Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
File: CRzF2QybaBpstOdyzK6-w0L7mwU.mft (raw, json)
Hash identifier: cGVXToI/8mTDoS5vWg+OLf62FKd6DFfhxqrMWkN7ljs=
Subject key identifier: F2:15:E6:F3:D5:F9:F8:DB:6A:9F:B0:0A:69:19:E9:1A:9B:83:BC:1C
Authority key identifier: 09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
Certificate issuer: /CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Certificate serial: 01A001700C8CB1EA80B08BA1E0435658A95B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
Manifest number: 0DB0
Signing time: Fri 14 Aug 2026 18:01:55 +0000
Manifest this update: Fri 14 Aug 2026 18:01:55 +0000
Manifest next update: Sat 15 Aug 2026 18:01:55 +0000
Files and hashes: 1: CRzF2QybaBpstOdyzK6-w0L7mwU.crl (hash: +m2csUkDbjcQNwai2Zo9rEWo1FKcgjHAH/7k+/CyTCQ=)
2: zrtaoEiavdgjJ45IAZF5NnPo3Rs.roa (hash: z2iZziOE5JN+RJazqLZp00E5SjB0TdkmZt0o09ieR34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:70:0c:8c:b1:ea:80:b0:8b:a1:e0:43:56:58:a9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Validity
Not Before: Aug 14 18:01:55 2026 GMT
Not After : Aug 15 18:01:55 2026 GMT
Subject: CN=f215e6f3d5f9f8db6a9fb00a6919e91a9b83bc1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:4d:e6:b5:32:fa:9f:56:c2:34:cd:e2:84:
63:45:96:94:16:2e:62:5c:05:9d:e0:ba:73:4a:e1:
e4:3c:96:f4:58:7d:5a:70:b6:23:06:07:a6:f3:5d:
96:b5:c8:24:57:38:79:8b:f0:a4:0c:74:ba:dd:97:
d7:8d:54:ad:71:fc:89:18:7c:7e:02:d2:ef:bb:82:
eb:f1:9c:03:7a:70:ba:39:e4:d9:f1:46:45:04:df:
37:49:90:be:59:96:ac:2c:34:c7:2f:cc:65:93:ac:
a6:18:f4:9d:c9:a5:94:0b:0f:8a:f9:7f:74:79:4c:
e1:fc:8c:fd:f4:90:3d:f9:40:1e:60:ed:a1:01:66:
9f:c1:5d:8b:c8:f1:a7:54:d9:c4:8f:ce:df:a2:bf:
aa:f4:51:4e:4f:8a:66:1d:06:c2:e6:47:0e:59:c8:
f6:f6:39:41:98:37:20:bf:f6:b8:09:08:49:bf:e8:
df:97:4d:1f:bd:5a:b3:85:4c:67:72:d1:c1:71:60:
d0:97:24:1f:12:da:0a:63:33:2a:fc:07:61:ed:18:
97:a2:ca:8a:e8:2f:43:f6:96:bf:70:d1:7c:be:23:
74:fc:c6:5d:ae:d4:c1:1d:cd:69:87:c4:12:48:e3:
91:7e:4c:5e:a9:1b:97:a0:f9:ae:55:c7:8c:dd:bc:
0c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:15:E6:F3:D5:F9:F8:DB:6A:9F:B0:0A:69:19:E9:1A:9B:83:BC:1C
X509v3 Authority Key Identifier:
keyid:09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:77:94:a3:25:3c:f4:a9:6c:d1:cf:b4:f2:8b:4c:8b:ff:5e:
c6:c2:d5:6d:a0:09:71:72:e4:0c:88:e9:bd:fd:80:a9:b5:d2:
65:65:13:91:fe:5b:24:b9:73:f6:4a:ba:be:4a:65:ca:44:eb:
41:33:0f:33:a7:1c:02:8a:14:ea:e5:80:ea:2a:65:13:4e:66:
87:0b:86:42:f4:22:c4:4b:9d:51:a8:75:98:98:a9:01:c1:ed:
17:c0:af:64:fa:94:80:5a:96:54:11:33:ce:ec:9f:46:7a:76:
bb:c5:76:77:d0:fd:9f:a0:0b:58:23:be:be:ef:5c:b9:26:e6:
0a:27:09:57:c7:fe:12:38:b5:b3:8e:5c:18:e4:07:0f:37:af:
ee:28:2f:95:e7:09:dc:cb:6e:42:46:c8:84:c8:8a:32:c0:0c:
38:24:07:c5:bf:09:be:33:cd:f6:2a:5e:b8:39:93:94:eb:69:
46:06:e9:1c:9b:15:93:91:38:9e:32:80:30:e1:06:ef:56:90:
74:00:3a:b4:e8:83:d2:a5:62:28:a4:02:54:4b:91:bb:f7:1c:
29:d4:39:b9:1e:ff:44:a5:8d:83:06:cc:d1:77:fe:56:01:14:
33:f3:c0:d0:cb:a5:72:78:79:2c:38:e8:0d:6a:4c:c9:a5:b9:
2a:6c:9f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:40:25 2026 by rpki-client