Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
File: CZofLb97eoSuV7jWdCa35OQg-rU.mft (raw, json)
Hash identifier: mx0hwJnpwLF8tiONt8UNmxi7sRlPP6wEYrfhdMGwMR4=
Subject key identifier: 0C:C2:2E:16:80:B1:30:FA:6A:5A:5A:5E:61:10:DA:7E:1D:A9:96:A1
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 01A17DE1EB333865918981C9938BD6DB948F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
Manifest number: 0CF5
Signing time: Tue 27 Oct 2026 15:02:00 +0000
Manifest this update: Tue 27 Oct 2026 15:02:00 +0000
Manifest next update: Wed 28 Oct 2026 15:02:00 +0000
Files and hashes: 1: CZofLb97eoSuV7jWdCa35OQg-rU.crl (hash: wj1EqXUopQEsqs8lknOBqy76maWwcvzlTsHe4J5GbCU=)
2: Fi9A7ox4EzBVsjYUvBuYzjfrMx4.roa (hash: yPzWCEaVWwitvSN0VQpWfi2iaiWGTDPLLRlVVcJ92AY=)
3: ONFz0V7IAS7pLP2dPdVzEzcHEzs.roa (hash: exi5IPpnyvXJKOHa7VYcHQgVZZfh1VDHbH5mjri2Ow4=)
4: lcFMLBJ4Qsm2pQ6VUD3RYi3MSqw.roa (hash: jCb7ZL+Zyxb7PMRFxkMl8BDTxyWFfiSmgO42R7iSszA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:eb:33:38:65:91:89:81:c9:93:8b:d6:db:94:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Oct 27 15:02:00 2026 GMT
Not After : Oct 28 15:02:00 2026 GMT
Subject: CN=0cc22e1680b130fa6a5a5a5e6110da7e1da996a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9d:77:57:ba:b4:0b:83:bc:05:a3:d4:06:49:
96:82:cf:f6:fb:ca:1e:d8:67:53:8d:38:79:be:2b:
29:41:d2:5e:99:f6:c5:c4:d0:ad:79:4b:91:37:8e:
bc:ee:9d:ce:f5:59:3a:d3:14:a6:50:79:ef:94:fc:
9b:51:7a:b9:b8:63:8a:1f:5f:e7:97:1c:98:4e:ac:
ce:b7:21:f6:78:ec:11:00:0c:44:3a:e3:04:87:13:
91:2d:8c:c5:28:e4:c3:df:5a:88:ed:af:cd:d4:26:
4a:bc:78:ab:61:f6:07:1e:ed:f9:01:f1:8f:63:01:
30:fc:a2:ae:5f:4c:f9:47:01:d2:03:d0:94:94:da:
43:bf:c7:7e:f4:0d:e4:ce:23:24:c5:89:d2:3d:6b:
eb:f3:91:c4:1f:ce:27:55:ae:d5:d2:eb:84:80:a7:
e9:63:fd:2c:26:77:0a:4c:c0:4d:c5:aa:65:d3:6e:
41:b4:17:d0:80:43:b2:c5:bf:26:2d:04:bb:ef:eb:
90:e7:fb:78:a1:5a:aa:36:3f:ac:f2:66:b6:5a:de:
7a:80:cc:a7:93:9f:e1:e7:81:4f:23:46:cd:5e:a3:
93:9c:68:36:f2:97:b3:83:37:82:58:72:19:70:b6:
4b:eb:d5:23:9f:cd:09:48:50:b8:92:33:9e:35:64:
d5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C2:2E:16:80:B1:30:FA:6A:5A:5A:5E:61:10:DA:7E:1D:A9:96:A1
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:54:44:0c:3a:3b:3c:32:03:47:4f:78:de:b6:3d:60:f4:d0:
