Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
File: czHb7QiXzOhcFINxtHzIB4Ll5ys.mft (raw, json)
Hash identifier: MKvrWcpG9vFwvfN2LKrZ9qA3b/Ie9TLNw22sWAMzt5E=
Subject key identifier: 75:86:95:08:E7:8F:B9:4E:C3:2B:94:4F:B4:DA:5D:A0:3B:C7:8C:15
Authority key identifier: 73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B
Certificate issuer: /CN=7331dbed0897cce85c148371b47cc80782e5e72b
Certificate serial: 019FE5F897132AE4EEC21CD586E8804138BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
Manifest number: 08E3
Signing time: Sun 09 Aug 2026 10:01:41 +0000
Manifest this update: Sun 09 Aug 2026 10:01:41 +0000
Manifest next update: Mon 10 Aug 2026 10:01:41 +0000
Files and hashes: 1: T0Q1-_qD3Ki2609r9NZI0IvfjS4.roa (hash: +nPlRWGkeYoja770vj9LfCl9js/SDYPB/SeIBGkWDVM=)
2: czHb7QiXzOhcFINxtHzIB4Ll5ys.crl (hash: LLAD+DYiTqfDi/bdRbgPiBW4mgMu4U0k9ofsLtVlIEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Aug 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e5:f8:97:13:2a:e4:ee:c2:1c:d5:86:e8:80:41:38:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7331dbed0897cce85c148371b47cc80782e5e72b
Validity
Not Before: Aug 9 10:01:41 2026 GMT
Not After : Aug 10 10:01:41 2026 GMT
Subject: CN=75869508e78fb94ec32b944fb4da5da03bc78c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d2:f8:c5:8f:4e:22:01:5a:da:32:f4:d3:2c:
e3:5d:99:da:40:58:5b:93:f3:97:10:0c:3a:51:09:
47:05:9f:dc:91:aa:76:df:4a:3d:f2:6b:e6:1b:80:
d2:cd:04:c2:ca:71:21:60:45:aa:66:48:aa:c2:1c:
57:97:16:d6:dc:6a:a5:f0:9a:a3:4d:b6:ae:e7:29:
3e:d0:4a:48:6b:0e:66:c3:7b:b1:e0:b4:1a:01:6f:
1c:d6:69:65:1b:e0:b4:10:59:ca:bc:a8:99:e8:cd:
94:35:83:4c:54:1a:45:b6:1d:dd:1f:fa:7e:48:47:
d5:58:75:04:06:be:20:42:7a:4a:21:35:4b:9f:b4:
14:24:09:76:b7:15:f0:64:b2:d9:56:32:e0:56:a9:
83:49:f8:1e:f7:8c:8c:71:80:24:87:d0:2b:63:71:
78:72:9d:85:2d:8d:19:e6:76:03:72:03:86:7b:78:
88:92:a0:27:f7:26:af:f4:17:f3:25:02:41:71:c8:
5b:01:ca:1b:dd:9a:d5:fc:5d:d5:91:45:ef:07:3b:
0d:bd:b3:92:88:4b:13:c5:a3:98:57:d1:1d:44:62:
48:4b:d3:a9:51:c6:f8:a7:93:ca:eb:0c:08:7e:f9:
9e:aa:45:bf:ba:02:94:c0:bb:5a:f7:c9:23:32:d1:
7a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:86:95:08:E7:8F:B9:4E:C3:2B:94:4F:B4:DA:5D:A0:3B:C7:8C:15
X509v3 Authority Key Identifier:
keyid:73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:2e:e9:b9:bb:32:0a:58:0f:f8:39:98:96:2d:36:a8:29:83:
b6:a2:dc:42:4d:34:3a:00:28:8c:48:58:8e:1f:64:fd:c4:fe:
85:f7:4e:d9:3a:f7:63:be:ca:37:d1:d0:c2:f6:98:15:65:2b:
b3:e9:e7:fd:90:62:d1:58:4c:a3:13:1f:bf:e9:00:f7:50:9c:
85:b6:50:35:fc:5c:eb:b2:a5:06:33:dd:10:50:42:25:6a:8c:
ce:40:57:20:ec:fc:8d:f3:a9:c3:bf:31:bf:0b:1f:d3:f0:94:
b2:e9:58:73:c1:3d:b8:6c:1c:43:a3:2e:a8:fc:06:25:00:de:
6f:37:2b:f3:5c:aa:64:b4:0d:44:c3:d5:d8:6b:71:84:34:5f:
a8:9f:c8:78:92:ce:08:44:8d:5a:76:4d:3b:ec:49:42:0c:79:
1c:59:cd:cb:38:29:cf:bc:b6:51:91:2a:23:ce:76:81:a1:9b:
6b:54:be:3d:4d:e7:45:d4:eb:46:dd:4d:4e:35:46:0a:20:30:
bf:e0:b2:73:1a:fc:35:b0:35:26:95:d9:44:ae:a2:54:e0:86:
80:3d:8d:7b:e0:48:9c:47:17:83:88:fe:82:18:c0:9f:40:96:
50:66:34:e5:f0:66:f3:63:b9:f1:51:ce:de:c5:2c:a4:80:89:
f8:88:9e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 11:38:46 2026 by rpki-client