Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
File: CZofLb97eoSuV7jWdCa35OQg-rU.mft (raw, json)
Hash identifier: nGoJanDo32GWfYI5ZVVGlsXG03p3yY0pVefjxl+gnL0=
Subject key identifier: 43:84:A3:E8:7B:46:90:C6:16:41:C1:6A:2F:D0:09:60:8C:F4:20:F0
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 01A08BD5F77A4B142CF7015190453DCE63E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
Manifest number: 0C74
Signing time: Thu 10 Sep 2026 15:00:50 +0000
Manifest this update: Thu 10 Sep 2026 15:00:50 +0000
Manifest next update: Fri 11 Sep 2026 15:00:50 +0000
Files and hashes: 1: CZofLb97eoSuV7jWdCa35OQg-rU.crl (hash: 7DHa+SoE7WgygMrZXNJvB4Hk7uiNRHGE+Tk00U764JA=)
2: Fi9A7ox4EzBVsjYUvBuYzjfrMx4.roa (hash: yPzWCEaVWwitvSN0VQpWfi2iaiWGTDPLLRlVVcJ92AY=)
3: lcFMLBJ4Qsm2pQ6VUD3RYi3MSqw.roa (hash: jCb7ZL+Zyxb7PMRFxkMl8BDTxyWFfiSmgO42R7iSszA=)
4: udDZlRqJiXtAXMmshEscXpSLRxA.roa (hash: wyIq2I1jx8vxdJZ8+x/YsQXsxSwsm8ATw7ArwjE7EFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:f7:7a:4b:14:2c:f7:01:51:90:45:3d:ce:63:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Sep 10 15:00:50 2026 GMT
Not After : Sep 11 15:00:50 2026 GMT
Subject: CN=4384a3e87b4690c61641c16a2fd009608cf420f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d9:45:d6:cd:6c:82:a6:db:0b:70:cf:6b:7a:
f9:bf:6f:da:83:3b:8d:05:3a:2e:6e:7a:f3:70:82:
ce:45:b2:cf:58:89:b3:e9:86:90:64:fb:c6:f1:b3:
01:85:58:7e:18:34:19:5f:a1:e3:c1:80:a6:75:37:
99:c6:2a:66:b8:8f:3e:98:2b:02:1f:f8:51:6b:14:
fe:a8:ae:e7:39:51:ef:91:e6:d9:d5:c4:f3:f0:11:
5f:02:1d:3a:b8:05:4f:8b:11:e0:4d:a3:7c:80:c8:
d1:5b:fb:3b:01:10:83:9c:6a:79:72:c7:2c:3f:2c:
ce:2f:4a:5d:50:b1:a7:91:33:ab:b8:e5:39:1d:be:
16:58:1e:c3:b9:d2:7a:c1:56:41:aa:f5:2e:e3:a3:
34:0a:0a:b4:ea:0b:5d:1f:4b:6c:6b:b1:6d:2e:86:
2f:2f:fa:32:64:4f:4e:7d:a2:71:e6:16:d8:62:54:
91:00:60:67:2f:c2:2f:fd:69:48:19:3e:49:12:fb:
24:cc:30:5d:ac:c1:96:62:94:3a:9d:91:8d:ca:04:
59:3d:3b:09:dc:a8:a6:3a:89:db:0b:71:5e:89:5a:
cb:3b:9a:86:b8:85:33:05:79:eb:e7:b0:ab:15:ec:
b7:1a:53:fe:10:8e:18:19:90:18:de:f9:11:2e:16:
60:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:84:A3:E8:7B:46:90:C6:16:41:C1:6A:2F:D0:09:60:8C:F4:20:F0
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:36:65:37:c0:18:d3:39:bb:65:c3:a2:cb:bf:65:88:e5:fb:
35:c1:f0:67:96:9e:8d:b5:be:d3:b4:d9:10:4f:03:e3:79:49:
5b:32:cf:0d:c2:f4:2c:9f:8a:7f:a1:9a:34:0d:60:12:81:4d:
1d:88:38:56:86:77:6f:06:58:37:78:1d:62:ba:ce:c0:2a:2c:
c1:e2:8d:2d:95:1c:9e:bd:1a:7d:80:fb:5b:32:30:df:6a:95:
f0:57:ae:ef:b0:3c:a7:96:0b:79:73:65:d7:0c:52:0a:b4:c7:
2a:a1:66:16:62:ae:ce:34:df:96:3e:55:ab:19:86:64:d5:55:
e1:d7:c8:78:bd:ce:de:f1:e5:b5:c4:93:df:1c:82:6a:7d:1c:
1c:1c:5e:15:82:cb:85:4c:5f:6c:50:35:5b:22:1d:3f:bf:89:
be:dd:1c:41:02:d8:8b:00:a0:7e:da:ef:27:0d:b4:85:59:e2:
7d:8d:0f:1f:ef:aa:b1:34:f6:b1:39:25:dc:2e:57:b1:dc:17:
00:a4:79:f9:a9:fe:cc:5f:ea:95:df:46:a1:8c:f0:4b:10:fe:
b8:a0:29:39:ab:f9:75:70:83:39:c3:b4:8c:f4:a1:e1:38:13:
f9:6a:e3:13:b5:27:ff:dc:b0:c7:0b:20:fc:bf:50:15:6b:ff:
8a:e7:58:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:53:19 2026 by rpki-client