Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
File: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft (raw, json)
Hash identifier: 3GntzSeKifA+nCECCTf9Q5fTGg3YZAK3x3WdZHEKXzg=
Subject key identifier: 52:5E:8A:7D:94:B3:6B:7F:EB:B7:E3:93:99:E2:92:22:1D:32:CE:E0
Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Certificate serial: 01A14804D1E61CDB3C0C86419491623FC029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
Manifest number: 1AAB
Signing time: Sat 17 Oct 2026 04:00:37 +0000
Manifest this update: Sat 17 Oct 2026 04:00:37 +0000
Manifest next update: Sun 18 Oct 2026 04:00:37 +0000
Files and hashes: 1: 7ciFHPcyDl_GiD4yOy7-6YbFSE4.roa (hash: spKjqMXNtC0h5y4SSbTIV4kFe/adq7sNxeFXmSbfQ7o=)
2: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl (hash: G4MFnG6SanvZeYv6XVCJBqdBctaq1nN16949fLJWRfc=)
3: QqEtI7mSBnf3k13sxA2thJ-1o4Q.roa (hash: MvaPAINH/RoYeDbeWcuMwbOZ15Dwjgbo2f18w/6CCqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:04:d1:e6:1c:db:3c:0c:86:41:94:91:62:3f:c0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Validity
Not Before: Oct 17 04:00:37 2026 GMT
Not After : Oct 18 04:00:37 2026 GMT
Subject: CN=525e8a7d94b36b7febb7e39399e292221d32cee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:26:22:ac:f8:c0:a3:e3:69:89:e8:72:7f:5b:
8e:b0:e6:60:75:7c:79:75:90:eb:a3:ec:ec:f8:ce:
c9:11:5b:08:e4:7a:22:c4:e9:be:4b:d1:d2:12:6c:
5a:37:7c:88:57:14:6d:91:79:eb:96:bf:92:40:0c:
57:9b:8f:14:9d:90:f4:f8:3f:99:70:3c:b5:84:07:
86:7c:81:28:f9:a7:27:a8:fa:9a:9c:be:c2:5d:3c:
b8:7f:0a:a7:56:16:d4:bb:4f:2b:e4:db:61:ba:a5:
2e:03:97:4f:3a:80:78:dc:1a:b4:08:59:52:bd:cf:
78:10:f6:58:03:3b:36:a5:77:95:d4:28:df:e1:e5:
32:d3:99:04:18:89:bb:86:7e:4b:97:2e:4f:b6:78:
bd:fe:9d:c1:7f:e9:59:5b:2d:fd:25:08:eb:e6:fe:
87:c0:85:61:82:56:20:3f:36:b2:95:11:0b:ea:d3:
39:b3:97:1b:b8:e7:b2:de:43:f4:62:aa:8d:bf:5b:
bd:7c:4b:78:9f:ad:bd:fd:91:2f:68:6e:dc:b6:bc:
ae:65:c2:8d:47:07:8c:7b:99:49:10:dc:a5:0e:84:
9c:74:f7:0a:6b:72:fb:60:68:a8:6d:0f:0b:41:08:
f3:6f:2b:ac:e4:8c:93:89:dd:e9:bf:9c:98:d2:69:
57:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5E:8A:7D:94:B3:6B:7F:EB:B7:E3:93:99:E2:92:22:1D:32:CE:E0
X509v3 Authority Key Identifier:
keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:3d:36:65:7f:4b:3d:ad:ab:3b:dc:d6:dd:93:96:06:d9:9d:
4c:05:58:f4:c3:97:55:c7:d8:a4:b6:51:12:ce:a3:e7:72:d3:
3b:51:b0:b5:77:73:94:93:89:e1:45:f8:33:76:06:f4:40:a9:
e4:41:87:7b:17:db:70:90:07:7e:cc:19:90:bb:25:7f:c4:ee:
9d:6c:d8:56:05:88:fb:10:22:cb:13:07:6b:02:42:93:70:b7:
23:55:cd:fb:d6:63:d9:e8:16:45:26:11:ab:90:c7:2b:af:27:
98:74:75:df:f4:74:51:64:a6:ca:cc:b1:41:a4:d2:9f:19:bd:
f9:98:d6:46:f6:1d:b0:cf:bb:08:c2:fa:44:ff:84:56:6c:5c:
22:f3:0f:ad:d9:47:ba:19:18:3b:06:b8:94:86:9d:ad:82:ec:
27:7d:52:8d:48:de:f3:01:81:80:7c:f7:05:c9:fa:62:84:39:
a1:ed:ae:30:2e:08:08:75:42:73:f5:87:8b:b4:74:d2:8f:34:
ee:78:4c:6b:bb:f4:b1:80:c3:85:30:c8:4a:8c:39:22:31:72:
dc:c1:3f:e4:43:39:fb:b1:f2:4a:d8:bd:97:ee:a3:68:08:37:
ed:95:11:68:cc:3c:61:76:55:7b:a9:34:5e:5c:ee:c0:b4:e5:
27:78:f1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:25:51 2026 by rpki-client