Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft
File: czaDy4VtbZ_1jih-ipBdKS3KazQ.mft (raw, json)
Hash identifier: xt37Byen9F09rsk98LD6a9xuXK/cZCzkBq/0RolqDOY=
Subject key identifier: B5:C5:23:4C:22:C3:96:CB:BF:D7:3F:35:D1:4D:1E:D3:F4:87:06:D9
Authority key identifier: 73:36:83:CB:85:6D:6D:9F:F5:8E:28:7E:8A:90:5D:29:2D:CA:6B:34
Certificate issuer: /CN=733683cb856d6d9ff58e287e8a905d292dca6b34
Certificate serial: 019FA2607E7B4B01586CC6834C79039248A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czaDy4VtbZ_1jih-ipBdKS3KazQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft
Manifest number: 1615
Signing time: Mon 27 Jul 2026 07:01:00 +0000
Manifest this update: Mon 27 Jul 2026 07:01:00 +0000
Manifest next update: Tue 28 Jul 2026 07:01:00 +0000
Files and hashes: 1: FhBG6EZ_K984KUIz81WFHdsRYxw.roa (hash: KOb98v+CSmeD7NnmSTq6hlY5QkxEZeCFyxvl1RnJ2hw=)
2: czaDy4VtbZ_1jih-ipBdKS3KazQ.crl (hash: 2TnOAiy5MMA2bby2VMTBtuImajlyvzX5WubIqUTOnco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/czaDy4VtbZ_1jih-ipBdKS3KazQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:7e:7b:4b:01:58:6c:c6:83:4c:79:03:92:48:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733683cb856d6d9ff58e287e8a905d292dca6b34
Validity
Not Before: Jul 27 07:01:00 2026 GMT
Not After : Jul 28 07:01:00 2026 GMT
Subject: CN=b5c5234c22c396cbbfd73f35d14d1ed3f48706d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:d8:4b:d0:d9:ef:f9:86:67:9e:95:19:e5:
42:b6:d8:da:53:fb:cc:f2:7d:a3:64:42:6e:24:58:
8b:00:50:6e:b8:58:aa:14:9c:29:d8:3d:9c:f6:5c:
8d:77:e0:0b:23:90:f0:bb:c5:72:97:dd:17:e9:64:
2d:50:c0:20:08:a7:5c:c7:2b:be:50:dc:5b:58:56:
5a:2a:cf:ec:6a:23:83:3c:44:f0:a0:d7:78:d9:6c:
ed:45:4b:73:c1:e9:40:1a:80:f1:e9:0f:fd:a6:32:
c1:bc:57:12:2e:97:3e:1a:90:11:c7:71:2c:08:f1:
e5:79:a5:e8:14:39:ec:4f:d2:ab:39:7e:84:a6:24:
b2:f8:06:69:6d:de:53:b5:d6:aa:e2:a8:f7:26:78:
d6:4b:eb:07:09:bf:0b:17:23:1a:4e:ca:ac:bf:4a:
68:ca:75:92:a9:a8:3e:c2:8b:27:8a:f3:a4:53:5b:
3f:c1:5c:5e:3f:16:3a:bc:38:8d:89:92:11:fc:9d:
a4:60:f0:3e:c7:4c:14:77:b2:de:d3:34:f9:72:c5:
52:54:65:ae:6d:0e:0a:e1:b7:eb:54:42:c6:cc:e7:
c2:be:57:14:a7:e7:bf:1d:c0:f6:23:dd:e1:2e:03:
43:ea:85:a5:b2:9f:32:86:0c:ce:04:5c:d2:fd:b1:
48:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C5:23:4C:22:C3:96:CB:BF:D7:3F:35:D1:4D:1E:D3:F4:87:06:D9
X509v3 Authority Key Identifier:
keyid:73:36:83:CB:85:6D:6D:9F:F5:8E:28:7E:8A:90:5D:29:2D:CA:6B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czaDy4VtbZ_1jih-ipBdKS3KazQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:f2:4c:9b:4a:b4:dc:9c:13:2a:73:28:ab:d4:82:67:9f:0c:
a4:b0:56:23:6a:98:2d:70:3c:5a:70:13:5b:1f:fb:3e:61:39:
4e:f8:93:06:30:41:4f:db:ab:b1:95:42:90:60:7f:9e:69:4b:
68:b6:d6:a6:3d:b8:d8:24:6d:4a:a3:b4:99:0b:ca:0d:64:60:
75:c8:fe:43:67:50:b8:d0:6e:90:93:6c:30:25:e6:33:10:ba:
4b:2d:59:22:8a:a8:e4:0c:28:5e:96:36:14:5c:9b:16:f8:f9:
c7:0d:52:4c:47:80:8a:12:5e:0f:ba:ee:97:45:d5:4f:4c:f5:
6a:e4:f3:a9:1f:3f:7d:15:a2:e7:28:2d:40:d2:8f:70:be:19:
88:a8:7b:d8:d6:12:c2:30:95:f0:10:56:67:2c:22:26:e4:61:
ac:2e:7d:c0:14:35:02:f0:5b:05:9b:ca:80:ed:5c:a2:fe:19:
a5:07:76:79:e1:e8:48:4a:28:9f:7c:e4:f3:03:bc:1a:4b:d2:
0b:4e:5d:fe:97:a9:89:8c:8d:e3:2f:99:65:57:68:e4:77:67:
84:b4:7f:8d:4a:20:c7:20:ae:bc:ff:23:b2:80:ea:8e:d6:91:
17:e2:21:cf:93:12:4d:7c:ad:4c:40:0c:a6:c6:e7:61:8d:e1:
be:1f:37:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:28:58 2026 by rpki-client