Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
File: CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft (raw, json)
Hash identifier: q4nn4ZrHVOmPyEB1UTnFs8A3CuuNIZQiHiR4Zy5Eb4E=
Subject key identifier: 12:F2:7C:4E:97:5B:9E:94:35:8A:AE:A5:41:28:0C:0C:CD:98:26:73
Authority key identifier: 08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
Certificate issuer: /CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Certificate serial: 01A106932DE0BE736CBF71FB1801F67CACDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
Manifest number: 1A1A
Signing time: Sun 04 Oct 2026 11:01:11 +0000
Manifest this update: Sun 04 Oct 2026 11:01:11 +0000
Manifest next update: Mon 05 Oct 2026 11:01:11 +0000
Files and hashes: 1: 9FMdAJpJObGaK-lhU63lLtnTmI8.roa (hash: iIiD99Z2LWAsYTeI+Wi/SqEc7CWMVEjakdaMwbyIs0M=)
2: CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl (hash: f5twMMYaZIRWV3hrlti/gKPK5WDRiHoN+wQrtibxHew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:93:2d:e0:be:73:6c:bf:71:fb:18:01:f6:7c:ac:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Validity
Not Before: Oct 4 11:01:11 2026 GMT
Not After : Oct 5 11:01:11 2026 GMT
Subject: CN=12f27c4e975b9e94358aaea541280c0ccd982673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b3:5d:f6:97:59:e1:13:39:aa:0e:d2:4a:30:
5a:52:d4:2d:30:38:f5:6f:a4:34:d4:06:a1:f4:44:
2a:32:c7:c0:88:59:fd:22:a0:70:f3:15:1c:8f:4c:
1a:64:07:85:66:a6:59:5f:c3:5c:52:6a:34:22:35:
53:be:2d:89:72:b5:5f:19:b5:9d:55:5f:ff:93:e6:
95:14:df:67:dd:ed:3b:0d:86:7f:71:bf:25:a4:98:
0f:61:9b:5a:dc:37:49:b2:d3:1c:b5:2b:62:9c:d8:
f3:dd:f2:5b:95:21:c0:0d:b3:57:5b:39:0d:65:d2:
6a:2c:1b:5c:36:ba:eb:f3:14:fa:44:46:51:8c:80:
f7:00:9f:8d:ca:ce:e8:7c:0b:30:b6:33:56:2b:78:
d3:02:1a:d1:75:92:aa:64:84:a0:e1:d5:9a:bf:27:
50:8e:f8:c9:c9:f7:a9:85:b8:ac:7d:cd:9a:9b:49:
f2:29:00:e5:c6:42:7c:90:e5:95:1e:32:75:eb:e4:
79:1c:75:79:1e:a2:91:21:26:38:9c:21:8e:a9:49:
66:2c:ce:1b:83:f2:76:bd:b6:af:0b:be:64:84:24:
c4:82:74:36:67:3c:9a:16:fc:71:fa:e0:50:54:e9:
9d:18:cd:32:6c:7f:44:59:f6:3a:91:83:4e:d4:d6:
ba:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F2:7C:4E:97:5B:9E:94:35:8A:AE:A5:41:28:0C:0C:CD:98:26:73
X509v3 Authority Key Identifier:
keyid:08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:12:af:e1:63:0f:c9:ac:54:29:46:91:f2:82:d5:45:a5:c7:
2b:fe:d1:b5:05:a6:d4:32:a4:2c:54:21:6a:41:f1:98:99:67:
