Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json)
Hash identifier: vnLLhAsTNW1CdCWofCpYixzNguB0IT9D1CAaSKpAcmQ=
Subject key identifier: 32:52:79:52:AF:D4:82:AF:37:A7:89:85:3F:74:98:2C:8B:C8:A5:F7
Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786
Certificate serial: 019D38D3857622FF8175BF85C70F11BDF647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
Manifest number: 06AA
Signing time: Sun 29 Mar 2026 09:01:19 +0000
Manifest this update: Sun 29 Mar 2026 09:01:19 +0000
Manifest next update: Mon 30 Mar 2026 09:01:19 +0000
Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: z3qcYSH5eI/bVnTZ5rPE900zqWYJGZXs+7mqSGt1Exs=)
2: G33itK1qq3WeYfI2JZv_Df-F-kM.roa (hash: M48oQ7e0L/CLHTbH2STVHWlHyf+bv796hviSQB+beow=)
3: lSqq2t5j5uhQNwBWbI6WL7tpfgY.roa (hash: O4mt9ymqocsZDQGjjG1ro7L0no6+r2S8A/5/+O3vsZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:85:76:22:ff:81:75:bf:85:c7:0f:11:bd:f6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099da06b80fa749068028b597be3e50e8b118786
Validity
Not Before: Mar 29 09:01:19 2026 GMT
Not After : Mar 30 09:01:19 2026 GMT
Subject: CN=32527952afd482af37a789853f74982c8bc8a5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:d7:0b:f3:4b:03:20:77:26:96:18:00:58:
1c:a7:f1:0c:46:cd:6c:df:fc:58:44:93:13:d3:63:
1d:79:80:74:aa:fe:7b:c8:7b:ef:7c:a8:ec:f5:35:
e8:f2:f5:4e:a1:f7:19:8e:48:46:e3:ad:ab:77:9c:
43:50:b5:9a:1c:fa:26:a2:63:eb:3a:1f:45:91:e8:
07:07:0a:d6:ef:2f:3d:b4:34:8d:c7:e8:6f:00:bd:
d7:94:69:cf:2a:40:a1:a7:8d:07:4f:63:cc:18:a7:
f1:e6:76:bd:c5:e8:34:32:cb:73:aa:0f:90:67:db:
63:d3:d0:cc:05:8a:50:1c:c1:ff:19:0b:dc:5f:3a:
38:55:d7:58:ca:2c:16:30:2d:bd:3a:34:bb:12:37:
1a:95:f0:59:cb:b5:7e:70:50:b5:b5:cb:57:0f:47:
22:4a:cf:de:3b:af:d3:6a:f8:4b:16:80:40:10:04:
a4:a4:23:a5:6e:2a:a4:ce:c6:65:ad:f9:42:85:b2:
74:53:79:3b:c4:32:dc:bc:86:cb:d5:7b:e6:24:05:
e0:d1:f2:42:a2:b0:56:43:42:5d:1d:cb:47:b3:83:
56:69:a6:29:1f:fb:ec:8a:93:bf:5e:9e:2e:0e:cb:
4d:e7:f4:74:1c:5e:a7:f2:22:e2:94:2f:46:24:d1:
ed:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:52:79:52:AF:D4:82:AF:37:A7:89:85:3F:74:98:2C:8B:C8:A5:F7
X509v3 Authority Key Identifier:
keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:cc:3f:ba:bf:d3:6f:40:bf:4c:0b:5d:90:32:0f:58:97:59:
bc:5d:5a:87:1e:42:b6:db:c3:2f:40:03:48:97:b8:6d:ad:3d:
5d:9f:f5:d3:21:c3:7c:db:61:cf:1b:72:81:67:5b:a5:19:76:
ea:5f:29:1d:e5:ac:bc:26:28:b4:2e:f8:2b:7f:d4:4f:2f:36:
db:de:45:44:0c:5f:12:87:e8:1e:34:df:a0:c9:a3:c4:3d:a4:
c3:05:6e:5c:25:08:83:8a:5f:de:98:08:a5:fa:50:60:fc:54:
74:59:86:07:c3:91:5e:78:d6:b5:59:b5:3c:29:9a:f2:17:da:
e2:ea:0b:33:a8:40:05:1f:e5:e2:8c:56:bf:dc:2f:d0:82:49:
d4:f8:12:19:a2:6b:97:6c:45:e1:07:33:0c:b2:3a:77:80:0a:
6c:fe:ba:2b:72:07:98:d1:0c:d5:15:f7:af:27:6f:c0:d1:32:
48:f8:48:84:a6:bc:d0:3e:63:2b:f7:fa:b1:93:20:42:bf:2a:
3a:26:ea:fe:ae:75:ea:97:08:b9:c2:7e:22:cb:f5:70:52:79:
9b:fe:52:aa:45:09:7f:17:99:ec:68:94:c2:42:94:53:ef:4a:
5d:4c:f4:76:3d:e0:5b:1e:d4:ec:20:c2:9f:2f:31:c3:10:40:
79:5b:ad:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:16 2026 by rpki-client