Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
File: CzVgh8IMejJUFv2oA8t289p5R6k.mft (raw, json)
Hash identifier: BPvJeJ+IdKsO1rw8e9Bk8U2Er8deEGGBS3fHmRuF0O0=
Subject key identifier: 86:46:49:32:7A:5E:31:D0:54:52:18:CE:68:10:28:A3:0F:1A:C4:72
Authority key identifier: 0B:35:60:87:C2:0C:7A:32:54:16:FD:A8:03:CB:76:F3:DA:79:47:A9
Certificate issuer: /CN=0b356087c20c7a325416fda803cb76f3da7947a9
Certificate serial: 019F17F9BF6CEFB960F0D8829C7F1A64990A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
Manifest number: 0711
Signing time: Tue 30 Jun 2026 10:01:11 +0000
Manifest this update: Tue 30 Jun 2026 10:01:11 +0000
Manifest next update: Wed 01 Jul 2026 10:01:11 +0000
Files and hashes: 1: CzVgh8IMejJUFv2oA8t289p5R6k.crl (hash: I0x0x3yuucTgYa+ksVhHW1D/DjhtZkEjxFNTziNDXBY=)
2: dh9HELJ4HeZmOUN7AF9in9ZZ-Wk.roa (hash: QD9afYe9Euena6uMhuaF6GPrPcYje7bkgfG0gL/2Snw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:bf:6c:ef:b9:60:f0:d8:82:9c:7f:1a:64:99:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b356087c20c7a325416fda803cb76f3da7947a9
Validity
Not Before: Jun 30 10:01:11 2026 GMT
Not After : Jul 1 10:01:11 2026 GMT
Subject: CN=864649327a5e31d0545218ce681028a30f1ac472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:aa:f6:af:8a:33:59:a6:6d:35:45:4c:97:e4:
6e:e4:58:6d:db:63:5a:b1:37:50:40:f4:da:8d:a7:
6b:b0:02:a7:a3:c1:36:f3:11:45:6c:76:51:23:1b:
42:05:9f:eb:89:29:9e:09:c5:f3:7a:b9:6a:d9:d7:
9e:b5:c0:1a:e2:06:bb:08:5a:ae:dc:c9:90:ec:26:
75:e4:f6:82:48:44:7c:04:72:79:50:ac:2b:c7:36:
03:3e:e2:7f:67:62:b7:28:6a:a3:14:93:1e:92:5f:
00:c1:ec:97:af:c3:2e:c8:91:8b:42:4f:e8:cb:f7:
df:29:1e:a3:80:64:10:f1:12:7d:0e:17:78:b3:4d:
33:30:e8:4e:90:ab:45:75:d6:63:cc:b7:cd:dc:e1:
e2:10:3e:94:8a:be:ac:65:e9:8d:49:90:af:ca:50:
f0:41:8f:9e:18:5f:92:d9:bf:e4:65:4c:8e:db:fa:
c2:4a:40:80:4c:9d:86:d3:0c:b6:7f:8f:fc:ad:a3:
ba:57:e2:64:cf:38:b2:cc:ed:6e:1b:0e:f5:37:1c:
e8:c0:9c:c6:36:a8:bc:73:a8:d0:dc:fa:9b:4a:1b:
15:11:88:9b:f2:b9:34:41:43:86:74:85:74:04:7d:
71:49:a4:93:32:f8:0b:f7:56:41:32:a8:fe:e5:b0:
2f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:46:49:32:7A:5E:31:D0:54:52:18:CE:68:10:28:A3:0F:1A:C4:72
X509v3 Authority Key Identifier:
keyid:0B:35:60:87:C2:0C:7A:32:54:16:FD:A8:03:CB:76:F3:DA:79:47:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a7:32:7f:61:be:8d:1e:6b:34:25:fd:7d:78:58:3d:e4:f9:
