Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
File: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft (raw, json)
Hash identifier: yit7eGC22ql2HCPQdSYKsgEzrj0NeX3xKNHBMagtmOg=
Subject key identifier: 09:D5:6E:C4:7F:9B:CA:16:52:D6:A7:FD:DE:9B:68:FB:86:13:76:94
Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Certificate serial: 01A001A5B072D9B19E7A64A24C5ABE529407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 19:00:30 +0000
Manifest this update: Fri 14 Aug 2026 19:00:30 +0000
Manifest next update: Sat 15 Aug 2026 19:00:30 +0000
Files and hashes: 1: 7ciFHPcyDl_GiD4yOy7-6YbFSE4.roa (hash: spKjqMXNtC0h5y4SSbTIV4kFe/adq7sNxeFXmSbfQ7o=)
2: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl (hash: IuO76VyK0/A816CVsewRWYnM2sxIlCAFGhMgX0feZFM=)
3: QqEtI7mSBnf3k13sxA2thJ-1o4Q.roa (hash: MvaPAINH/RoYeDbeWcuMwbOZ15Dwjgbo2f18w/6CCqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:b0:72:d9:b1:9e:7a:64:a2:4c:5a:be:52:94:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Validity
Not Before: Aug 14 19:00:30 2026 GMT
Not After : Aug 15 19:00:30 2026 GMT
Subject: CN=09d56ec47f9bca1652d6a7fdde9b68fb86137694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a1:04:26:89:a6:e0:b4:a9:b2:0f:84:00:e2:
be:de:3d:63:df:52:7c:0d:07:7c:d7:68:c9:40:eb:
33:af:39:c8:d9:07:20:ee:c0:c8:af:a4:76:3d:ab:
22:a5:83:36:69:c3:9c:78:16:7b:56:37:ae:90:10:
c1:6a:6c:21:e3:0b:c9:b9:d7:2b:64:3a:55:48:7d:
5b:d5:94:91:ac:24:4e:ab:58:9f:2a:b7:ab:ba:5f:
96:6a:f0:3c:b2:6a:4b:bb:2f:7a:00:3f:0a:9f:fd:
5b:08:ca:f1:af:0b:03:dc:75:6d:5b:67:da:88:63:
b7:c7:a8:13:a2:19:9c:d9:72:1b:8d:e2:be:0a:c3:
57:59:53:c4:76:31:c0:48:85:f5:d4:91:65:ea:65:
5b:b0:91:88:c2:46:3e:a5:54:e1:1b:63:a9:de:f1:
65:59:f1:82:a3:90:a4:58:9e:28:24:0b:8e:1c:e4:
04:15:84:0e:3f:15:46:db:fc:d1:66:d6:3a:5a:8b:
bb:e1:d3:3d:2b:8e:c2:cd:9f:6f:51:fc:92:94:0f:
68:55:f3:b1:29:96:5f:5c:50:47:98:ab:68:bf:de:
7f:0f:bb:56:0f:1a:dd:00:da:e3:47:d2:6f:5d:cd:
af:db:53:f2:8f:09:42:f8:8b:33:57:77:56:ed:18:
bb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D5:6E:C4:7F:9B:CA:16:52:D6:A7:FD:DE:9B:68:FB:86:13:76:94
X509v3 Authority Key Identifier:
keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7e:92:ac:79:00:70:03:f8:60:88:2c:cd:3b:ce:cc:08:40:
2d:e3:4b:97:28:08:73:53:fe:bf:0e:ed:a2:6c:3b:7c:dd:97:
8b:58:ef:17:bc:3a:d7:66:20:b0:55:4f:79:eb:9d:5f:95:35:
8c:f1:ea:7b:40:cd:d2:59:3f:e2:02:bc:ff:4d:b7:d0:8c:7a:
f1:81:95:9e:14:80:45:22:39:99:f2:46:4d:ee:2b:19:ad:b0:
58:60:eb:20:d5:08:6d:2d:03:2f:65:f3:71:78:a3:43:6c:22:
4e:b6:e3:cb:f1:a2:b3:5c:96:59:cc:a3:dc:d5:e5:ca:a9:3d:
37:7b:ae:5c:54:ae:a4:a2:e7:8e:f3:dc:b3:3c:0d:3c:c6:b9:
da:db:74:9c:8a:5b:ba:72:05:ff:df:7e:18:c3:79:fa:82:87:
9f:c2:d7:6b:c0:0f:93:7a:f4:3c:b9:b4:2e:8c:15:f1:b0:86:
59:9b:a3:3c:0a:f9:0b:56:33:2e:cb:8f:5e:80:b3:95:b3:e1:
55:15:4b:b8:0d:df:eb:bd:ac:33:84:7b:80:e0:f5:42:34:3f:
47:92:d7:82:c6:c9:38:1a:91:0e:25:1c:00:a5:83:61:24:85:
0a:a0:92:4b:96:95:de:f2:45:86:a0:2e:1d:b3:04:da:24:e9:
63:7b:3a:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpbBy2bGeemSiTFq+UpQHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OWYxMmYzZmE3MzExY2Q5OTNhYjZiYzViYjI5YTFiZjJh
ZDQ4YTEwHhcNMjYwODE0MTkwMDMwWhcNMjYwODE1MTkwMDMwWjAzMTEwLwYDVQQD
EygwOWQ1NmVjNDdmOWJjYTE2NTJkNmE3ZmRkZTliNjhmYjg2MTM3Njk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqEEJomm4LSpsg+EAOK+3j1j31J8
DQd812jJQOszrznI2Qcg7sDIr6R2PasipYM2acOceBZ7VjeukBDBamwh4wvJudcr
ZDpVSH1b1ZSRrCROq1ifKrerul+WavA8smpLuy96AD8Kn/1bCMrxrwsD3HVtW2fa
iGO3x6gTohmc2XIbjeK+CsNXWVPEdjHASIX11JFl6mVbsJGIwkY+pVThG2Op3vFl
WfGCo5CkWJ4oJAuOHOQEFYQOPxVG2/zRZtY6Wou74dM9K47CzZ9vUfySlA9oVfOx
KZZfXFBHmKtov95/D7tWDxrdANrjR9JvXc2v21PyjwlC+IszV3dW7Ri7dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnVbsR/m8oWUtan/d6baPuGE3aUMB8GA1UdIwQY
MBaAFAmfEvP6cxHNmTq2vFuymhvyrUihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mNTllZTEtNmFmZS00ZTM4LWI5OTUt
NDE5YjU3MjNlZWY5LzEvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mNTllZTEtNmFmZS00ZTM4LWI5OTUtNDE5YjU3MjNlZWY5
LzEvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABX6SrHkA
cAP4YIgszTvOzAhALeNLlygIc1P+vw7tomw7fN2Xi1jvF7w612YgsFVPeeudX5U1
jPHqe0DN0lk/4gK8/0230Ix68YGVnhSARSI5mfJGTe4rGa2wWGDrINUIbS0DL2Xz
cXijQ2wiTrbjy/Gis1yWWcyj3NXlyqk9N3uuXFSupKLnjvPcszwNPMa52tt0nIpb
unIF/99+GMN5+oKHn8LXa8APk3r0PLm0LowV8bCGWZujPAr5C1YzLsuPXoCzlbPh
VRVLuA3f672sM4R7gOD1QjQ/R5LXgsbJOBqRDiUcAKWDYSSFCqCSS5aV3vJFhqAu
HbME2iTpY3s65g==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:16 2026 by rpki-client