Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
File: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft (raw, json)
Hash identifier: ROrmQt+G6/DYg8xY1LID28PSO4i2W9RHnkkvdVvm7I4=
Subject key identifier: 01:1C:E2:F0:6C:BF:EB:94:90:15:A6:98:51:A5:34:F5:D4:17:AA:28
Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Certificate serial: 019F17F956B5FC08A180A2CE473B52AA1387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 10:00:44 +0000
Manifest this update: Tue 30 Jun 2026 10:00:44 +0000
Manifest next update: Wed 01 Jul 2026 10:00:44 +0000
Files and hashes: 1: 7ciFHPcyDl_GiD4yOy7-6YbFSE4.roa (hash: spKjqMXNtC0h5y4SSbTIV4kFe/adq7sNxeFXmSbfQ7o=)
2: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl (hash: W5j6U9AEgLeOToTsb2l1vaaYN7E49BQ9WmW2La1qgfQ=)
3: QqEtI7mSBnf3k13sxA2thJ-1o4Q.roa (hash: MvaPAINH/RoYeDbeWcuMwbOZ15Dwjgbo2f18w/6CCqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:56:b5:fc:08:a1:80:a2:ce:47:3b:52:aa:13:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Validity
Not Before: Jun 30 10:00:44 2026 GMT
Not After : Jul 1 10:00:44 2026 GMT
Subject: CN=011ce2f06cbfeb949015a69851a534f5d417aa28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:12:dd:ce:6a:32:6c:17:3a:f0:2d:78:60:
91:df:0d:62:5f:25:9a:c3:e0:00:64:52:1d:fd:d2:
19:6a:e6:85:8e:8c:12:04:d6:fd:a8:df:a2:3f:86:
d4:d3:03:c8:75:37:72:95:36:54:34:55:30:91:94:
63:b9:7f:ab:6a:1c:7f:f6:7f:83:30:a8:2d:fc:14:
3a:bb:71:9a:ac:67:5e:c0:11:d4:73:9f:f2:cc:39:
65:17:8c:9d:6d:6d:19:01:5d:c3:fc:5b:26:d1:d5:
ef:0b:d5:9e:dd:cf:4f:ee:68:26:85:b2:39:cc:fb:
13:85:de:3f:4f:28:c0:60:16:22:bc:25:80:7e:e5:
cd:20:51:76:7d:4a:96:ed:0d:2e:1a:6d:c5:56:f1:
48:63:27:00:67:c6:48:10:80:12:6c:ee:9b:00:a9:
8e:f5:5e:78:f2:74:31:c3:17:6b:76:f5:30:d6:f5:
59:32:c0:ad:a7:52:b5:71:fb:75:61:be:50:a0:3c:
8d:40:2e:6b:f3:c7:98:33:76:8d:20:eb:ce:70:72:
f7:3f:4f:88:4d:33:5f:dd:8b:f9:53:c3:9f:0d:58:
76:ff:d5:51:3e:17:df:9a:1f:e1:3f:b2:5f:74:94:
df:9a:7b:19:48:c0:fc:8c:55:59:06:76:74:bf:7c:
1b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1C:E2:F0:6C:BF:EB:94:90:15:A6:98:51:A5:34:F5:D4:17:AA:28
X509v3 Authority Key Identifier:
keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:89:e6:dd:74:41:db:7b:af:74:c3:ab:5d:f3:f9:e3:8a:4b:
2e:dc:91:d0:19:08:9a:85:64:21:e0:a7:1c:04:42:c3:22:fa:
8f:98:41:41:31:63:2f:dc:83:1b:c9:a2:4c:22:40:c3:f7:a4:
f5:a6:ca:56:c1:da:2b:43:20:b1:8a:9b:0d:24:ea:7b:4d:9a:
59:64:fa:64:cd:53:ee:8a:c3:c7:5f:11:34:49:bf:4b:f7:d7:
9f:bd:52:d6:89:69:62:a9:63:cc:3b:56:22:85:19:02:10:97:
a3:a7:d4:32:7f:ea:92:4f:00:25:40:93:2d:a7:b7:de:a3:9f:
b9:6c:5c:81:8f:6b:e8:69:c4:54:05:9c:75:17:7b:6e:96:c1:
61:59:21:1c:5c:82:07:8b:57:ea:29:96:ab:ae:77:36:0d:59:
3f:f8:a6:6a:4d:a5:be:2c:58:e4:4b:8d:26:d4:49:62:75:3f:
54:c6:24:11:a0:9a:d9:c3:6d:eb:26:6b:a1:ad:a2:58:7e:d4:
74:8c:98:12:ed:c7:50:6c:92:2c:d1:21:d0:ac:74:3e:9a:d2:
df:ed:56:a5:ae:c8:67:c5:69:9c:38:62:58:3b:09:a6:b5:c2:
00:5b:d3:76:17:35:9a:76:11:11:ea:6d:96:5e:5a:71:6f:0f:
c8:b6:f8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:03 2026 by rpki-client