f7:56:24:e7:94:7a:49:bc:50:3d:99:1e:3f:4a:40:b0:7d:c3:
e5:2a:c8:84:c9:1c:e9:a0:4b:2d:d9:fe:35:d4:3f:89:6c:24:
e0:99:b9:17:68:60:33:f6:87:84:3d:45:01:bd:7f:e1:63:e2:
d6:b8:ba:d0:1a:c2:d9:0e:ef:1a:d9:c2:6d:09:88:a3:7e:02:
f8:f7:6a:09:ff:a8:60:96:76:0d:f8:85:57:eb:09:46:df:c4:
36:ab:59:c4:f8:83:ff:a3:e9:80:de:b0:46:f5:d2:76:04:8b:
c4:66:50:5d:54:93:66:31:11:45:d2:b1:c7:cd:56:5d:cd:8f:
55:d6:a5:23:20:0c:af:12:a4:79:f7:2e:df:c6:14:8a:0b:46:
0f:41:f5:33:9c:ae:99:3e:8f:ef:b1:e7:af:4d:c7:fd:b1:2f:
95:cf:9e:7e:fa:16:c0:4a:a6:73:fa:c5:ac:cc:8c:2f:07:a7:
de:39:b6:6b:dd:7e:c8:b4:85:e8:a0:e2:95:d7:ec:93:9f:32:
a8:6c:c5:1d:9f:3c:e7:f5:54:f7:0f:df:e6:26:80:cf:06:14:
cc:50:64:b3:2c:a3:b5:5c:30:80:ab:67:a0:5a:4e:f3:48:dc:
b8:21:59:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8X+b9s77lg8NiCnH8aZJkKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMzU2MDg3YzIwYzdhMzI1NDE2ZmRhODAzY2I3NmYzZGE3
OTQ3YTkwHhcNMjYwNjMwMTAwMTExWhcNMjYwNzAxMTAwMTExWjAzMTEwLwYDVQQD
Eyg4NjQ2NDkzMjdhNWUzMWQwNTQ1MjE4Y2U2ODEwMjhhMzBmMWFjNDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ar2r4ozWaZtNUVMl+Ru5Fht22Na
sTdQQPTajadrsAKno8E28xFFbHZRIxtCBZ/riSmeCcXzerlq2deetcAa4ga7CFqu
3MmQ7CZ15PaCSER8BHJ5UKwrxzYDPuJ/Z2K3KGqjFJMekl8AweyXr8MuyJGLQk/o
y/ffKR6jgGQQ8RJ9Dhd4s00zMOhOkKtFddZjzLfN3OHiED6Uir6sZemNSZCvylDw
QY+eGF+S2b/kZUyO2/rCSkCATJ2G0wy2f4/8raO6V+JkzziyzO1uGw71NxzowJzG
Nqi8c6jQ3PqbShsVEYib8rk0QUOGdIV0BH1xSaSTMvgL91ZBMqj+5bAv2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZGSTJ6XjHQVFIYzmgQKKMPGsRyMB8GA1UdIwQY
MBaAFAs1YIfCDHoyVBb9qAPLdvPaeUepMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3pWZ2g4SU1lakpVRnYyb0E4dDI4OXA1UjZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kN2NmOTQtYWM2MS00ZmJmLWFkZjAt
NTdlYWY4MzNhYjBiLzEvQ3pWZ2g4SU1lakpVRnYyb0E4dDI4OXA1UjZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9kN2NmOTQtYWM2MS00ZmJmLWFkZjAtNTdlYWY4MzNhYjBi
LzEvQ3pWZ2g4SU1lakpVRnYyb0E4dDI4OXA1UjZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqcyf2G+
jR5rNCX9fXhYPeT591Yk55R6SbxQPZkeP0pAsH3D5SrIhMkc6aBLLdn+NdQ/iWwk
4Jm5F2hgM/aHhD1FAb1/4WPi1ri60BrC2Q7vGtnCbQmIo34C+PdqCf+oYJZ2DfiF
V+sJRt/ENqtZxPiD/6PpgN6wRvXSdgSLxGZQXVSTZjERRdKxx81WXc2PVdalIyAM
rxKkefcu38YUigtGD0H1M5yumT6P77Hnr03H/bEvlc+efvoWwEqmc/rFrMyMLwen
3jm2a91+yLSF6KDildfsk58yqGzFHZ885/VU9w/f5iaAzwYUzFBksyyjtVwwgKtn
oFpO80jcuCFZow==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:38:04 2026 by rpki-client