Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
File: CZofLb97eoSuV7jWdCa35OQg-rU.mft (raw, json)
Hash identifier: GWHA9tgcsZ9y+oTaU3X3M8//GerROeXrnyeSstBimeY=
Subject key identifier: 55:9E:3E:64:E2:2B:79:EE:C0:DF:68:84:41:31:73:DC:1B:B1:9A:45
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 019FA2296C790C9EC7068B2B4EC761EA20CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
Manifest number: 0BFB
Signing time: Mon 27 Jul 2026 06:00:51 +0000
Manifest this update: Mon 27 Jul 2026 06:00:51 +0000
Manifest next update: Tue 28 Jul 2026 06:00:51 +0000
Files and hashes: 1: CZofLb97eoSuV7jWdCa35OQg-rU.crl (hash: eNAbkH+1ggBjsvDYP0mAV5LIzWbA0i38uzumBr9e8pA=)
2: Fi9A7ox4EzBVsjYUvBuYzjfrMx4.roa (hash: yPzWCEaVWwitvSN0VQpWfi2iaiWGTDPLLRlVVcJ92AY=)
3: lcFMLBJ4Qsm2pQ6VUD3RYi3MSqw.roa (hash: jCb7ZL+Zyxb7PMRFxkMl8BDTxyWFfiSmgO42R7iSszA=)
4: udDZlRqJiXtAXMmshEscXpSLRxA.roa (hash: wyIq2I1jx8vxdJZ8+x/YsQXsxSwsm8ATw7ArwjE7EFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:6c:79:0c:9e:c7:06:8b:2b:4e:c7:61:ea:20:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Jul 27 06:00:51 2026 GMT
Not After : Jul 28 06:00:51 2026 GMT
Subject: CN=559e3e64e22b79eec0df6884413173dc1bb19a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ba:67:0c:0a:1c:45:d0:30:e9:45:2f:5a:1e:
76:3f:9a:eb:08:e4:9a:79:00:ed:bb:17:28:7f:e9:
98:c4:e8:42:df:45:a2:ad:2d:a3:26:52:b7:01:41:
36:8e:db:31:ec:1b:3f:9a:88:af:2f:17:4a:83:36:
75:16:5c:3b:7f:29:a6:ea:da:ec:9c:9e:ab:5a:fb:
36:10:63:2a:ab:1a:cb:ae:1e:ce:80:13:67:e3:09:
cd:c4:65:0d:7b:a6:0b:75:cc:53:a8:5c:7b:d3:f2:
b9:63:e5:94:50:fa:a7:17:06:88:fc:d3:00:d1:71:
de:c0:d3:75:17:24:2a:0e:c1:0e:a2:c0:b0:03:6d:
ee:ff:41:6a:32:39:23:16:6f:a4:60:ec:90:30:90:
16:00:86:7a:66:c0:9f:c2:a2:41:df:df:7e:e6:38:
18:d9:f1:f7:57:a5:9c:45:8f:d3:05:4a:e6:a9:77:
77:ba:f7:0e:13:c5:02:e3:41:68:54:4e:ef:b1:d3:
4f:eb:a5:26:e0:db:5d:09:34:93:7c:5d:c4:e2:78:
42:6e:73:23:d5:ac:2a:16:82:30:24:cb:d3:ec:7a:
96:f3:fc:00:ac:fd:81:cf:6c:92:ff:3c:38:13:d9:
af:9d:26:43:0a:77:2a:7d:40:fa:13:5e:4b:ec:12:
a1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9E:3E:64:E2:2B:79:EE:C0:DF:68:84:41:31:73:DC:1B:B1:9A:45
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:9b:fd:34:02:11:c6:63:18:6f:45:aa:c8:e8:35:e1:64:08:
ec:9a:a6:a3:97:7d:8a:3b:4a:5f:67:e2:ff:99:ab:4d:33:c1:
40:aa:3c:79:91:22:f3:ff:db:a4:87:e3:40:4b:20:3c:7c:80:
d5:ab:00:aa:55:49:0b:b3:32:48:af:8e:40:77:90:33:d9:2e:
11:cb:d7:96:ec:32:99:7e:b4:0a:0e:35:0e:22:c8:4a:bc:54:
06:48:a0:f7:1a:4a:bc:dc:73:de:6a:7f:24:2f:05:d2:38:49:
bd:3e:a8:cf:69:5c:00:0c:73:a8:05:4d:e5:08:82:90:86:10:
06:b9:18:c0:83:4d:57:22:bc:e2:7b:8d:05:7f:c7:66:80:3b:
5a:50:71:3f:ff:49:be:48:80:e7:c7:b2:f8:e4:7c:09:0e:60:
e5:97:1d:29:a1:82:2f:fb:61:4b:b9:37:a6:c8:cd:6f:e5:fb:
21:20:32:93:ec:8b:66:dc:78:d8:96:cb:8b:a3:45:d7:c9:42:
87:d7:a0:20:16:dd:f9:4e:88:2f:f1:f5:0d:d6:4f:25:6f:74:
26:35:90:66:70:91:4d:6b:dd:16:bf:87:da:f3:a1:d6:9a:27:
88:14:cb:9a:5e:48:0c:1f:7d:a9:27:1b:17:97:62:8d:6f:3b:
f1:db:65:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:48:06 2026 by rpki-client