
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
File: CRzF2QybaBpstOdyzK6-w0L7mwU.mft (raw, json)
Hash identifier: 6qj5uyCKjtKOrtnFgwkEw69DMdwyOlddwCAEbkXxpzA=
Subject key identifier: E1:E9:B4:82:02:ED:69:32:04:8B:CF:C2:79:42:18:41:DC:58:AC:E8
Authority key identifier: 09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
Certificate issuer: /CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Certificate serial: 01A13E262D2613D9E26E09FAC913D7233B29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
Manifest number: 0E54
Signing time: Thu 15 Oct 2026 06:00:51 +0000
Manifest this update: Thu 15 Oct 2026 06:00:51 +0000
Manifest next update: Fri 16 Oct 2026 06:00:51 +0000
Files and hashes: 1: CRzF2QybaBpstOdyzK6-w0L7mwU.crl (hash: v3uPC5olVEzIEEyH9OtQ9Iwl2mclSP874NX3MqhfhiY=)
2: zrtaoEiavdgjJ45IAZF5NnPo3Rs.roa (hash: z2iZziOE5JN+RJazqLZp00E5SjB0TdkmZt0o09ieR34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:2d:26:13:d9:e2:6e:09:fa:c9:13:d7:23:3b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Validity
Not Before: Oct 15 06:00:51 2026 GMT
Not After : Oct 16 06:00:51 2026 GMT
Subject: CN=e1e9b48202ed6932048bcfc279421841dc58ace8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:d8:a7:b1:ac:d7:be:6d:56:e3:fe:13:b4:
8d:c4:93:3f:59:af:a6:36:45:1c:19:3f:23:db:c5:
0b:70:7e:c5:d7:91:08:5b:f9:e9:03:da:d3:86:21:
66:3a:55:1a:93:5f:68:39:1a:29:1f:20:21:6f:f5:
68:0a:4f:fa:4b:51:f3:12:ef:40:ce:31:5a:2f:7a:
31:aa:57:d7:97:26:fd:c9:a8:b1:85:85:40:9f:c2:
07:31:d5:0c:ba:54:41:fe:22:b8:3c:4b:a4:4c:65:
c8:2b:ab:10:72:8f:16:c1:5f:47:c9:c8:f7:e6:b4:
fa:75:70:04:ef:08:2b:1d:fb:a9:2b:a0:ab:29:1b:
62:04:cf:5f:2d:8d:89:5b:5c:e3:38:12:e9:a6:3c:
44:5a:31:1c:43:34:74:5d:b9:f3:1e:a9:47:80:43:
48:90:64:a6:b3:c6:d3:28:f7:de:73:2a:ff:38:f0:
ed:08:a8:2a:0f:5d:f8:8e:1d:32:f8:eb:b8:c2:0a:
8f:68:a7:7f:16:40:25:7b:40:bf:8e:1a:46:19:e9:
0a:cb:d4:66:40:35:8c:f6:d8:f3:d7:54:ab:30:6d:
fa:91:c4:56:0f:7b:1a:67:48:7c:b9:7b:60:09:e1:
10:44:53:7d:34:e7:3a:f9:77:0c:b6:26:ea:ba:40:
5e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E9:B4:82:02:ED:69:32:04:8B:CF:C2:79:42:18:41:DC:58:AC:E8
X509v3 Authority Key Identifier:
keyid:09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f1:8d:8f:dd:d9:a2:29:d6:8d:b4:d9:83:49:d3:20:18:bd:
ab:1f:e9:9c:9e:36:76:f4:cc:41:d6:ec:4f:9b:7d:ed:d4:f8:
04:93:f7:2e:61:87:67:16:d3:98:0f:de:eb:9b:2b:83:f3:6a:
98:65:80:12:ba:37:66:36:90:28:57:07:49:0b:d2:68:02:68:
8b:8b:7e:98:21:e2:b2:39:2e:a5:f8:ff:21:66:4d:25:c4:cc:
b3:23:51:aa:86:28:e0:b0:d1:11:32:4f:32:45:61:a2:04:3b:
34:9c:be:e8:ff:e9:7a:c9:00:1a:0b:5a:01:2e:50:48:0c:f3:
c7:e0:1f:5a:b9:95:c1:0d:14:61:f6:e1:6c:c1:7c:85:f1:22:
b6:9a:2d:52:55:63:90:3b:68:ed:45:02:48:41:e7:44:0f:40:
52:c9:6f:94:14:a3:06:60:23:c6:4c:0f:bb:79:75:bf:2e:fa:
36:e7:94:db:28:d6:e5:15:2b:d0:8e:8e:87:9d:d7:31:85:d4:
b0:e8:83:07:30:0e:65:49:f7:b5:63:30:c2:e3:71:09:c3:99:
d1:9a:4a:10:62:79:1e:c3:f7:b8:60:6f:b3:8a:7e:f8:ae:b6:
02:7e:a5:b0:a5:ce:32:09:9f:e1:d0:b9:60:e9:df:b3:40:2b:
08:20:5b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:48 2026 by rpki-client