Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.mft
File: czQP17PChWN63ADx5h4rjkAmWPM.mft (raw, json)
Hash identifier: OumepxSkzNhkKMNst3CdIygB0PA3yehe6YSoVGvQCh8=
Subject key identifier: BB:45:0F:03:D7:EC:4D:92:20:D5:EA:69:A8:4D:D0:31:D5:3E:AE:98
Authority key identifier: 73:34:0F:D7:B3:C2:85:63:7A:DC:00:F1:E6:1E:2B:8E:40:26:58:F3
Certificate issuer: /CN=73340fd7b3c285637adc00f1e61e2b8e402658f3
Certificate serial: 01A08A55B2517F91DEEBC4CD12372664D0A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czQP17PChWN63ADx5h4rjkAmWPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.mft
Manifest number: 15C6
Signing time: Thu 10 Sep 2026 08:01:07 +0000
Manifest this update: Thu 10 Sep 2026 08:01:07 +0000
Manifest next update: Fri 11 Sep 2026 08:01:07 +0000
Files and hashes: 1: a3EzX3WcmdhmQvwA-GnAI4JgEtw.roa (hash: C4cMB04OWyPRUy1OSkZ4yaaLwpazM0m/JqgEaW9Hrpg=)
2: czQP17PChWN63ADx5h4rjkAmWPM.crl (hash: zrUEpDKdhqWHjn6tugpQkeXkm/qDNIrm1W+36cBVxBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/czQP17PChWN63ADx5h4rjkAmWPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:b2:51:7f:91:de:eb:c4:cd:12:37:26:64:d0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73340fd7b3c285637adc00f1e61e2b8e402658f3
Validity
Not Before: Sep 10 08:01:07 2026 GMT
Not After : Sep 11 08:01:07 2026 GMT
Subject: CN=bb450f03d7ec4d9220d5ea69a84dd031d53eae98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cf:5b:1a:72:5b:3d:57:36:dc:32:91:5d:27:
86:e3:d1:8e:a0:98:c5:cb:2e:d8:1b:5d:ff:1d:1d:
e8:2e:68:dc:45:4b:41:49:4f:74:21:d2:b0:1e:ea:
1a:39:ef:57:d2:8b:c6:99:fe:7e:f9:48:71:74:43:
41:2d:45:eb:f6:96:3c:3e:c4:3b:85:76:9f:14:cf:
28:84:22:67:80:8c:ca:00:e5:f2:e1:18:20:d8:61:
f5:41:cb:17:50:b1:4f:59:84:71:b4:90:04:97:df:
a2:ab:b4:a0:ab:9e:3f:55:99:04:ad:fc:81:7d:d7:
0c:b5:e9:7e:c5:1b:31:50:8a:52:65:01:55:96:e8:
33:4a:50:bf:e3:cc:d0:56:a4:83:6e:26:61:a4:62:
5e:7c:ee:72:35:94:fe:a9:ac:31:08:91:d8:f2:81:
03:17:10:04:d7:b1:39:88:d2:56:8c:08:25:ac:b5:
56:0b:3b:53:ba:ab:07:bf:f2:bb:94:10:ea:0f:29:
f1:53:f0:0f:53:95:84:7b:17:3e:0b:a8:71:25:ca:
80:bd:96:15:03:dc:03:3d:93:a1:45:09:59:82:f9:
b8:f6:02:53:73:43:21:d8:59:e0:c6:c5:34:7f:c8:
db:76:e1:a1:cd:7d:64:4f:fe:43:f3:b0:c2:c6:df:
b5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:45:0F:03:D7:EC:4D:92:20:D5:EA:69:A8:4D:D0:31:D5:3E:AE:98
X509v3 Authority Key Identifier:
keyid:73:34:0F:D7:B3:C2:85:63:7A:DC:00:F1:E6:1E:2B:8E:40:26:58:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czQP17PChWN63ADx5h4rjkAmWPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b1:a3:6e:19:41:fd:1e:60:31:82:01:41:20:a0:62:e0:0f:
b4:fa:b5:f9:ef:fb:55:83:15:53:bd:a7:20:cf:53:dc:dd:8b:
dd:ec:b3:a2:ef:f3:ec:a9:3e:09:8d:fd:4c:3f:37:0a:d1:e1:
45:ca:ff:41:93:56:5b:29:d1:3f:eb:0c:a0:2d:4c:08:70:f8:
45:7a:35:ec:e6:35:7e:f2:eb:ab:1c:81:b6:25:d9:58:75:bc:
14:89:05:54:90:08:51:3f:57:0b:c2:14:43:2c:e3:85:3e:87:
a5:0a:38:d1:9a:7d:99:98:d1:bf:34:23:89:32:8c:b0:e2:cf:
bb:50:59:1f:f2:b6:de:90:03:4d:59:fb:05:7a:57:aa:5f:9e:
5b:87:37:a6:11:5a:a4:79:df:b5:d2:16:ec:ea:b2:70:a7:31:
92:b0:a4:df:07:22:2e:5a:04:ee:86:90:88:34:44:02:94:81:
49:10:f3:25:07:b4:a0:53:5a:1a:f5:ce:c8:84:dd:6e:5f:18:
b8:12:24:fa:50:0f:d6:45:db:46:b1:db:c6:a0:a0:d2:fb:5b:
9d:38:fe:3f:5d:eb:d9:79:4f:74:93:b0:3a:19:e0:ba:48:f7:
2f:b1:28:e0:59:8e:fa:d4:15:53:7c:b3:dc:89:d2:89:4f:fb:
83:65:fa:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:04:36 2026 by rpki-client