98:c9:2c:e3:a8:99:b1:1b:fd:d5:8d:b5:35:42:fd:ba:6c:b3:
ec:04:36:3a:df:20:19:77:14:d8:78:f8:ba:9c:c7:40:f7:1d:
d8:83:fe:1a:7a:22:03:ba:0f:21:93:30:0d:4e:81:e5:0b:12:
67:e9:a9:c7:d7:9f:e0:89:41:3c:06:a6:f5:14:bd:cd:b6:25:
75:a8:1c:d3:eb:24:7c:39:6f:1c:42:a3:85:2c:f9:f9:b7:9a:
47:a7:15:ec:59:a3:90:d3:64:e3:f7:b6:66:9e:5c:4d:0b:c0:
a9:99:dc:0d:aa:35:ec:ce:f6:aa:71:f6:b8:b4:1d:a4:89:a5:
8b:74:1a:cf:a6:32:1a:ff:3d:89:3c:fe:e3:3f:61:53:4d:b5:
94:86:ea:4e:ce:f2:7a:a7:9b:39:f9:5d:2d:f8:ec:a9:83:ea:
2f:84:c1:23:2c:71:d9:15:fc:df:04:03:b5:cd:fc:d0:4f:5d:
61:0f:d2:6d:f0:4c:3f:14:79:b5:c6:80:be:8f:3c:ec:22:19:
67:b9:06:0f:3f:7f:e6:11:cd:6f:d3:fc:02:70:a8:93:c4:37:
0b:4f:07:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEGky3gvnNsv3H7GAH2fKzcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZmNmMGVkNWI1Njc3YzExNTVmMmI3ODRjNmQ3M2Q4MDkz
YWYxYWEwHhcNMjYxMDA0MTEwMTExWhcNMjYxMDA1MTEwMTExWjAzMTEwLwYDVQQD
EygxMmYyN2M0ZTk3NWI5ZTk0MzU4YWFlYTU0MTI4MGMwY2NkOTgyNjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbNd9pdZ4RM5qg7SSjBaUtQtMDj1
b6Q01Aah9EQqMsfAiFn9IqBw8xUcj0waZAeFZqZZX8NcUmo0IjVTvi2JcrVfGbWd
VV//k+aVFN9n3e07DYZ/cb8lpJgPYZta3DdJstMctStinNjz3fJblSHADbNXWzkN
ZdJqLBtcNrrr8xT6REZRjID3AJ+Nys7ofAswtjNWK3jTAhrRdZKqZISg4dWavydQ
jvjJyfephbisfc2am0nyKQDlxkJ8kOWVHjJ16+R5HHV5HqKRISY4nCGOqUlmLM4b
g/J2vbavC75khCTEgnQ2ZzyaFvxx+uBQVOmdGM0ybH9EWfY6kYNO1Na6fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLyfE6XW56UNYqupUEoDAzNmCZzMB8GA1UdIwQY
MBaAFAj88O1bVnfBFV8reExtc9gJOvGqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1B6dzdWdFdkOEVWWHl0NFRHMXoyQWs2OGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80OTNiOTgtN2Y1OS00ZjYxLTk5NDUt
MWU4ZGRhZmUzYTE0LzEvQ1B6dzdWdFdkOEVWWHl0NFRHMXoyQWs2OGFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi80OTNiOTgtN2Y1OS00ZjYxLTk5NDUtMWU4ZGRhZmUzYTE0
LzEvQ1B6dzdWdFdkOEVWWHl0NFRHMXoyQWs2OGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBKv4WMP
yaxUKUaR8oLVRaXHK/7RtQWm1DKkLFQhakHxmJlnmMks46iZsRv91Y21NUL9umyz
7AQ2Ot8gGXcU2Hj4upzHQPcd2IP+GnoiA7oPIZMwDU6B5QsSZ+mpx9ef4IlBPAam
9RS9zbYldagc0+skfDlvHEKjhSz5+beaR6cV7FmjkNNk4/e2Zp5cTQvAqZncDao1
7M72qnH2uLQdpImli3Qaz6YyGv89iTz+4z9hU021lIbqTs7yeqebOfldLfjsqYPq
L4TBIyxx2RX83wQDtc380E9dYQ/SbfBMPxR5tcaAvo887CIZZ7kGDz9/5hHNb9P8
AnCok8Q3C08Hrw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 13:42:21 2026 by rpki-client