Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
File: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft (raw, json)
Hash identifier: vHaJvvKZn0g11SQpP6HYIwdz7/iWVmMs6RyM0MLjDgQ=
Subject key identifier: 2E:A3:C5:C6:E4:9E:9C:FF:6E:14:AE:D1:B9:06:45:CA:6A:59:45:1E
Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Certificate serial: 019EBF236F9304E9A446246556D27EECFF55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 04:00:30 +0000
Manifest this update: Sat 13 Jun 2026 04:00:30 +0000
Manifest next update: Sun 14 Jun 2026 04:00:30 +0000
Files and hashes: 1: 7ciFHPcyDl_GiD4yOy7-6YbFSE4.roa (hash: spKjqMXNtC0h5y4SSbTIV4kFe/adq7sNxeFXmSbfQ7o=)
2: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl (hash: KWG92UaPLAm7sSOkRvxxpHQhc2ifozEm4EUnkZZtrrA=)
3: QqEtI7mSBnf3k13sxA2thJ-1o4Q.roa (hash: MvaPAINH/RoYeDbeWcuMwbOZ15Dwjgbo2f18w/6CCqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:6f:93:04:e9:a4:46:24:65:56:d2:7e:ec:ff:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Validity
Not Before: Jun 13 04:00:30 2026 GMT
Not After : Jun 14 04:00:30 2026 GMT
Subject: CN=2ea3c5c6e49e9cff6e14aed1b90645ca6a59451e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:64:51:c5:34:c3:61:63:80:2d:7e:85:74:ed:
bb:d6:83:26:82:1c:aa:82:0a:6e:16:6b:f4:a8:c3:
51:20:18:72:63:a4:e7:59:8c:94:c0:5d:6a:78:0f:
eb:62:4e:7d:4e:f3:75:4d:e7:49:97:ea:b6:fd:9b:
d9:5c:c5:32:47:fc:2a:16:a9:55:ce:4d:e3:b6:90:
61:c1:72:74:54:24:b0:f1:8c:37:22:ad:ea:e4:36:
c1:26:4b:f8:41:c9:6b:1b:8d:40:53:7f:e9:c6:32:
fa:a3:66:43:a0:b5:9a:17:a3:c3:32:a0:01:1e:8e:
fd:e7:97:6a:31:36:b8:c3:03:25:62:ed:64:ae:45:
d4:80:b1:0a:e9:86:ec:db:6f:44:a7:2a:2b:3f:d1:
72:f0:95:0e:6a:e4:2e:51:c5:0b:9d:b1:a3:17:48:
b3:c0:d3:a1:8c:8d:97:75:ba:ba:29:a8:0c:df:6b:
e4:5b:5c:24:9e:0d:25:6a:1c:81:34:b9:6e:0c:f8:
4d:35:44:9f:41:88:82:15:47:6c:b0:11:a7:d1:7e:
2c:f4:75:16:8c:da:5e:1f:fa:64:ab:13:ae:39:89:
b7:11:fb:77:f9:65:31:a3:c6:bb:79:7d:c3:8d:03:
e8:26:5d:9c:82:a7:bc:91:09:d3:01:ee:d5:c4:1d:
57:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A3:C5:C6:E4:9E:9C:FF:6E:14:AE:D1:B9:06:45:CA:6A:59:45:1E
X509v3 Authority Key Identifier:
keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e0:51:87:7f:72:cf:ec:0c:61:66:b7:76:eb:7b:07:0f:22:
db:6d:fa:2c:53:bb:3b:b1:70:69:dc:9f:b4:89:cd:a1:48:c5:
87:59:e2:d7:61:a1:df:5e:a6:b2:56:64:a8:95:7b:5b:e9:29:
6d:a2:a9:15:40:86:c2:97:89:1b:cd:89:16:2f:d9:b3:60:d7:
76:d9:6a:72:9b:40:f2:2c:cd:bf:6e:df:10:98:f8:3c:9e:63:
c8:1e:75:e7:96:8f:30:56:ce:e1:60:ba:93:3a:09:28:e1:27:
57:87:39:c0:cb:f1:4c:6d:f3:b5:bf:51:29:79:51:2d:d1:0b:
b0:3e:37:ef:02:2b:74:1a:0d:fa:0b:e9:90:9e:65:8d:ba:ef:
1f:93:b8:9a:32:fc:2c:98:2c:ed:6b:dd:a6:f0:e2:9b:34:15:
27:e6:13:50:c6:8b:7b:41:8c:a2:27:a9:69:9e:41:71:2a:e7:
67:76:d2:7d:0c:e1:d4:0c:3a:43:89:e2:7c:a7:24:c0:7f:6c:
73:7f:07:52:d6:28:1d:9c:c1:b6:b4:9f:80:b9:ba:15:99:50:
98:50:4b:4a:6c:54:45:5c:5f:25:7f:08:53:5c:35:5b:8f:07:
f5:50:49:1e:fc:11:7e:f7:dd:78:ec:33:89:12:2f:fe:8a:ea:
dd:d2:b8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:58:46 2026 by rpki-client