:88:23:27:2c:89:2e:d4:85:a0:20:
91:21:99:d8:28:5f:c6:66:de:86:31:f0:2d:6c:2c:
da:59:2d:32:0c:26:76:1f:74:d1:1c:d1:eb:a3:60:
c7:62:cf:c1:1d:73:05:87:4e:90:82:fc:70:84:8a:
39:01:51:2c:e9:75:98:0b:82:29:e9:ea:5d:da:a0:
b2:80:f9:84:5c:db:83:0e:4b:c1:4b:75:4d:02:3f:
9e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1B:EA:B7:71:3B:A3:DF:59:EB:41:DA:E6:9F:A2:4C:51:FD:74:4A
X509v3 Authority Key Identifier:
keyid:0B:35:60:87:C2:0C:7A:32:54:16:FD:A8:03:CB:76:F3:DA:79:47:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:61:87:82:9e:19:2c:87:8c:73:51:3f:4f:35:76:30:1e:6c:
c4:8c:77:5b:b0:03:1e:76:cc:ea:60:3c:4c:47:b6:2b:07:19:
e4:53:d5:5e:fb:3e:75:d1:95:cb:c4:d6:34:c4:ce:7e:85:dc:
11:17:95:f5:ac:4c:39:01:77:b6:b8:cc:59:70:31:52:57:b6:
7a:33:20:7f:4d:bb:13:15:f1:c5:c4:83:84:42:26:85:5a:72:
44:2b:29:18:aa:de:4b:81:57:14:5e:96:89:00:8e:03:4e:dc:
ac:ab:26:de:f1:1a:b5:3d:bc:46:b1:cf:c6:fa:c3:91:26:32:
68:23:cc:4c:b2:42:1f:40:ef:02:dc:27:c4:cc:79:72:5d:1e:
60:03:95:cd:0f:7c:c2:f3:a7:5d:08:f4:1f:71:6e:9b:f9:53:
2e:b7:51:bc:d6:da:f1:92:c4:63:a0:72:a0:3b:cd:23:df:28:
22:46:fd:bf:7b:a9:c8:39:9f:2f:9d:6f:d1:7f:fb:e3:c3:58:
58:03:46:46:33:56:69:17:55:b2:be:60:9b:79:40:12:2a:f4:
c1:7e:03:ce:55:be:1e:3e:df:d9:b7:d0:2c:4b:bf:9e:bb:41:
0e:be:a6:06:cf:95:d1:68:00:53:90:69:0b:7c:fa:f8:cb:a7:
23:40:10:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wO8aFj6wf048/5qfAwCCfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMzU2MDg3YzIwYzdhMzI1NDE2ZmRhODAzY2I3NmYzZGE3
OTQ3YTkwHhcNMjYwNTE2MTAwMTI0WhcNMjYwNTE3MTAwMTI0WjAzMTEwLwYDVQQD
EyhhMTFiZWFiNzcxM2JhM2RmNTllYjQxZGFlNjlmYTI0YzUxZmQ3NDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6MGL+0TYgv49mfXRN+IwpmNdvAs
9cR2u0v71SRNBpCCkOS+N1u68DeQ7wjP43sXoVFF/hyobNoAmXmj+y3mWqhxGQKL
mgbcSIn5t8BpF5dwZCPgb2l5PkQ3Pg/NkweuNdZvR99cJUHZhkVOFbmI0cZHZGHz
HZF0EwpKw0+5szNZbebjV0yPrk5d/LAlr6LYf3IBEDRsY7i0ekQWptxNe5AgYiam
opwbo4gjJyyJLtSFoCCRIZnYKF/GZt6GMfAtbCzaWS0yDCZ2H3TRHNHro2DHYs/B
HXMFh06QgvxwhIo5AVEs6XWYC4Ip6epd2qCygPmEXNuDDkvBS3VNAj+eUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEb6rdxO6PfWetB2uafokxR/XRKMB8GA1UdIwQY
MBaAFAs1YIfCDHoyVBb9qAPLdvPaeUepMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3pWZ2g4SU1lakpVRnYyb0E4dDI4OXA1UjZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kN2NmOTQtYWM2MS00ZmJmLWFkZjAt
NTdlYWY4MzNhYjBiLzEvQ3pWZ2g4SU1lakpVRnYyb0E4dDI4OXA1UjZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9kN2NmOTQtYWM2MS00ZmJmLWFkZjAtNTdlYWY4MzNhYjBi
LzEvQ3pWZ2g4SU1lakpVRnYyb0E4dDI4OXA1UjZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGGHgp4Z
LIeMc1E/TzV2MB5sxIx3W7ADHnbM6mA8TEe2KwcZ5FPVXvs+ddGVy8TWNMTOfoXc
EReV9axMOQF3trjMWXAxUle2ejMgf027ExXxxcSDhEImhVpyRCspGKreS4FXFF6W
iQCOA07crKsm3vEatT28RrHPxvrDkSYyaCPMTLJCH0DvAtwnxMx5cl0eYAOVzQ98
wvOnXQj0H3Fum/lTLrdRvNba8ZLEY6ByoDvNI98oIkb9v3upyDmfL51v0X/748NY
WANGRjNWaRdVsr5gm3lAEir0wX4DzlW+Hj7f2bfQLEu/nrtBDr6mBs+V0WgAU5Bp
C3z6+MunI0AQRw==
-----END CERTIFICATE-----
Generated at Sat May 16 16:26:20 2026 by rpki-client