Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
File: CZofLb97eoSuV7jWdCa35OQg-rU.mft (raw, json)
Hash identifier: GowxHbJtBiSQy2K+C8WR/iWvowKFiTEH5b29xyBUXo0=
Subject key identifier: 9B:A8:C0:2B:69:05:95:02:91:10:77:F4:80:AD:2C:EE:31:F2:AA:4F
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 019DD050A2E898C48C37CD2B4E29F3E6FE29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
Manifest number: 0B09
Signing time: Mon 27 Apr 2026 19:00:38 +0000
Manifest this update: Mon 27 Apr 2026 19:00:38 +0000
Manifest next update: Tue 28 Apr 2026 19:00:38 +0000
Files and hashes: 1: BJowdLldqJHM3ir588qx25T2i1o.roa (hash: nGJPoQmYXI/63Ysvy1k3U4F/yfSsIELkLPYGxlPw234=)
2: CZofLb97eoSuV7jWdCa35OQg-rU.crl (hash: N3EePRP6/ynbS6khFu/8a8m40m9lv8NrAlhdLjrqcYw=)
3: Fi9A7ox4EzBVsjYUvBuYzjfrMx4.roa (hash: yPzWCEaVWwitvSN0VQpWfi2iaiWGTDPLLRlVVcJ92AY=)
4: lcFMLBJ4Qsm2pQ6VUD3RYi3MSqw.roa (hash: jCb7ZL+Zyxb7PMRFxkMl8BDTxyWFfiSmgO42R7iSszA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:50:a2:e8:98:c4:8c:37:cd:2b:4e:29:f3:e6:fe:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Apr 27 19:00:38 2026 GMT
Not After : Apr 28 19:00:38 2026 GMT
Subject: CN=9ba8c02b69059502911077f480ad2cee31f2aa4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2d:04:c8:35:6e:f2:66:b0:53:df:36:f6:d3:
96:c9:7f:c9:03:32:c3:06:91:a4:7b:d2:9c:d0:ab:
30:10:7e:55:60:b0:a6:1c:42:cd:46:8d:36:6b:35:
3e:c8:cc:63:d8:42:85:97:8f:a5:29:32:05:81:91:
ed:a4:3b:3f:0f:87:7b:36:36:3b:15:66:5f:5d:bc:
63:9b:b3:02:16:f5:70:80:b5:60:71:21:a0:80:91:
28:0e:d5:2d:42:ec:c0:aa:91:00:2a:ef:ea:96:5d:
55:03:26:1a:2c:01:0e:f7:be:37:d1:26:3d:3c:dc:
ce:e8:1a:c9:83:36:74:7b:0f:c1:df:f7:82:79:69:
15:5e:bb:eb:ff:72:b4:6f:43:1b:7a:a0:84:da:cf:
0c:3c:d0:2b:fb:b2:c9:68:72:ed:e9:c9:26:f8:fa:
77:3b:e4:a9:84:30:dd:aa:9c:4e:05:1a:cb:29:09:
53:d9:f3:ef:59:32:1e:2e:dd:27:9e:83:e2:25:fe:
52:e4:3a:53:a2:1f:81:97:a9:b9:09:27:e5:33:b8:
8d:bc:46:23:ae:2f:7b:e5:a9:e6:d5:8e:2f:ad:47:
15:d2:f1:d6:05:a0:8f:a2:0f:60:cd:98:8f:2b:9e:
a6:2a:82:b2:38:8b:b6:7f:40:09:85:7b:86:26:08:
93:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A8:C0:2B:69:05:95:02:91:10:77:F4:80:AD:2C:EE:31:F2:AA:4F
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:77:0b:e4:88:16:bb:32:77:15:d9:e0:c7:30:54:32:b8:5f:
56:74:da:3b:3d:ae:ba:47:c1:d0:94:e8:4e:de:4c:49:7a:7c:
05:fc:21:ee:91:b3:74:a4:33:30:38:ae:4a:31:be:a4:84:1a:
3a:5a:d8:ed:c7:72:9f:95:84:59:1d:3d:26:da:5c:96:4e:5a:
72:7a:c2:c4:27:7f:6a:84:3e:1e:55:9b:c1:81:1c:7e:0f:65:
14:ad:1c:14:d4:75:80:48:06:80:04:bd:72:23:e7:4c:7b:64:
e9:e5:3e:65:3c:b1:fd:de:bf:35:23:11:52:0f:12:47:a0:d5:
91:f9:3e:20:d1:85:6b:42:12:fd:8c:11:d9:31:23:65:65:4c:
c5:08:57:78:7a:51:91:32:cc:0c:39:90:2f:f9:09:3d:ee:02:
1b:75:c8:7b:61:0f:2f:ac:09:f9:f0:d8:86:86:5b:9c:89:76:
7d:c8:17:f0:88:34:bf:55:97:01:0e:97:0c:18:d9:91:8f:9e:
66:33:06:fa:48:7c:bc:82:f7:a1:b8:e9:50:06:53:fa:eb:e1:
3b:1c:8c:76:4c:f3:1f:46:ee:27:23:b8:c2:73:74:3f:c4:40:
b5:56:19:c6:13:ad:3d:78:61:a5:fe:ad:33:c5:6a:fa:6f:c5:
92:49:77:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:52:23 2026 by rpki-client