Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json)
Hash identifier: uPP9nrAiHQeDxihBWzUConsXO1Y6YTJIh1701cuW1Lk=
Subject key identifier: BF:66:8E:B2:56:68:F0:9E:A3:B6:6E:EB:36:50:A7:65:1A:A4:96:9B
Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786
Certificate serial: 019F11F7A86FE24A7934E3356A8835E94616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
Manifest number: 079F
Signing time: Mon 29 Jun 2026 06:01:10 +0000
Manifest this update: Mon 29 Jun 2026 06:01:10 +0000
Manifest next update: Tue 30 Jun 2026 06:01:10 +0000
Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: jrFAadKRm97EloWuZU/xoX4EAlbze2HJ4pr6YhprZjc=)
2: G33itK1qq3WeYfI2JZv_Df-F-kM.roa (hash: M48oQ7e0L/CLHTbH2STVHWlHyf+bv796hviSQB+beow=)
3: lSqq2t5j5uhQNwBWbI6WL7tpfgY.roa (hash: O4mt9ymqocsZDQGjjG1ro7L0no6+r2S8A/5/+O3vsZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f7:a8:6f:e2:4a:79:34:e3:35:6a:88:35:e9:46:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099da06b80fa749068028b597be3e50e8b118786
Validity
Not Before: Jun 29 06:01:10 2026 GMT
Not After : Jun 30 06:01:10 2026 GMT
Subject: CN=bf668eb25668f09ea3b66eeb3650a7651aa4969b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dc:fa:ba:3b:c6:7d:2d:12:58:3e:3c:01:da:
04:52:e2:9e:08:6d:c4:85:80:a4:44:63:0a:28:6f:
6a:96:e6:f7:25:18:92:63:a6:b9:55:cf:fe:c4:ba:
37:50:b2:0f:36:1b:bd:62:36:59:c1:ff:d6:12:d6:
7e:cc:74:38:1a:e9:19:65:9a:5e:6e:8b:9d:d4:ea:
c6:47:91:46:2f:78:d8:a1:02:11:a7:94:3f:7d:be:
60:92:36:91:7c:85:7a:90:28:49:99:e2:f1:46:18:
fa:f3:33:fb:e0:bb:af:c8:21:8b:02:e4:0e:fa:0a:
06:d7:15:71:ea:7e:13:c3:6d:40:30:76:91:69:e3:
41:09:f0:6d:ef:05:6a:18:7f:99:1b:38:d9:38:22:
0c:26:fb:26:26:7e:8b:de:b8:bb:7f:93:50:b3:f2:
3a:cd:77:00:d5:50:f1:70:19:2b:61:38:22:68:15:
b6:96:b5:ae:f0:e7:b5:cd:0f:6c:1c:a1:26:c8:1f:
10:0a:2b:aa:23:2d:fd:f3:18:b4:2c:43:ab:5e:b2:
b4:d8:9d:f9:18:39:40:e4:f7:d5:f8:fe:36:10:87:
3b:91:a6:23:09:54:d1:c4:9a:95:5d:f5:0e:c3:67:
32:03:2c:4d:e5:c1:e8:2d:89:49:0c:3a:71:8f:ae:
fc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:66:8E:B2:56:68:F0:9E:A3:B6:6E:EB:36:50:A7:65:1A:A4:96:9B
X509v3 Authority Key Identifier:
keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ed:29:9d:db:8f:c5:0c:c8:52:1a:42:83:1a:1d:9e:88:7a:
01:5c:3b:c6:98:00:86:3e:9b:54:d8:0b:f9:d4:79:be:44:17:
9e:f3:d7:d3:62:47:70:4d:0a:cd:45:cd:36:e4:23:59:15:53:
59:a3:0d:40:57:8a:01:d2:74:2b:28:e1:01:d1:1c:95:56:83:
97:df:fc:5f:83:45:68:99:05:de:27:ce:e6:de:4d:a7:d8:3a:
03:70:3d:95:18:ac:26:7c:c3:fd:74:45:2d:9e:62:b9:66:3d:
44:97:2d:6a:76:8a:dd:34:3a:c4:0f:b8:15:90:99:dc:c7:a8:
80:ac:68:64:a0:6c:91:ac:b2:23:f0:9d:1c:6d:7e:14:4e:9e:
f0:e2:5d:aa:0a:05:36:4d:4c:89:fc:c3:05:c6:ef:6d:6d:96:
3f:bf:06:87:f8:98:dc:8b:e4:b8:a0:55:00:e2:af:91:7d:02:
47:a4:e2:d1:d1:9c:76:8b:57:de:2f:1e:e1:3a:28:2f:9e:cb:
3d:d8:8b:90:66:70:b4:b3:2e:4e:0d:ce:e1:28:cc:7c:e6:52:
72:56:ff:25:c2:aa:27:9c:13:a5:57:f3:55:ab:9e:ca:0d:07:
77:76:16:ab:ba:ab:55:c5:70:c8:64:13:cc:38:43:00:a1:be:
c0:d3:24:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 14:45:49 2026 by rpki-client