Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
File: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft (raw, json)
Hash identifier: n5oqzw5p1MkoTcP4281BC7bpQW4Rsrwdhj6Wym8BELs=
Subject key identifier: D4:8A:A3:24:1C:87:A5:40:E6:34:7C:7A:0E:D8:71:CF:37:7B:A1:12
Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Certificate serial: 019CADFE8418C14A7E2DC7C96D1DB6BDF3F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 10:01:03 +0000
Manifest this update: Mon 02 Mar 2026 10:01:03 +0000
Manifest next update: Tue 03 Mar 2026 10:01:03 +0000
Files and hashes: 1: 7ciFHPcyDl_GiD4yOy7-6YbFSE4.roa (hash: spKjqMXNtC0h5y4SSbTIV4kFe/adq7sNxeFXmSbfQ7o=)
2: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl (hash: c6qjZkGP6udO0b+pwPBoyYDPwMkQ3BHmZBJ1LoP7hVw=)
3: QqEtI7mSBnf3k13sxA2thJ-1o4Q.roa (hash: MvaPAINH/RoYeDbeWcuMwbOZ15Dwjgbo2f18w/6CCqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:84:18:c1:4a:7e:2d:c7:c9:6d:1d:b6:bd:f3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Validity
Not Before: Mar 2 10:01:03 2026 GMT
Not After : Mar 3 10:01:03 2026 GMT
Subject: CN=d48aa3241c87a540e6347c7a0ed871cf377ba112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a5:4a:e6:2f:6a:b1:a8:22:e4:fc:af:eb:b1:
c6:89:5b:c1:9d:0c:f1:ee:af:ed:43:c8:48:d1:be:
96:bb:b5:ac:e9:bd:5e:bb:84:1c:83:85:5f:6a:c3:
fc:06:5c:95:1d:e9:79:e3:4a:fe:43:17:61:a7:53:
f6:f6:fd:03:64:09:25:81:32:ae:31:0f:c5:d6:fa:
a8:cd:c8:c4:3a:6a:85:da:26:e9:c7:d7:ba:99:5b:
33:b7:7f:6a:07:86:2c:fc:fb:39:24:98:06:93:a5:
98:d8:1d:0f:11:22:87:3e:66:99:7f:be:18:18:7f:
55:14:88:43:eb:bd:c4:c5:10:3d:c8:08:25:5f:b6:
42:cc:9f:10:2a:db:7e:5f:5c:2b:bd:a6:0b:f7:81:
bd:96:b3:e1:04:3b:dd:36:52:80:8a:c7:50:be:dd:
e7:b1:78:f6:d6:56:3f:55:7b:f5:cb:d5:c6:bc:dc:
ae:16:a4:0d:b1:e3:11:2a:5f:4a:05:de:fb:7f:5a:
f4:41:4b:cc:6a:d7:77:07:7d:30:b5:85:40:09:56:
97:48:67:e1:a5:55:e3:42:a8:4d:fb:20:12:a6:7b:
1e:dd:38:f1:cc:f3:2e:4d:2f:d3:64:a7:af:23:99:
fd:8d:77:8a:e2:2e:b7:d2:99:70:9e:d4:f8:1b:e2:
79:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8A:A3:24:1C:87:A5:40:E6:34:7C:7A:0E:D8:71:CF:37:7B:A1:12
X509v3 Authority Key Identifier:
keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f5:5a:9a:77:dd:f4:23:17:f5:f9:60:0f:7d:5c:8f:5a:00:
c5:d5:50:02:bd:17:e5:36:de:e8:6b:9e:29:a9:28:ae:54:4d:
cd:f5:45:2b:9b:78:9f:86:a7:0b:45:7a:93:1c:bd:38:ff:8d:
19:f7:8e:91:78:96:25:45:46:68:6c:0b:7c:6d:99:95:59:0a:
38:6f:ad:f2:a9:d7:9f:57:ae:0b:3c:1b:cf:05:5d:ec:1f:00:
07:01:36:fc:75:c1:3c:92:2c:09:c2:9e:25:e2:5d:81:8f:50:
1f:2b:2f:27:52:e5:9f:f9:05:be:25:58:76:b9:74:d4:90:4c:
52:d3:b0:38:ce:42:05:0b:b5:66:4d:fc:2f:ef:99:83:88:76:
af:86:ab:94:5d:89:5c:21:89:2e:43:b7:20:ec:0c:2a:d9:d7:
cc:d8:a2:a9:93:91:b7:82:07:ef:0d:0e:11:b0:21:e5:94:c8:
f3:a6:25:c7:fa:2b:fa:c0:8b:65:a3:05:81:85:40:cf:02:65:
60:38:4a:7a:c5:80:ce:55:27:6c:a2:f5:20:ec:95:0f:30:aa:
09:4a:ce:0a:7f:4f:f1:00:fc:41:4c:85:55:79:ae:63:c5:c0:
f0:0d:2a:e6:26:0c:12:50:c6:81:79:a1:c2:88:20:15:16:07:
fe:f1:6c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:14:55 2026 by rpki-client