Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
File: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft (raw, json)
Hash identifier: XCM21b/t8orVBoHq/S1kTw9Ockf1JKtkfHX22TLRanw=
Subject key identifier: 69:87:BC:5D:CA:5F:E4:AA:68:16:B5:1D:F4:8E:27:F0:26:22:EF:12
Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Certificate serial: 019D390A0C523B21091567CD0B5F93CFDA4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 10:00:52 +0000
Manifest this update: Sun 29 Mar 2026 10:00:52 +0000
Manifest next update: Mon 30 Mar 2026 10:00:52 +0000
Files and hashes: 1: 7ciFHPcyDl_GiD4yOy7-6YbFSE4.roa (hash: spKjqMXNtC0h5y4SSbTIV4kFe/adq7sNxeFXmSbfQ7o=)
2: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl (hash: JyAafpfPk0lAFltIOlpD6k4wFimlzP0oAC0PF/W8PWg=)
3: QqEtI7mSBnf3k13sxA2thJ-1o4Q.roa (hash: MvaPAINH/RoYeDbeWcuMwbOZ15Dwjgbo2f18w/6CCqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:0c:52:3b:21:09:15:67:cd:0b:5f:93:cf:da:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Validity
Not Before: Mar 29 10:00:52 2026 GMT
Not After : Mar 30 10:00:52 2026 GMT
Subject: CN=6987bc5dca5fe4aa6816b51df48e27f02622ef12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fd:e7:90:7c:de:6d:98:9f:bc:a3:08:25:d5:
dd:35:34:51:c9:9c:d5:75:a5:ad:ff:25:91:59:3f:
14:7d:04:44:9a:82:d3:50:c2:da:21:63:a3:2b:90:
b1:87:8e:83:af:ca:25:dc:9b:1d:3e:a0:30:e1:f5:
c9:bd:04:0a:6b:dc:65:91:58:eb:d8:d5:77:c8:59:
f0:30:af:c8:94:51:6d:e5:8b:ed:c1:67:5f:14:b0:
71:83:82:45:7e:4d:58:4b:79:4c:8a:73:8d:c3:7d:
78:87:4e:b3:ba:56:00:9c:d5:21:25:1d:e6:e8:86:
73:08:4e:66:c4:3b:3a:ad:71:86:95:16:52:10:26:
18:16:76:12:4e:d6:f7:be:53:9f:70:55:2a:fe:42:
d5:9b:b4:95:9c:d0:04:ce:f1:f9:06:c5:08:a6:da:
19:9a:e2:90:4d:82:9f:e3:7d:83:3f:2a:75:1b:f9:
ea:99:70:77:2f:38:bf:8e:1d:10:b6:6c:d1:31:57:
02:a5:4d:1b:91:f4:82:d0:f9:cf:88:20:e2:e8:b4:
d9:6d:5f:64:dc:99:b6:81:23:9a:24:21:31:c3:0f:
cc:e4:38:bc:30:4e:cc:1f:73:52:a4:76:c9:95:b7:
83:cd:e7:12:9f:b5:fb:15:46:24:82:de:cd:ac:99:
00:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:87:BC:5D:CA:5F:E4:AA:68:16:B5:1D:F4:8E:27:F0:26:22:EF:12
X509v3 Authority Key Identifier:
keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:0c:5b:09:87:e8:56:6a:a7:42:dd:4f:d7:52:f3:2a:54:72:
06:d9:9a:fd:3f:70:14:74:b8:6a:7e:21:b0:38:5e:a8:65:43:
f9:59:85:46:df:46:17:71:87:5e:0f:98:c2:69:43:f7:54:90:
2a:a5:0e:f2:98:dd:b2:08:39:0c:13:bf:ce:b4:d1:fc:3a:ca:
54:66:5a:95:6a:42:59:4d:a4:9e:d6:a6:55:82:ec:ab:73:7c:
61:c9:9b:04:3f:dd:c8:ff:13:71:aa:9a:2b:f2:b3:01:86:e7:
e8:e7:ce:97:2c:fc:c1:f3:4a:c2:e9:f2:54:4b:1a:21:22:b1:
2c:1e:4f:f4:54:e5:59:3a:73:f3:5a:e7:a3:32:11:1b:d0:3e:
c5:f6:74:0e:7f:db:55:55:e3:42:28:73:f4:f9:c7:aa:4f:5a:
39:81:f4:16:ed:4c:7a:1f:57:41:12:01:dd:64:10:35:4e:0a:
fd:ac:cf:67:0e:cd:56:22:15:75:4b:d9:08:c0:8c:20:db:18:
72:39:e1:4f:d3:5f:44:9b:15:e6:de:23:b1:e1:41:15:10:d9:
ed:2c:b9:c2:91:6f:f4:12:c7:a2:96:f9:8d:67:68:bf:3d:8c:
fa:f8:2b:81:ca:a7:fa:47:e0:e8:37:d3:28:87:82:73:6f:54:
d1:bf:ba:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CgxSOyEJFWfNC1+Tz9pLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OWYxMmYzZmE3MzExY2Q5OTNhYjZiYzViYjI5YTFiZjJh
ZDQ4YTEwHhcNMjYwMzI5MTAwMDUyWhcNMjYwMzMwMTAwMDUyWjAzMTEwLwYDVQQD
Eyg2OTg3YmM1ZGNhNWZlNGFhNjgxNmI1MWRmNDhlMjdmMDI2MjJlZjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf3nkHzebZifvKMIJdXdNTRRyZzV
daWt/yWRWT8UfQREmoLTUMLaIWOjK5Cxh46Dr8ol3JsdPqAw4fXJvQQKa9xlkVjr
2NV3yFnwMK/IlFFt5YvtwWdfFLBxg4JFfk1YS3lMinONw314h06zulYAnNUhJR3m
6IZzCE5mxDs6rXGGlRZSECYYFnYSTtb3vlOfcFUq/kLVm7SVnNAEzvH5BsUIptoZ
muKQTYKf432DPyp1G/nqmXB3Lzi/jh0QtmzRMVcCpU0bkfSC0PnPiCDi6LTZbV9k
3Jm2gSOaJCExww/M5Di8ME7MH3NSpHbJlbeDzecSn7X7FUYkgt7NrJkA0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmHvF3KX+SqaBa1HfSOJ/AmIu8SMB8GA1UdIwQY
MBaAFAmfEvP6cxHNmTq2vFuymhvyrUihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mNTllZTEtNmFmZS00ZTM4LWI5OTUt
NDE5YjU3MjNlZWY5LzEvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mNTllZTEtNmFmZS00ZTM4LWI5OTUtNDE5YjU3MjNlZWY5
LzEvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIwxbCYfo
VmqnQt1P11LzKlRyBtma/T9wFHS4an4hsDheqGVD+VmFRt9GF3GHXg+YwmlD91SQ
KqUO8pjdsgg5DBO/zrTR/DrKVGZalWpCWU2kntamVYLsq3N8YcmbBD/dyP8Tcaqa
K/KzAYbn6OfOlyz8wfNKwunyVEsaISKxLB5P9FTlWTpz81rnozIRG9A+xfZ0Dn/b
VVXjQihz9PnHqk9aOYH0Fu1Meh9XQRIB3WQQNU4K/azPZw7NViIVdUvZCMCMINsY
cjnhT9NfRJsV5t4jseFBFRDZ7Sy5wpFv9BLHopb5jWdovz2M+vgrgcqn+kfg6DfT
KIeCc29U0b+6LA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:39 2026 by rpki-client