05:65:86:72:c7:40:38:6b:10:c7:57:8a:c3:e5:f0:34:41:f5:
5d:23:14:7e:c4:0b:67:a5:5d:6d:74:00:20:95:0e:17:23:5c:
ff:8c:a3:31:13:ab:dc:bf:1d:96:e9:42:de:1a:e1:94:6c:e4:
f7:c4:8d:74:7a:30:a6:4b:c4:e8:33:b1:37:71:a8:ed:94:b2:
11:83:67:31:4e:9b:38:d6:f8:a8:03:fc:0d:ed:39:71:71:cd:
1d:dc:55:d0:4f:7c:a6:ef:92:25:16:26:f0:8a:9a:f2:7e:09:
4a:11:ef:56:4f:e4:54:c1:76:41:14:e7:52:95:e5:73:9c:fd:
9d:02:39:80:32:27:14:51:c3:34:87:41:c3:ef:e7:9a:b2:17:
ec:86:c2:f1:67:ac:b1:44:fc:8a:28:a1:47:af:5a:a5:dd:2b:
2c:4f:59:55:bf:11:a3:ea:af:d2:6a:86:e0:2f:fc:54:0d:dc:
a2:65:fd:5d:0f:78:d4:01:c8:2f:b2:7d:7b:91:a3:c5:5f:de:
eb:c2:2f:ed:cc:7b:80:c7:d2:2a:fc:fd:7a:f1:7d:5f:c8:2b:
f2:91:39:90:36:ac:55:ee:9d:5d:c3:e4:0e:3c:bb:33:e4:de:
79:fb:c0:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF94eszOGWRiYHJk4vW25SPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OWExZjJkYmY3YjdhODRhZTU3YjhkNjc0MjZiN2U0ZTQy
MGZhYjUwHhcNMjYxMDI3MTUwMjAwWhcNMjYxMDI4MTUwMjAwWjAzMTEwLwYDVQQD
EygwY2MyMmUxNjgwYjEzMGZhNmE1YTVhNWU2MTEwZGE3ZTFkYTk5NmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1p13V7q0C4O8BaPUBkmWgs/2+8oe
2GdTjTh5vispQdJemfbFxNCteUuRN4687p3O9Vk60xSmUHnvlPybUXq5uGOKH1/n
lxyYTqzOtyH2eOwRAAxEOuMEhxORLYzFKOTD31qI7a/N1CZKvHirYfYHHu35AfGP
YwEw/KKuX0z5RwHSA9CUlNpDv8d+9A3kziMkxYnSPWvr85HEH84nVa7V0uuEgKfp
Y/0sJncKTMBNxapl025BtBfQgEOyxb8mLQS77+uQ5/t4oVqqNj+s8ma2Wt56gMyn
k5/h54FPI0bNXqOTnGg28pezgzeCWHIZcLZL69Ujn80JSFC4kjOeNWTVGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzCLhaAsTD6alpaXmEQ2n4dqZahMB8GA1UdIwQY
MBaAFAmaHy2/e3qErle41nQmt+TkIPq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kNDJhYmItMzM0Mi00ODg3LWFmNDAt
OWNkNjhmMjIxZTIxLzEvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kNDJhYmItMzM0Mi00ODg3LWFmNDAtOWNkNjhmMjIxZTIx
LzEvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1REDDo7
PDIDR0943rY9YPTQBWWGcsdAOGsQx1eKw+XwNEH1XSMUfsQLZ6VdbXQAIJUOFyNc
/4yjMROr3L8dlulC3hrhlGzk98SNdHowpkvE6DOxN3Go7ZSyEYNnMU6bONb4qAP8
De05cXHNHdxV0E98pu+SJRYm8Iqa8n4JShHvVk/kVMF2QRTnUpXlc5z9nQI5gDIn
FFHDNIdBw+/nmrIX7IbC8WessUT8iiihR69apd0rLE9ZVb8Ro+qv0mqG4C/8VA3c
omX9XQ941AHIL7J9e5GjxV/e68Iv7cx7gMfSKvz9evF9X8gr8pE5kDasVe6dXcPk
Djy7M+TeefvANw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 21:06:50 2026 by rpki-client