Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
File: 1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft (raw, json)
Hash identifier: CtfaNT5WZY7fF6NWGCM/+sopLn/9xjTHYO2JcZeYKwY=
Subject key identifier: 8D:B2:2A:7D:F8:00:5F:46:13:68:A5:23:34:69:89:66:FF:93:0F:64
Authority key identifier: D4:2C:C4:02:67:E3:59:2E:1B:52:F0:F0:09:6C:B1:F2:F0:AF:16:7D
Certificate issuer: /CN=d42cc40267e3592e1b52f0f0096cb1f2f0af167d
Certificate serial: 01A0017000D0830D92706B2E0EF2499E4BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
Manifest number: 0718
Signing time: Fri 14 Aug 2026 18:01:52 +0000
Manifest this update: Fri 14 Aug 2026 18:01:52 +0000
Manifest next update: Sat 15 Aug 2026 18:01:52 +0000
Files and hashes: 1: 1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl (hash: hutydWXfOkIZY1U6LQZw+GfkeHXg6oPnFMel6Gq8CnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:70:00:d0:83:0d:92:70:6b:2e:0e:f2:49:9e:4b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42cc40267e3592e1b52f0f0096cb1f2f0af167d
Validity
Not Before: Aug 14 18:01:52 2026 GMT
Not After : Aug 15 18:01:52 2026 GMT
Subject: CN=8db22a7df8005f461368a52334698966ff930f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c6:96:c0:0a:11:a2:a3:69:db:60:fd:9b:86:
9c:37:42:b4:5a:94:56:42:80:17:ee:09:ae:ba:40:
14:24:76:03:8e:b2:5d:a3:dc:54:4b:d3:82:5f:b3:
94:b1:97:15:3b:2b:36:a0:7c:2d:ce:f3:0c:eb:24:
ce:bf:fd:0c:ce:29:24:0e:e6:df:cf:52:17:c3:28:
97:b0:b3:aa:2d:ed:df:27:1d:8d:53:49:76:b0:fd:
ba:38:93:11:22:ad:44:b9:6c:18:17:f0:1b:0e:81:
df:7e:f3:79:98:76:24:37:98:98:b6:75:b9:c4:96:
ec:7d:fe:e1:52:7d:6d:13:f0:45:e4:2b:e3:cd:04:
d6:a8:0e:89:4f:f6:c6:ce:c9:77:67:ad:cf:f7:87:
54:39:7e:87:2e:f1:e6:25:30:81:e9:0c:6d:01:af:
cc:cf:0a:45:23:28:5d:bb:5f:cd:51:ca:29:0a:6d:
53:e5:fe:a2:08:17:e6:9f:75:7a:d0:bc:c7:f7:a2:
69:26:0a:91:3c:21:ee:d0:61:2e:f2:69:25:e9:e3:
c8:f1:0a:cf:53:61:48:55:3e:f9:84:2a:f5:f3:e8:
6c:7b:2d:c2:ad:ad:14:d3:2d:0f:20:ce:04:e5:2c:
e3:4b:3c:14:bf:59:4e:5d:a0:7e:21:08:27:03:52:
83:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B2:2A:7D:F8:00:5F:46:13:68:A5:23:34:69:89:66:FF:93:0F:64
X509v3 Authority Key Identifier:
keyid:D4:2C:C4:02:67:E3:59:2E:1B:52:F0:F0:09:6C:B1:F2:F0:AF:16:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:cd:6b:34:b9:0a:78:a1:55:87:dd:d0:a5:bc:78:6a:4b:e1:
45:4b:02:aa:91:2e:76:27:68:e2:a2:97:d8:9c:4f:e6:19:a0:
