Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
File: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft (raw, json)
Hash identifier: FwZ37TO/BxO6J99iJI4OUoBD007QHUo7tdfPaoGkJtA=
Subject key identifier: A6:3D:D7:2E:17:56:99:2F:02:F8:5E:A4:89:A8:5C:BE:6F:CA:DF:85
Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Certificate serial: 019E303B509435BD85BF55E61493CCC06428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 10:00:54 +0000
Manifest this update: Sat 16 May 2026 10:00:54 +0000
Manifest next update: Sun 17 May 2026 10:00:54 +0000
Files and hashes: 1: 7ciFHPcyDl_GiD4yOy7-6YbFSE4.roa (hash: spKjqMXNtC0h5y4SSbTIV4kFe/adq7sNxeFXmSbfQ7o=)
2: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl (hash: sehI3SDtUszNzRPOyioS3SAV5vUg08aHpvycdFNlepM=)
3: QqEtI7mSBnf3k13sxA2thJ-1o4Q.roa (hash: MvaPAINH/RoYeDbeWcuMwbOZ15Dwjgbo2f18w/6CCqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:50:94:35:bd:85:bf:55:e6:14:93:cc:c0:64:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Validity
Not Before: May 16 10:00:54 2026 GMT
Not After : May 17 10:00:54 2026 GMT
Subject: CN=a63dd72e1756992f02f85ea489a85cbe6fcadf85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5d:6a:89:a9:6c:f4:45:4b:90:4f:f7:f6:c9:
cb:54:5c:18:61:af:83:17:e2:66:4c:4d:3b:cd:fb:
6c:f7:6a:7a:6c:19:f4:20:a8:ac:d8:1e:49:85:dc:
66:1f:86:84:d9:b6:19:eb:53:f8:ec:fe:92:53:cf:
15:73:f3:36:ae:52:84:ad:97:19:53:8e:83:df:2f:
e2:0d:ed:f3:d5:36:6a:b6:e4:7b:16:7f:be:70:d2:
f0:65:01:00:db:f2:d6:8e:24:7f:22:c4:e0:fd:13:
50:2e:55:9e:b4:d2:4b:7c:b5:51:e6:91:07:eb:80:
1b:13:82:a5:98:2f:7e:26:ae:f6:e8:d8:0c:29:65:
6c:f9:34:69:e4:e2:9f:ae:6f:f7:0e:c3:09:4d:b5:
6a:11:ea:7e:18:59:06:62:d4:9f:c3:75:9a:67:75:
06:30:06:4b:96:c7:a3:9c:51:64:05:77:49:17:17:
2a:29:c6:40:43:34:b0:8e:bb:0d:2e:8d:d1:c8:d5:
98:bc:6e:42:94:e3:39:24:d6:ba:c7:7a:13:9e:2d:
9e:23:e8:20:cf:35:7f:5f:c0:c0:4d:58:7c:06:9e:
f5:e2:6d:78:b3:d0:1b:1e:c7:32:e4:37:c8:c7:c4:
94:42:08:19:24:e3:58:2c:6b:6a:b7:0e:86:11:a3:
90:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3D:D7:2E:17:56:99:2F:02:F8:5E:A4:89:A8:5C:BE:6F:CA:DF:85
X509v3 Authority Key Identifier:
keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0b:40:d9:ad:77:5b:a2:bc:2f:62:24:49:f4:4e:68:57:df:
37:dc:1b:8f:43:09:d6:b6:79:6b:fe:ae:fa:38:99:46:8c:98:
0b:04:93:23:22:86:70:3c:48:82:ab:bf:8e:3d:90:7f:43:0a:
01:ae:9f:76:34:ae:12:19:e5:29:af:38:e6:29:3c:06:7f:f7:
72:54:ec:04:d0:b5:cf:34:ab:e8:6c:5e:aa:c2:c1:09:a4:69:
1f:dd:b3:a2:43:a9:e1:73:a0:1d:72:2a:c0:b5:ad:6d:50:48:
4c:fc:34:00:da:b0:fd:fd:af:ef:1f:be:b2:a1:7c:9f:95:53:
d4:cf:ce:c5:5c:ad:e7:bd:2c:7a:b8:6e:43:a0:c8:40:aa:ac:
71:88:26:de:62:6a:04:82:3e:c7:2b:65:c5:67:99:29:20:17:
4e:df:e1:ff:bb:06:1a:11:30:70:a0:df:1d:ce:9b:b7:fb:f7:
29:f5:f7:12:5a:90:7a:37:8a:43:84:e9:bf:3e:a6:eb:cb:45:
9b:d1:b8:f9:bd:d5:38:f1:b0:df:0d:82:4b:f8:6d:1b:9c:1c:
01:45:9a:70:aa:74:a6:7b:89:d0:92:50:d7:be:55:20:b0:0a:
b8:2f:8b:44:28:77:2b:a3:94:a5:98:56:a6:48:b5:d8:13:ea:
1d:09:62:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:57 2026 by rpki-client