Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
File: CZofLb97eoSuV7jWdCa35OQg-rU.mft (raw, json)
Hash identifier: je8DTOoDgp4f4eWElo/nNCkF+WL1Lf+KODPdYtm+LMU=
Subject key identifier: DE:98:D2:BE:D2:7F:93:ED:4B:9C:D1:EB:3B:9E:71:71:D7:A5:DB:BB
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 019CB65D1A444FADE1192D080B5F59F776E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
Manifest number: 0A77
Signing time: Wed 04 Mar 2026 01:01:20 +0000
Manifest this update: Wed 04 Mar 2026 01:01:20 +0000
Manifest next update: Thu 05 Mar 2026 01:01:20 +0000
Files and hashes: 1: BJowdLldqJHM3ir588qx25T2i1o.roa (hash: nGJPoQmYXI/63Ysvy1k3U4F/yfSsIELkLPYGxlPw234=)
2: CZofLb97eoSuV7jWdCa35OQg-rU.crl (hash: kINdE0gInkbvZj9RiDbP1PnUVcE/WNzYIZPkojwn/8o=)
3: Fi9A7ox4EzBVsjYUvBuYzjfrMx4.roa (hash: yPzWCEaVWwitvSN0VQpWfi2iaiWGTDPLLRlVVcJ92AY=)
4: lcFMLBJ4Qsm2pQ6VUD3RYi3MSqw.roa (hash: jCb7ZL+Zyxb7PMRFxkMl8BDTxyWFfiSmgO42R7iSszA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 22:42:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b6:5d:1a:44:4f:ad:e1:19:2d:08:0b:5f:59:f7:76:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Mar 4 01:01:20 2026 GMT
Not After : Mar 5 01:01:20 2026 GMT
Subject: CN=de98d2bed27f93ed4b9cd1eb3b9e7171d7a5dbbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0d:80:f5:65:65:1b:48:2a:8f:0b:5c:af:04:
c2:72:76:d1:f1:f7:64:99:83:e3:14:4b:dd:92:9d:
2b:43:93:62:0b:b1:02:12:e9:2b:d9:93:d1:0e:cc:
37:ac:f0:a2:30:5c:e3:ee:fa:77:d7:66:85:1f:dd:
78:0f:18:3e:8f:a6:4f:49:60:8c:80:d3:49:c2:c7:
10:e8:71:b4:e6:e0:25:b3:25:fa:9e:e7:43:05:80:
4d:fd:70:2c:30:2e:0a:8e:2d:97:df:78:e9:27:6d:
1a:ff:08:76:d9:1c:f8:b7:de:f2:c7:1d:27:7d:8e:
7d:18:19:86:a6:5d:6a:a8:f5:58:b8:9f:60:8f:57:
6c:fe:a4:1b:79:79:46:d5:6a:57:4d:7d:73:91:b1:
6d:3a:e8:67:6e:14:79:95:bb:e5:77:f1:8e:fe:36:
5f:4f:68:b5:47:fe:b2:aa:43:72:11:28:24:81:6a:
b8:3a:ea:9e:cf:1c:df:f9:4d:fc:81:f7:54:bd:5c:
19:7f:24:37:bb:1b:97:bf:37:ad:43:ac:c1:7f:38:
cc:3d:45:6d:b5:3f:36:99:2d:cc:6e:f5:44:ba:a4:
ee:0e:cd:5e:14:b0:5f:a2:e5:41:74:f4:e0:25:b4:
2a:d6:25:72:70:76:56:87:86:43:da:b2:02:9a:5c:
4c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:98:D2:BE:D2:7F:93:ED:4B:9C:D1:EB:3B:9E:71:71:D7:A5:DB:BB
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d6:3d:ad:42:7e:4b:12:b4:f7:89:9f:30:f5:a4:26:77:80:
2c:e8:69:91:ce:fb:55:58:2b:25:64:a6:72:57:dc:fa:30:1b:
dc:4c:ea:ec:62:3f:7e:fd:ee:a7:d6:6a:bc:5e:8e:1d:68:4b:
6f:be:4d:23:1c:a0:aa:99:57:7c:f3:96:87:2c:66:fa:92:fd:
03:a0:08:4a:26:b8:3d:e2:37:c7:79:b0:31:54:55:9c:60:fa:
d0:3f:26:4a:09:c2:ef:bb:1c:78:9a:0b:01:25:5f:67:22:91:
5d:7b:bc:e7:c7:be:cc:42:df:af:46:df:f9:84:06:cd:0b:28:
65:ff:5c:7f:87:bd:26:10:95:c3:58:b5:5e:37:be:c0:5d:3d:
02:f4:c8:39:c9:ec:ab:78:38:d7:6a:4a:b5:e7:50:3f:e2:4a:
1e:fd:b7:79:d0:9e:8c:a9:53:7f:02:ff:b5:9b:24:a7:48:d9:
3a:b2:90:26:2c:72:40:1b:10:c9:97:08:20:95:85:42:66:ce:
b0:2c:c1:79:14:99:2b:dd:5d:ce:be:2a:18:ef:af:eb:53:34:
19:e4:6e:25:6c:30:87:42:76:ca:8b:e0:1d:77:9b:9f:9b:84:
8d:b0:e5:96:de:53:c4:32:c2:6a:a7:34:81:7c:bb:52:fd:e4:
75:0b:9d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 06:29:45 2026 by rpki-client