Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
File: CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft (raw, json)
Hash identifier: x6xSXr85/p8XL26sqhy0Snq+E5PiVIcqcPUXRDeaPZs=
Subject key identifier: A8:5E:55:2C:61:AC:9E:CE:3E:E1:24:DA:90:54:5A:F9:58:C1:F9:3F
Authority key identifier: 08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
Certificate issuer: /CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Certificate serial: 019D3752392B3ECCC3CE1D403B1001BD612B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 02:00:28 +0000
Manifest this update: Sun 29 Mar 2026 02:00:28 +0000
Manifest next update: Mon 30 Mar 2026 02:00:28 +0000
Files and hashes: 1: 9FMdAJpJObGaK-lhU63lLtnTmI8.roa (hash: iIiD99Z2LWAsYTeI+Wi/SqEc7CWMVEjakdaMwbyIs0M=)
2: CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl (hash: mD5OsWS+NhdIeCWAbOH8fF4Cc0tjfFKe2lqu9gpGwEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:39:2b:3e:cc:c3:ce:1d:40:3b:10:01:bd:61:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Validity
Not Before: Mar 29 02:00:28 2026 GMT
Not After : Mar 30 02:00:28 2026 GMT
Subject: CN=a85e552c61ac9ece3ee124da90545af958c1f93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:89:6b:20:37:fc:ea:27:7f:3b:b2:cf:b5:24:
97:f3:65:c3:36:8b:7c:72:92:87:12:1b:80:24:87:
31:ac:94:59:ff:aa:a1:3b:76:ef:6f:b1:ba:f7:b2:
fb:d1:b9:48:ef:6a:11:d9:2b:f1:18:78:55:6b:c2:
73:99:26:78:fa:3c:a0:73:b9:3b:49:83:e0:df:22:
8b:25:2c:ea:6e:0c:ea:a2:c9:fb:08:9e:5b:87:2e:
75:b2:68:c1:d0:73:4e:b3:88:1b:4b:fe:0b:49:06:
f9:87:ce:5d:05:df:5d:3a:41:5e:0b:ce:40:52:b4:
81:e9:74:0a:e7:43:f2:79:00:2c:b6:11:a1:37:68:
d3:12:de:64:ca:d8:d8:51:1b:cf:e7:6e:13:34:1f:
02:4c:8b:af:1a:fd:67:c3:3a:21:e0:1e:78:b9:c0:
20:f8:90:f4:ed:3c:7d:f4:16:43:56:51:db:aa:62:
77:2c:e8:2f:68:b0:b2:3d:d6:6b:b6:bc:c6:e3:3f:
44:48:1e:96:2a:de:4e:f0:0d:c3:44:ca:c5:1e:48:
72:05:b8:72:9f:18:19:35:1d:86:eb:f9:d8:25:50:
1c:d0:78:bd:df:dd:44:50:a2:cc:c4:1e:61:96:91:
aa:89:17:64:07:1b:9b:2f:b7:70:74:78:67:05:a6:
22:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5E:55:2C:61:AC:9E:CE:3E:E1:24:DA:90:54:5A:F9:58:C1:F9:3F
X509v3 Authority Key Identifier:
keyid:08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:18:e3:ea:90:5b:ec:25:5b:96:f6:76:4e:db:bc:7d:7c:57:
7d:7e:04:83:ed:3a:6c:5a:11:0d:f5:ab:c1:2b:8c:80:a5:b3:
94:ed:cf:d1:14:78:18:21:f0:f4:16:f6:8a:27:f1:f6:a1:78:
a8:7e:7d:d0:1a:70:a2:9c:84:af:1b:44:72:72:1c:d0:a0:8d:
f6:40:ad:96:1f:b9:16:ca:db:ee:03:4c:34:60:46:b5:da:29:
3d:bd:6d:f0:44:be:bb:b7:eb:74:74:1e:9d:bd:06:98:c2:3a:
2d:60:88:0d:72:a3:87:af:5b:fd:e9:ae:04:e2:bd:ad:cb:51:
a6:c1:d2:da:c4:71:fb:3c:d3:81:d6:d8:2b:e2:11:2a:5d:92:
36:a5:fc:f4:b0:d6:b0:41:85:00:67:65:3c:55:ee:7e:00:c4:
75:de:e7:4f:cc:19:ac:e5:1c:49:7d:8b:95:5a:31:54:7a:98:
9a:bf:6a:6c:4a:1e:df:33:c6:66:e5:40:5d:ee:24:21:2c:0a:
8e:0a:2c:03:ab:99:e7:a1:53:8f:0b:37:97:9e:b8:08:6a:d4:
1b:31:96:50:8d:16:e1:49:9d:14:4c:d0:be:a2:e5:bd:ed:63:
12:0d:9c:d8:ef:93:74:a7:be:e4:16:1d:26:e3:2e:28:f8:4f:
e8:e2:05:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:38 2026 by rpki-client