Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
File: 1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft (raw, json)
Hash identifier: 7gczqa/C5sOCrCGVPsQv6yPZ4ThyuPSObXYnx0D8CdQ=
Subject key identifier: 57:64:C7:51:C1:7A:38:58:6B:B0:CE:B9:CF:24:E2:48:33:62:42:E9
Authority key identifier: D4:2C:C4:02:67:E3:59:2E:1B:52:F0:F0:09:6C:B1:F2:F0:AF:16:7D
Certificate issuer: /CN=d42cc40267e3592e1b52f0f0096cb1f2f0af167d
Certificate serial: 01A13E25CFFBABF61C4A2C5081FF0DC9BF98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
Manifest number: 07BC
Signing time: Thu 15 Oct 2026 06:00:27 +0000
Manifest this update: Thu 15 Oct 2026 06:00:27 +0000
Manifest next update: Fri 16 Oct 2026 06:00:27 +0000
Files and hashes: 1: 1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl (hash: ZahjjBrZ+JNEZS0tmm/VYPZwnXBPsph7ko5rzyQYz30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:cf:fb:ab:f6:1c:4a:2c:50:81:ff:0d:c9:bf:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42cc40267e3592e1b52f0f0096cb1f2f0af167d
Validity
Not Before: Oct 15 06:00:27 2026 GMT
Not After : Oct 16 06:00:27 2026 GMT
Subject: CN=5764c751c17a38586bb0ceb9cf24e248336242e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3c:ae:0c:a9:7b:86:db:a6:d9:db:57:b5:8d:
33:e3:96:2c:f6:96:f4:28:2c:4b:4d:b9:9c:8f:61:
f8:e5:d6:cc:a8:1d:12:41:56:08:82:ce:9f:47:42:
71:f2:ba:18:61:75:19:60:8f:71:9a:70:f2:d9:25:
03:dc:3e:fa:67:88:df:fa:8d:c8:8f:79:dc:9c:1c:
c5:54:ca:9b:8e:ca:5f:2a:a1:02:dd:cd:2f:01:31:
6a:8b:9e:f9:90:bb:ab:24:72:82:1c:13:18:87:bd:
80:f2:db:3b:d0:53:ed:00:96:48:81:6b:71:42:61:
ca:97:5e:6d:09:4c:3b:5d:c3:39:59:97:f1:0e:95:
70:be:3a:13:47:06:3d:25:f4:47:59:47:88:c4:1d:
ad:91:79:99:81:9d:7a:dc:73:2c:f0:b6:15:18:7e:
00:fa:b6:c7:e1:28:79:6e:ea:8d:20:a3:d2:b5:4e:
91:0a:2a:69:02:72:41:d1:00:42:4c:04:e7:88:29:
3d:5f:af:f9:83:f7:b6:c8:9e:ed:6f:6d:4f:e7:4c:
90:83:28:5c:19:c3:cc:99:69:6f:16:79:16:75:6f:
f4:b5:18:62:03:d2:5a:38:26:71:e8:65:91:ed:72:
57:f5:a0:e8:28:a5:f8:ff:cd:8f:d2:52:7c:42:18:
6b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:64:C7:51:C1:7A:38:58:6B:B0:CE:B9:CF:24:E2:48:33:62:42:E9
X509v3 Authority Key Identifier:
keyid:D4:2C:C4:02:67:E3:59:2E:1B:52:F0:F0:09:6C:B1:F2:F0:AF:16:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:89:ae:ca:e3:0c:cc:90:41:cd:87:0a:02:fa:2c:b3:94:fb:
7b:8c:85:18:ba:d8:1e:f9:44:fd:3e:e1:9c:da:48:c6:d3:9a:
f0:02:62:de:f5:1d:9b:a4:3d:bb:0b:41:d1:aa:c1:04:18:1b:
16:79:5b:95:d1:11:33:25:2c:14:7b:67:15:46:bb:0f:54:aa:
eb:c5:9f:0d:e7:07:88:98:da:89:86:35:50:04:b8:4e:57:aa:
48:95:be:d3:cc:c7:65:2a:f1:ac:46:b6:88:9f:78:64:b0:31:
2d:f0:cb:20:96:89:2a:db:81:38:db:27:6b:fa:e9:ce:51:69:
9f:b8:32:05:f1:14:67:a0:04:45:6c:63:18:42:ff:05:b0:37:
49:18:cd:78:d7:c7:14:9f:16:cf:42:a9:8c:35:3c:fb:38:04:
41:0f:b6:44:b9:c7:24:b2:0a:b8:42:2c:a9:3d:14:48:d5:f4:
61:c1:03:56:23:56:47:a7:4d:3b:3b:7f:86:9b:d0:27:53:a5:
27:60:34:73:ae:c2:7d:d1:14:77:07:75:4c:94:f4:ca:68:a4:
da:fa:7a:51:c0:d7:3f:43:f3:7c:fb:0e:9f:30:eb:72:22:6d:
0a:b9:22:a4:56:68:0d:5b:07:23:42:ba:d4:55:84:ee:4e:52:
49:e9:21:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:25:16 2026 by rpki-client