Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
File: CZ05RkE90RFhtGx99q02Kpk41dQ.mft (raw, json)
Hash identifier: K7oOzIDYeKLHPGvbz8YKM/SuQ6/uwMuXDSHWIENvYGw=
Subject key identifier: E7:D5:F7:92:88:69:22:E7:99:E7:F8:F3:79:EB:0B:76:40:B6:6C:63
Authority key identifier: 09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
Certificate issuer: /CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Certificate serial: 01A001DD3B99DB08A812ECFC824029F87488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
Manifest number: 07D3
Signing time: Fri 14 Aug 2026 20:01:10 +0000
Manifest this update: Fri 14 Aug 2026 20:01:10 +0000
Manifest next update: Sat 15 Aug 2026 20:01:10 +0000
Files and hashes: 1: 2YAgI74gbNqNd4cR2a1xK7IpNo0.roa (hash: UfaVQLtUsjyfgahDcdhJ4KwcH3jtGHAp5uCPoj3a35Q=)
2: CZ05RkE90RFhtGx99q02Kpk41dQ.crl (hash: +6jIo9xdLriC9Ev/Gt50i+98xJH1Qhe0hzjL7i7IO6A=)
3: eO4OXeTBNdp3Wk5KjPR2B_e07OI.asa (hash: vSPUOrqLSS1QDlHSmyS6Ip+i1a344wmk09R05jnzxf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:3b:99:db:08:a8:12:ec:fc:82:40:29:f8:74:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Validity
Not Before: Aug 14 20:01:10 2026 GMT
Not After : Aug 15 20:01:10 2026 GMT
Subject: CN=e7d5f792886922e799e7f8f379eb0b7640b66c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:91:43:9a:0d:8c:51:04:36:d2:9e:08:bc:
27:d7:18:5e:5b:61:80:65:a7:a3:1f:95:a1:5b:c2:
9b:90:55:bd:76:02:2f:a6:d1:9c:7d:03:51:0b:48:
9d:20:d8:6c:2e:f6:31:86:d1:c0:d2:6e:05:89:ef:
af:2b:b3:4a:1a:13:b5:71:10:25:2d:c4:e6:10:53:
a0:31:10:35:f1:30:8a:47:63:52:ad:20:1c:b3:2c:
7e:0d:8e:b8:95:43:2a:2c:13:c7:18:73:bf:e7:ef:
6c:f2:07:a6:62:b6:44:08:98:af:38:c4:94:e8:18:
7f:9f:1a:8e:85:9e:f6:6f:e4:19:43:50:2e:1a:80:
c6:8b:97:ff:6f:bc:7d:4f:fc:65:a4:5d:41:f0:83:
7c:e8:a3:ef:5c:96:08:4a:82:b2:9e:b2:47:fb:3f:
01:1a:49:9e:48:b1:f8:ef:66:eb:15:0a:51:52:28:
45:c8:30:28:04:dd:0b:88:89:29:46:98:70:d2:3f:
21:54:32:0b:50:5b:6b:ab:b5:9f:43:55:79:8b:93:
71:71:6e:c0:2c:01:fe:83:de:3b:9f:3c:62:24:96:
f2:0a:de:16:74:45:ec:14:de:9e:49:30:cb:93:ca:
1b:80:7f:af:6d:71:70:83:c6:77:20:98:fb:39:39:
92:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D5:F7:92:88:69:22:E7:99:E7:F8:F3:79:EB:0B:76:40:B6:6C:63
X509v3 Authority Key Identifier:
keyid:09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:93:71:b2:23:76:72:bc:3b:8c:93:db:33:89:5e:53:88:50:
d6:ae:03:79:a1:6e:aa:de:cf:ba:92:39:77:f6:51:69:65:4e:
1b:82:11:dd:88:b4:5d:f0:de:6a:06:98:b8:50:e8:79:9b:2d:
24:69:bc:58:f7:15:e4:72:fb:69:49:5d:68:01:f0:dd:b2:ef:
65:cd:93:e2:2a:1c:6d:e8:6c:eb:79:9a:5d:97:fb:9f:ba:a4:
41:a7:bf:f6:5f:1c:9e:74:59:3f:ff:86:8c:e0:49:11:8a:4d:
d0:40:17:c1:d5:d5:ca:98:5e:c4:6c:ac:00:a5:ad:d2:41:fe:
b7:b3:e4:52:cb:19:ce:8d:69:76:8c:17:98:eb:5c:6a:b7:84:
5e:a0:1c:05:60:c3:c9:a0:41:61:2b:19:bb:1a:fb:d6:d9:f8:
16:8b:a0:e9:50:aa:17:e3:63:3f:87:e4:36:72:cf:89:d5:21:
6c:05:98:5c:56:42:49:fb:da:67:b6:af:74:a2:1d:7b:41:a4:
07:6e:10:4d:41:3e:86:ff:4a:fc:19:7b:e2:d8:1c:a3:79:a9:
ce:fa:f6:9f:34:21:26:6d:bb:f3:ad:ab:c2:1b:75:cd:13:ff:
04:98:9b:35:2b:c0:e4:58:61:1e:6f:3c:05:80:28:68:ab:5e:
ff:50:77:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:23:06 2026 by rpki-client