Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json)
Hash identifier: nI39lC9Kf6jYxBInT1degcH0G6yslADXHXqFVIq+y44=
Subject key identifier: 2E:58:E8:0E:FB:A0:8D:8C:56:35:14:BB:43:7F:A6:65:23:51:7F:BA
Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786
Certificate serial: 01A0016FE4E3E38682C598CA7FD95E07090E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
Manifest number: 081B
Signing time: Fri 14 Aug 2026 18:01:45 +0000
Manifest this update: Fri 14 Aug 2026 18:01:45 +0000
Manifest next update: Sat 15 Aug 2026 18:01:45 +0000
Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: Su7bcLE2yKKOwohmMhKFeVvhZSEoZ1VLD+8nbn9DwJ4=)
2: G33itK1qq3WeYfI2JZv_Df-F-kM.roa (hash: M48oQ7e0L/CLHTbH2STVHWlHyf+bv796hviSQB+beow=)
3: lSqq2t5j5uhQNwBWbI6WL7tpfgY.roa (hash: O4mt9ymqocsZDQGjjG1ro7L0no6+r2S8A/5/+O3vsZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:e4:e3:e3:86:82:c5:98:ca:7f:d9:5e:07:09:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099da06b80fa749068028b597be3e50e8b118786
Validity
Not Before: Aug 14 18:01:45 2026 GMT
Not After : Aug 15 18:01:45 2026 GMT
Subject: CN=2e58e80efba08d8c563514bb437fa66523517fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e9:ca:3e:28:b8:50:17:aa:1a:a0:aa:be:ca:
af:20:8f:75:c8:23:47:42:8f:a1:42:2e:00:66:78:
19:e7:96:83:9a:9d:be:09:46:38:b3:14:41:69:af:
b9:80:fb:41:fd:1f:41:ab:c6:a9:5d:e7:5a:3d:4b:
37:75:18:2d:b7:39:07:9a:e6:a9:78:8b:4d:3c:46:
e7:38:62:27:64:81:6f:5e:6d:3b:e1:12:ba:04:31:
ca:1f:d6:93:3e:9d:82:cc:33:ba:af:83:6d:93:c1:
d4:a5:65:00:8d:04:de:7d:07:c7:4a:48:1e:57:47:
f9:0a:1f:1f:0e:d2:37:c4:65:66:ed:c3:12:fe:df:
1a:bb:0e:d3:68:92:7b:a6:f1:2c:96:52:19:e4:81:
c3:73:ae:37:93:b5:ff:36:db:d8:48:6b:22:a7:64:
d7:9f:39:95:3e:d2:74:ae:40:ea:3e:7f:bc:b9:3e:
8e:43:de:0c:dd:77:fb:93:8a:52:31:4c:1d:50:01:
c5:0f:2f:ab:f4:e9:64:06:f9:e6:0e:93:31:17:cc:
58:41:69:ce:8b:d6:b7:cb:ec:58:aa:7e:8d:a9:5e:
6b:a1:e7:55:5a:56:84:32:75:14:11:d8:a6:41:38:
22:1a:7e:9c:36:d2:2f:80:dc:54:a3:67:0e:bb:50:
fb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:58:E8:0E:FB:A0:8D:8C:56:35:14:BB:43:7F:A6:65:23:51:7F:BA
X509v3 Authority Key Identifier:
keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:12:2e:f8:f3:04:4f:30:a6:d0:70:f1:70:b7:ef:24:e3:58:
8f:e5:4a:9c:ec:3d:24:de:e9:e2:c0:71:9b:19:fa:3c:90:ca:
2c:9f:18:49:10:eb:b9:12:71:47:96:f1:7d:ed:6b:e9:50:09:
1b:90:78:a1:7c:82:85:01:ee:96:ea:51:b2:37:71:e0:bf:8b:
24:8b:16:fb:fc:86:64:9f:bb:62:9a:a8:ca:b5:78:72:6e:93:
5d:80:ab:a7:bf:12:5d:8d:cd:f5:17:2b:92:b1:d1:5b:8d:5d:
09:55:19:b8:75:a2:17:2c:93:c8:f2:a5:52:72:1f:b8:39:81:
24:dd:35:e7:45:9a:f9:96:ae:c5:05:19:32:10:66:fb:1d:b7:
84:2c:4a:df:86:9b:16:7a:48:6d:57:fb:d9:73:88:55:0d:6d:
18:33:be:94:4e:05:8a:d9:fa:38:4e:54:6c:00:f1:bf:40:1e:
18:77:01:60:7e:b1:bd:02:ff:37:c6:22:4b:01:89:16:66:b0:
0e:e1:8d:88:1c:97:1f:73:66:2c:86:ca:6a:d2:48:36:3c:57:
36:08:ec:d2:74:26:4a:ca:01:45:82:b2:37:42:6f:75:cd:47:
42:3f:fe:fd:74:fa:b5:86:ba:74:e3:a8:03:73:af:b4:53:34:
28:b6:5c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:20:54 2026 by rpki-client