35:95:57:af:8e:37:d4:0d:74:e5:f0:1e:f6:16:2a:93:6b:dc:
0b:24:5d:e8:79:e4:6a:22:29:e3:3e:70:c5:c8:67:06:3f:ef:
24:37:df:92:57:c8:f7:91:86:00:2c:66:1d:4a:23:05:3b:95:
04:9b:d3:85:d3:41:ff:fb:dc:bb:96:b6:c0:0f:62:c1:8c:fe:
7a:64:3a:b1:0e:ab:6b:74:50:6b:fa:b7:a5:4f:ec:b7:a2:b1:
85:c8:7c:79:38:d7:01:25:7b:28:fd:70:fd:d6:f5:a0:d5:79:
c3:2f:24:b7:30:72:22:32:b7:95:e7:49:ab:3c:c6:0e:69:a4:
ad:07:a3:30:de:50:45:43:57:8e:1e:68:77:5e:7b:ca:6c:22:
37:99:f5:ed:a1:20:a9:bb:d6:04:fd:97:ea:e6:f1:ee:03:e4:
51:ca:7b:0a:0e:4b:6c:a6:a9:61:6f:2a:2c:d6:80:3d:31:c2:
82:12:80:de:df:6e:ce:c0:bc:03:97:6c:65:fc:3f:1e:bb:0f:
72:05:b1:e4:63:3c:8f:3f:b9:42:50:3e:5f:98:32:80:c8:0a:
dd:cb:13:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABcADQgw2ScGsuDvJJnkvsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MmNjNDAyNjdlMzU5MmUxYjUyZjBmMDA5NmNiMWYyZjBh
ZjE2N2QwHhcNMjYwODE0MTgwMTUyWhcNMjYwODE1MTgwMTUyWjAzMTEwLwYDVQQD
Eyg4ZGIyMmE3ZGY4MDA1ZjQ2MTM2OGE1MjMzNDY5ODk2NmZmOTMwZjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8aWwAoRoqNp22D9m4acN0K0WpRW
QoAX7gmuukAUJHYDjrJdo9xUS9OCX7OUsZcVOys2oHwtzvMM6yTOv/0MzikkDubf
z1IXwyiXsLOqLe3fJx2NU0l2sP26OJMRIq1EuWwYF/AbDoHffvN5mHYkN5iYtnW5
xJbsff7hUn1tE/BF5CvjzQTWqA6JT/bGzsl3Z63P94dUOX6HLvHmJTCB6QxtAa/M
zwpFIyhdu1/NUcopCm1T5f6iCBfmn3V60LzH96JpJgqRPCHu0GEu8mkl6ePI8QrP
U2FIVT75hCr18+hsey3Cra0U0y0PIM4E5SzjSzwUv1lOXaB+IQgnA1KD6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2yKn34AF9GE2ilIzRpiWb/kw9kMB8GA1UdIwQY
MBaAFNQsxAJn41kuG1Lw8AlssfLwrxZ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUN6RUFtZmpXUzRiVXZEd0NXeXg4dkN2Rm4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83MTM0NWQtMmYyZC00YjU5LTllNjct
MTZlMTMwODczN2IwLzEvMUN6RUFtZmpXUzRiVXZEd0NXeXg4dkN2Rm4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My83MTM0NWQtMmYyZC00YjU5LTllNjctMTZlMTMwODczN2Iw
LzEvMUN6RUFtZmpXUzRiVXZEd0NXeXg4dkN2Rm4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH81rNLkK
eKFVh93Qpbx4akvhRUsCqpEudido4qKX2JxP5hmgNZVXr4431A105fAe9hYqk2vc
CyRd6HnkaiIp4z5wxchnBj/vJDffklfI95GGACxmHUojBTuVBJvThdNB//vcu5a2
wA9iwYz+emQ6sQ6ra3RQa/q3pU/st6Kxhch8eTjXASV7KP1w/db1oNV5wy8ktzBy
IjK3ledJqzzGDmmkrQejMN5QRUNXjh5od157ymwiN5n17aEgqbvWBP2X6ubx7gPk
Ucp7Cg5LbKapYW8qLNaAPTHCghKA3t9uzsC8A5dsZfw/HrsPcgWx5GM8jz+5QlA+
X5gygMgK3csTwQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:18 2026 by rpki-client