Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/CZ08jLo8YyFjzMLohMZ8krOSlEQ.mft
File: CZ08jLo8YyFjzMLohMZ8krOSlEQ.mft (raw, json)
Hash identifier: 5JvJ712+nvNSwbPp/kXlJuq2XmwDl9sj13CaxAyb69o=
Subject key identifier: 79:70:C9:C9:2A:A2:01:E3:76:49:AA:18:83:F1:F5:83:54:52:10:ED
Authority key identifier: 09:9D:3C:8C:BA:3C:63:21:63:CC:C2:E8:84:C6:7C:92:B3:92:94:44
Certificate issuer: /CN=099d3c8cba3c632163ccc2e884c67c92b3929444
Certificate serial: 01A0404E43514C62E316D9E9CBB346D0CFD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ08jLo8YyFjzMLohMZ8krOSlEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/CZ08jLo8YyFjzMLohMZ8krOSlEQ.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 23:01:05 +0000
Manifest this update: Wed 26 Aug 2026 23:01:05 +0000
Manifest next update: Thu 27 Aug 2026 23:01:05 +0000
Files and hashes: 1: CZ08jLo8YyFjzMLohMZ8krOSlEQ.crl (hash: XlUelsnonktUvnxWqqhtVrFscUDs7Ludf0mGfj0KBNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/CZ08jLo8YyFjzMLohMZ8krOSlEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/CZ08jLo8YyFjzMLohMZ8krOSlEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ08jLo8YyFjzMLohMZ8krOSlEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:43:51:4c:62:e3:16:d9:e9:cb:b3:46:d0:cf:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099d3c8cba3c632163ccc2e884c67c92b3929444
Validity
Not Before: Aug 26 23:01:05 2026 GMT
Not After : Aug 27 23:01:05 2026 GMT
Subject: CN=7970c9c92aa201e37649aa1883f1f583545210ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7b:95:de:7e:6f:1e:65:15:d7:97:fc:0f:8c:
7c:76:fa:99:25:b4:05:58:46:4e:5f:b2:61:a1:2a:
7e:d0:cf:a4:77:dc:26:a3:08:c1:13:38:12:75:30:
ec:50:be:40:f3:c2:e7:c1:83:29:8a:23:ae:5f:52:
c4:2b:6c:3c:6d:e7:ab:8e:7e:ef:7d:67:4e:0d:b9:
86:9d:3b:d7:50:28:ed:16:15:e3:81:5d:6b:e7:6c:
45:ef:c1:ef:f9:df:d2:b7:62:5c:02:36:c9:f0:c7:
ae:56:d3:6a:ab:36:d6:b3:96:11:4a:99:40:f9:9d:
d7:6b:07:30:e6:a9:87:50:1d:59:8e:ad:4b:73:16:
07:d7:bd:5d:74:1f:93:6a:ce:dc:16:c8:a7:eb:9e:
87:01:71:3f:00:e5:52:93:f0:cd:ee:5b:26:2e:c2:
60:fe:d5:e5:26:9b:fb:1c:fb:51:83:7d:08:8f:7b:
74:f6:c7:ac:c5:60:a2:2d:b1:30:58:0c:13:14:fc:
e9:84:05:0c:48:83:50:20:c1:e6:81:18:31:e2:24:
ad:aa:26:c9:54:72:19:18:99:c2:4f:a5:fb:b4:1e:
4c:09:82:d2:b5:97:39:c7:20:2d:cc:cb:b4:54:37:
a0:9a:e6:09:97:e5:19:ca:e6:2d:9d:ec:e6:18:74:
6d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:70:C9:C9:2A:A2:01:E3:76:49:AA:18:83:F1:F5:83:54:52:10:ED
X509v3 Authority Key Identifier:
keyid:09:9D:3C:8C:BA:3C:63:21:63:CC:C2:E8:84:C6:7C:92:B3:92:94:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ08jLo8YyFjzMLohMZ8krOSlEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/CZ08jLo8YyFjzMLohMZ8krOSlEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/CZ08jLo8YyFjzMLohMZ8krOSlEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:97:5b:9f:3f:88:19:1d:cd:7e:5d:31:3e:85:c8:c6:80:6b:
eb:f1:8a:aa:bc:72:5a:73:13:03:65:87:24:c9:44:ec:57:d8:
d8:b8:28:3c:c5:58:fe:bf:28:53:5e:16:97:06:a5:b2:f8:01:
09:1a:9c:60:1d:5b:80:ed:8f:5b:10:6b:71:00:91:df:b8:2f:
28:81:d2:8c:b4:ad:35:a8:e1:95:30:a6:40:ac:a8:5b:b2:bd:
30:92:b4:e8:cb:f4:c1:d7:8f:ee:45:4c:e6:17:a2:aa:b6:bd:
6c:e1:fb:69:cf:91:5c:99:30:4b:3a:da:b3:61:2f:9b:ae:e2:
ab:41:3f:3d:71:1e:1e:22:b1:c0:71:c2:de:54:41:61:3a:cd:
10:34:ff:b6:e7:33:17:33:af:32:9f:bc:48:0d:dd:de:65:ec:
47:fe:13:d2:fa:6e:e0:d6:5c:11:48:84:63:e0:37:75:9e:05:
67:5b:a4:17:49:32:00:6d:4a:25:cb:be:95:d5:ac:ca:3a:11:
82:25:78:63:ab:02:b6:3c:99:5b:35:2e:2b:8d:52:5c:7d:9f:
48:0b:bc:27:53:35:93:a6:62:97:b5:74:5f:45:79:4a:f3:c7:
9c:5a:5b:45:4c:db:a8:be:02:17:82:a9:63:85:16:e8:d6:4b:
76:ce:5c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:23:12 2026 by rpki-client