Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
File: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft (raw, json)
Hash identifier: gnAPcIU9H+DEE9QNYmIaFEWKUHG5u4aCL2IdPjzNH+A=
Subject key identifier: FF:83:68:53:6B:9E:73:1B:AA:A5:A0:D0:BB:76:E0:CA:9C:49:0D:2D
Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Certificate serial: 019FA8D03D5326930A841F5EA5831AC7F72E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 13:00:47 +0000
Manifest this update: Tue 28 Jul 2026 13:00:47 +0000
Manifest next update: Wed 29 Jul 2026 13:00:47 +0000
Files and hashes: 1: 7ciFHPcyDl_GiD4yOy7-6YbFSE4.roa (hash: spKjqMXNtC0h5y4SSbTIV4kFe/adq7sNxeFXmSbfQ7o=)
2: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl (hash: dFu8DAHJ59ElgkIH7QO2Cjfe/u2BPkdPqY+oxizWlzo=)
3: QqEtI7mSBnf3k13sxA2thJ-1o4Q.roa (hash: MvaPAINH/RoYeDbeWcuMwbOZ15Dwjgbo2f18w/6CCqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:3d:53:26:93:0a:84:1f:5e:a5:83:1a:c7:f7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Validity
Not Before: Jul 28 13:00:47 2026 GMT
Not After : Jul 29 13:00:47 2026 GMT
Subject: CN=ff8368536b9e731baaa5a0d0bb76e0ca9c490d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3d:cb:b1:92:82:e7:f1:90:fc:04:3a:a1:4b:
ab:8f:45:2c:db:ef:47:34:c1:bd:76:9c:86:23:c3:
2c:cc:84:5c:bb:e5:96:fd:23:12:82:98:bb:0a:3b:
bb:88:89:73:b9:63:af:ee:08:7a:d7:4e:3b:18:95:
b7:4b:51:83:3c:49:e1:80:e0:e3:70:f5:29:14:a7:
f4:c9:72:b0:78:af:9a:22:75:0d:d9:3b:87:6e:45:
e9:73:7c:ce:fd:56:fd:e6:3c:e4:ea:7c:fe:78:0b:
af:85:39:b1:65:c3:98:9a:20:98:19:b0:68:96:ef:
05:03:77:f2:3c:48:34:90:ee:fd:82:6e:f0:42:97:
12:ca:62:2d:ea:9c:8e:17:6f:aa:64:68:30:a7:61:
a0:39:72:20:cc:45:9f:15:26:3e:96:cc:f7:cb:88:
79:0a:7d:b8:89:30:2a:b5:76:f0:be:f3:60:47:77:
b3:47:61:e2:fb:8a:f5:6e:63:19:ce:36:5b:c0:8b:
f6:ca:87:42:14:71:06:cc:97:8e:5e:e3:85:e7:22:
01:ae:58:b4:ef:0e:9c:bf:8a:43:d4:8d:ef:ae:a0:
d3:6a:86:3f:a2:dc:5e:49:6d:f3:28:2c:10:44:a3:
16:aa:14:be:2a:79:0b:49:76:77:70:5b:ca:43:39:
37:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:83:68:53:6B:9E:73:1B:AA:A5:A0:D0:BB:76:E0:CA:9C:49:0D:2D
X509v3 Authority Key Identifier:
keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3f:4a:22:40:81:db:98:29:b8:2f:05:3d:31:e6:92:73:a6:
6f:e7:84:27:94:7d:27:76:0b:10:99:7c:65:1b:9f:96:2a:8f:
19:ca:f8:f8:cf:a6:41:a3:c7:0c:c8:5c:05:b3:09:d4:30:ca:
f3:cf:f5:89:79:89:8a:d7:fc:b3:73:cb:9f:5f:ed:12:aa:f2:
60:92:69:2d:87:9e:25:d9:04:d0:51:d8:10:31:20:c6:77:7a:
c6:cd:1f:52:b8:d0:26:1c:87:de:ad:f9:a7:77:00:c1:bb:10:
d6:c0:30:06:ab:9b:13:b0:90:5e:31:1e:dc:71:13:fd:55:03:
07:21:ca:87:78:68:d7:51:94:63:c0:d0:6f:9c:c3:6d:53:d8:
94:f4:6c:17:d7:90:19:ad:c3:b4:22:68:60:51:f8:80:2f:9a:
2e:7d:5e:ee:64:07:2f:2e:c0:c1:47:47:9a:5a:95:a5:40:1e:
dc:40:fc:dc:89:cc:aa:87:cf:4a:d7:fb:68:b7:40:fb:f8:96:
8d:dc:cc:03:b7:35:9c:7d:cf:81:8a:34:81:0f:ba:52:04:84:
fd:ab:ad:6b:89:d7:53:5a:5c:07:ce:6a:39:80:d1:e4:73:44:
29:20:e0:d9:3c:de:fa:6b:d5:77:ab:8d:27:6c:bc:32:b9:2b:
87:17:7a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:13:24 2026 by rpki-client