Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft
File: czmHDhAmLGcJt7YWNxNLX5pseMo.mft (raw, json)
Hash identifier: Y/CtNTNW4DfmAf4OzPnyU9k86sxV7WQL1nseo89RFUk=
Subject key identifier: 07:D8:30:CC:71:4A:A0:A0:8B:E5:B9:57:A3:00:B6:B3:40:EA:B4:EA
Authority key identifier: 73:39:87:0E:10:26:2C:67:09:B7:B6:16:37:13:4B:5F:9A:6C:78:CA
Certificate issuer: /CN=7339870e10262c6709b7b61637134b5f9a6c78ca
Certificate serial: 019F85681EADB17C4D62B126E2D41FDF318B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czmHDhAmLGcJt7YWNxNLX5pseMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft
Manifest number: 19C0
Signing time: Tue 21 Jul 2026 16:00:21 +0000
Manifest this update: Tue 21 Jul 2026 16:00:21 +0000
Manifest next update: Wed 22 Jul 2026 16:00:21 +0000
Files and hashes: 1: Amuu6Txw-fMcXNv05W6lA1k97YQ.roa (hash: XAwaHImrJWvBTZ1p8VHnIGXkYFDyyQQtG8lODIvH8Sk=)
2: czmHDhAmLGcJt7YWNxNLX5pseMo.crl (hash: iIUAMfCpg54024afF0LqQt64ElSy1HlKNtC9KnVMZjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/czmHDhAmLGcJt7YWNxNLX5pseMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:68:1e:ad:b1:7c:4d:62:b1:26:e2:d4:1f:df:31:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7339870e10262c6709b7b61637134b5f9a6c78ca
Validity
Not Before: Jul 21 16:00:21 2026 GMT
Not After : Jul 22 16:00:21 2026 GMT
Subject: CN=07d830cc714aa0a08be5b957a300b6b340eab4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ca:36:34:cf:d6:b6:47:05:d2:f3:a9:ff:60:
e1:41:54:26:e8:10:7f:40:ff:e1:28:c9:0b:20:f5:
9a:64:3c:87:65:a8:b6:5f:5d:6c:85:28:02:ae:e4:
ef:aa:54:40:a6:f1:87:49:7f:f1:66:9c:67:fc:ef:
f2:e3:8c:bc:89:cd:2a:81:48:73:66:e8:cb:8a:37:
82:be:49:17:a1:4c:4c:dd:ce:73:2e:90:42:a9:83:
d9:08:fd:6e:d5:f1:66:39:e3:b8:78:2f:c9:6d:49:
f8:ed:16:0c:4e:cf:8a:e5:e4:fb:ad:7c:94:a2:ba:
e4:f6:ab:d2:ff:56:76:c6:20:fd:97:2a:b1:d4:fa:
d4:d0:54:c4:25:f0:a1:00:27:cf:ee:bb:d5:b8:3c:
d6:f8:3d:be:1d:1e:e8:6d:cb:b2:b0:81:f8:ec:11:
32:47:0a:34:fa:b3:05:08:16:c6:77:02:fd:9c:d5:
d0:90:01:62:65:af:ab:91:2a:01:e7:c8:ea:59:9d:
9d:32:da:4a:ac:fe:8a:e5:69:95:af:a9:95:ec:65:
72:cf:19:73:8c:8c:f6:4c:c4:80:49:41:f6:c3:84:
46:d6:64:8d:ab:2d:dd:17:8c:c2:fc:eb:c6:4e:89:
60:f9:08:14:ec:de:bd:96:7e:12:d3:3e:94:b0:90:
32:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D8:30:CC:71:4A:A0:A0:8B:E5:B9:57:A3:00:B6:B3:40:EA:B4:EA
X509v3 Authority Key Identifier:
keyid:73:39:87:0E:10:26:2C:67:09:B7:B6:16:37:13:4B:5F:9A:6C:78:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czmHDhAmLGcJt7YWNxNLX5pseMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:fc:7f:12:8b:3f:16:9d:df:56:ef:d4:f4:46:1a:a8:c1:d1:
80:d3:01:aa:2c:56:02:a3:9c:7a:0b:0e:64:6c:c8:9e:a6:df:
68:39:c5:3c:f3:ef:f3:22:d5:dc:d1:58:d8:11:7d:63:de:a4:
0d:dd:df:ba:b6:df:a4:1e:2d:3a:2e:f6:a1:c3:36:e9:33:59:
a9:e1:73:77:19:d6:8a:05:dd:08:e7:67:b1:97:38:c3:b7:e8:
54:21:94:4f:c4:e0:24:f1:b6:4e:6c:d6:05:35:7f:ac:aa:b0:
f5:0a:a3:eb:1a:71:53:86:40:f3:4e:67:16:fa:20:8e:90:32:
32:65:ce:0a:2a:04:18:50:b9:af:1b:21:eb:93:16:59:04:4a:
0c:41:c7:72:ba:83:28:d5:24:69:b3:6f:60:60:4b:48:9b:da:
85:e4:88:81:a7:02:79:53:28:6f:83:8d:33:29:21:db:04:13:
6d:c1:d4:cf:1a:da:4e:d4:67:cb:43:74:f9:38:d2:f3:94:07:
9b:39:77:8f:ac:6d:ef:52:1a:95:3a:4f:06:28:dc:0a:b7:63:
20:77:b9:97:95:64:88:47:6b:f2:f8:7d:65:a3:a7:c6:42:42:
0b:44:c9:4d:51:e2:6c:78:f3:d8:8d:94:38:8c:c3:98:a6:bd:
40:61:8b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:53 2026 by rpki-client