Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json)
Hash identifier: 5FIF3fpkuX3WtLj9f9744HPnJAUcIsyL/ZJb57Ddri8=
Subject key identifier: FF:F9:D2:6C:02:CD:97:D5:C5:B6:F3:E7:1D:E8:26:33:14:8E:30:3E
Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786
Certificate serial: 019E2A399C24CE87194301B8A582CCB517E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
Manifest number: 0727
Signing time: Fri 15 May 2026 06:01:18 +0000
Manifest this update: Fri 15 May 2026 06:01:18 +0000
Manifest next update: Sat 16 May 2026 06:01:18 +0000
Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: CEqKFzVPBKtfE6LtP5GU32qWg3fvo6uVrp2NuDQbIy4=)
2: G33itK1qq3WeYfI2JZv_Df-F-kM.roa (hash: M48oQ7e0L/CLHTbH2STVHWlHyf+bv796hviSQB+beow=)
3: lSqq2t5j5uhQNwBWbI6WL7tpfgY.roa (hash: O4mt9ymqocsZDQGjjG1ro7L0no6+r2S8A/5/+O3vsZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:39:9c:24:ce:87:19:43:01:b8:a5:82:cc:b5:17:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099da06b80fa749068028b597be3e50e8b118786
Validity
Not Before: May 15 06:01:18 2026 GMT
Not After : May 16 06:01:18 2026 GMT
Subject: CN=fff9d26c02cd97d5c5b6f3e71de82633148e303e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f5:68:5b:21:63:6f:02:b3:9a:a4:d5:e9:bd:
04:64:3a:af:77:ec:d2:ba:b4:b1:1f:91:f1:31:ce:
c7:97:1f:f1:e8:77:0f:1f:b6:ae:35:09:04:b3:4c:
c1:40:d0:65:a5:a7:a1:e5:eb:ab:d9:f5:96:83:bb:
71:60:93:b4:d1:53:c9:2d:e4:c5:c5:62:c8:c8:1f:
e0:4f:be:f6:1c:d6:27:fc:85:c6:94:d6:fe:dd:63:
08:48:bb:bd:47:2c:b7:65:e9:82:08:7b:f6:84:7f:
0b:b4:58:52:39:58:c0:ca:8b:3d:e5:ef:2e:ee:77:
36:36:ad:0b:42:10:63:11:43:96:73:11:2c:60:d0:
0b:44:a0:95:8a:60:ec:39:3d:a2:26:32:a3:61:3e:
1a:fc:e4:bb:06:3e:f8:e6:3f:f6:7d:22:b0:f8:75:
e8:0a:e7:09:90:31:55:e0:74:0c:c4:e9:6e:2f:a0:
5d:b4:2b:7d:40:c8:09:67:06:1f:10:b9:72:56:4d:
6b:37:a4:f1:b1:32:ee:f2:d1:14:d4:21:72:34:23:
73:62:29:b9:83:d1:39:c5:ff:19:e8:33:8f:5b:30:
2a:dc:99:d7:27:82:e8:67:d7:81:50:1f:0b:e7:6f:
75:ac:b2:68:96:b6:16:78:d1:31:ea:01:76:a7:f4:
b8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F9:D2:6C:02:CD:97:D5:C5:B6:F3:E7:1D:E8:26:33:14:8E:30:3E
X509v3 Authority Key Identifier:
keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:90:63:cc:c2:25:e8:3e:f8:c2:8c:2e:9f:98:68:db:8b:8d:
6d:dc:74:f6:78:3f:2c:a6:c7:1f:86:59:e0:93:82:63:73:6d:
99:14:f3:bc:d4:e4:e7:28:2d:08:18:40:66:38:73:cb:d7:7e:
f1:e6:99:3a:e5:de:92:81:e5:c5:38:63:8b:41:24:ab:52:b1:
42:75:0f:6a:5c:4c:64:d8:05:0b:d0:c2:b7:f7:33:8f:32:0f:
e9:a7:f4:fa:eb:a2:a1:8c:fc:43:8e:f3:06:08:a7:e1:62:29:
f3:a7:08:47:b2:3c:f2:69:63:7f:69:58:57:85:e0:e3:df:28:
cf:20:5b:38:f0:03:0d:55:59:cd:24:46:b0:aa:f7:db:4b:4b:
50:97:53:87:d4:c4:f0:37:e3:c0:54:90:ef:fc:df:3c:47:3a:
53:84:0c:07:45:cd:6a:37:17:ac:9d:a2:40:6c:1c:e3:a0:fe:
62:2e:23:4c:5d:0a:22:2d:56:65:ad:0f:20:43:c6:6f:b2:a7:
e0:cb:40:a2:db:4e:c1:d7:b6:e3:aa:c6:1c:dd:4d:93:59:19:
2e:97:39:4d:99:6b:2b:84:38:81:2c:49:be:37:79:5d:72:f8:
13:23:e1:ed:63:a2:08:fb:c0:78:60:65:91:e7:70:2e:f7:50:
02:32:83:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:51:28 2026 by rpki-client