Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft
File: czmHDhAmLGcJt7YWNxNLX5pseMo.mft (raw, json)
Hash identifier: HLwvqF0RgpbwNwKVmp/4L5HBdWIUX+0mAf+EMdFHgi8=
Subject key identifier: 9B:F7:5B:16:CA:60:64:8E:86:50:F5:F2:6B:6F:E6:F3:2A:C6:95:F0
Authority key identifier: 73:39:87:0E:10:26:2C:67:09:B7:B6:16:37:13:4B:5F:9A:6C:78:CA
Certificate issuer: /CN=7339870e10262c6709b7b61637134b5f9a6c78ca
Certificate serial: 019DA29C7D38A2C2C861975ED34928FE3D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czmHDhAmLGcJt7YWNxNLX5pseMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft
Manifest number: 18C6
Signing time: Sat 18 Apr 2026 22:00:57 +0000
Manifest this update: Sat 18 Apr 2026 22:00:57 +0000
Manifest next update: Sun 19 Apr 2026 22:00:57 +0000
Files and hashes: 1: Amuu6Txw-fMcXNv05W6lA1k97YQ.roa (hash: XAwaHImrJWvBTZ1p8VHnIGXkYFDyyQQtG8lODIvH8Sk=)
2: czmHDhAmLGcJt7YWNxNLX5pseMo.crl (hash: RzXnBVJKUHBr7YZpkiJfBVFtZncOvXyi+s+O/JUHzcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/czmHDhAmLGcJt7YWNxNLX5pseMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:7d:38:a2:c2:c8:61:97:5e:d3:49:28:fe:3d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7339870e10262c6709b7b61637134b5f9a6c78ca
Validity
Not Before: Apr 18 22:00:57 2026 GMT
Not After : Apr 19 22:00:57 2026 GMT
Subject: CN=9bf75b16ca60648e8650f5f26b6fe6f32ac695f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:db:ed:76:1b:8d:d8:47:31:b0:08:4a:06:ea:
ef:ad:63:81:2c:0e:4c:e9:42:e0:63:07:74:92:f6:
49:81:fc:69:50:2a:fc:7c:a8:2a:90:45:ee:5f:e5:
92:13:12:47:22:56:5c:c1:a9:f8:fc:5b:e5:3d:3f:
f2:7a:93:83:89:d5:c0:c6:c8:82:b1:90:82:ec:74:
0a:51:7c:8c:b0:48:a2:89:75:49:4e:00:b6:8b:08:
74:1b:2e:09:96:92:57:25:ff:44:cb:87:b1:1a:66:
6e:be:41:65:ed:bd:94:3a:18:89:8c:fb:ec:6b:3d:
ea:7a:f1:af:9b:db:da:20:ae:b9:68:cd:d3:2a:25:
d7:6b:4c:8e:af:c6:52:c1:de:ea:82:20:7d:8b:81:
83:e6:19:d6:c2:08:4c:79:39:86:82:7d:ee:01:cb:
3a:ea:01:eb:c5:81:9d:a5:ca:9e:5e:ba:14:f6:d9:
b8:86:43:ac:43:5f:6b:96:70:55:b5:b4:a0:06:ed:
e9:aa:a8:fd:bb:38:19:43:35:6b:ae:89:de:73:3b:
48:51:f0:4a:6c:15:00:7c:85:fd:12:a9:2a:1f:fb:
9f:da:a1:93:d5:24:3a:c8:4e:d8:e7:8d:e9:3f:59:
5a:d7:79:f7:03:88:ef:fd:0b:74:6b:3e:5a:4f:7a:
a4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F7:5B:16:CA:60:64:8E:86:50:F5:F2:6B:6F:E6:F3:2A:C6:95:F0
X509v3 Authority Key Identifier:
keyid:73:39:87:0E:10:26:2C:67:09:B7:B6:16:37:13:4B:5F:9A:6C:78:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czmHDhAmLGcJt7YWNxNLX5pseMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e9:ff:16:0b:33:4b:77:7b:7e:76:38:f7:5b:45:ef:3b:8b:
9f:db:69:59:4e:e4:98:03:f4:d3:a3:87:44:60:3b:23:48:10:
6a:78:d8:87:ab:d9:49:91:87:d0:e9:db:d9:fe:78:50:3a:e6:
84:3b:c1:b5:f1:9e:7c:56:0a:07:b7:f6:74:d2:4a:fb:23:23:
36:5c:50:39:04:ed:de:ac:7d:21:ec:fd:8a:27:39:a6:67:62:
7c:b6:f6:46:95:3d:a9:e7:cb:6e:04:98:98:0d:e6:18:61:4d:
a6:01:0f:a9:70:32:fe:dd:d3:3d:07:c0:cb:8f:08:6e:60:52:
38:98:54:08:32:86:66:28:ee:c4:eb:56:7e:bf:be:b5:02:df:
97:d6:34:fe:7c:92:cf:e2:bb:2e:14:1d:dc:c8:4a:3d:7a:0a:
ba:75:88:f1:4c:1c:a9:3f:36:80:87:6b:d7:fa:58:77:c5:bb:
8f:8a:9d:cb:01:3a:17:5e:94:d0:2e:4d:00:93:f1:76:d5:b8:
5f:57:63:dc:8c:73:cc:d7:61:57:76:44:9a:04:31:8d:0e:8b:
59:0e:dd:f5:e8:b7:7a:54:bd:0c:a8:c5:23:c0:0f:67:e0:fd:
6c:bb:ae:ae:a5:b8:f0:cd:06:92:b7:2a:15:f1:8c:de:6a:b7:
eb:f9:91:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 06:57:49 2026 by rpki-client