Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
File: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft (raw, json)
Hash identifier: sVR1bF8uwUo8yT5vHuvieV3gIebUQlYnYwO8SaantrM=
Subject key identifier: D4:98:B1:0D:33:DF:C0:D9:3C:AC:29:F6:1F:C2:8D:AB:75:B0:33:58
Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Certificate serial: 01A0DDCE949236BCD8892B9293FD0DA1450A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
Manifest number: 1A74
Signing time: Sat 26 Sep 2026 13:01:38 +0000
Manifest this update: Sat 26 Sep 2026 13:01:38 +0000
Manifest next update: Sun 27 Sep 2026 13:01:38 +0000
Files and hashes: 1: 7ciFHPcyDl_GiD4yOy7-6YbFSE4.roa (hash: spKjqMXNtC0h5y4SSbTIV4kFe/adq7sNxeFXmSbfQ7o=)
2: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl (hash: mPhdsZGvIg60HA+jwN853vJhpOhCI7809NdFhg+Lpzw=)
3: QqEtI7mSBnf3k13sxA2thJ-1o4Q.roa (hash: MvaPAINH/RoYeDbeWcuMwbOZ15Dwjgbo2f18w/6CCqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:ce:94:92:36:bc:d8:89:2b:92:93:fd:0d:a1:45:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Validity
Not Before: Sep 26 13:01:38 2026 GMT
Not After : Sep 27 13:01:38 2026 GMT
Subject: CN=d498b10d33dfc0d93cac29f61fc28dab75b03358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:60:c9:47:1a:4e:7f:4e:7d:ca:b4:a3:25:11:
c2:2b:b7:e8:4a:a4:5c:88:41:0e:cd:fe:59:26:98:
23:bc:a9:c9:0f:af:f3:f5:ad:84:89:46:a9:d3:ec:
8e:0e:fb:be:ab:14:6c:10:68:cf:0a:8d:dd:df:87:
71:6b:93:4f:07:72:7a:50:b1:30:4c:4e:3e:f8:b3:
dd:5f:3a:c4:ec:b8:40:2e:79:36:ac:ff:1a:2c:74:
c1:59:98:8b:6e:ae:65:3b:27:e6:df:6d:a0:f2:fb:
48:65:78:7f:53:e6:c2:c8:51:46:99:71:2c:41:98:
ad:c6:78:11:8a:cd:6c:08:b4:5f:16:2b:92:36:85:
35:4c:68:44:d2:52:c7:d8:12:11:12:9c:b9:0a:d8:
bb:88:b1:a5:37:e8:ed:bb:75:cf:7c:7d:db:e4:91:
02:19:55:dd:d9:59:7d:31:1e:0f:00:4a:c1:22:54:
1d:11:eb:a2:9d:14:0c:b9:e1:ed:c1:6e:f7:3e:bb:
ca:55:d9:fb:38:46:2f:64:ee:2d:38:fe:fb:46:d5:
1c:40:44:79:56:28:1a:ca:8e:c5:69:d7:ac:81:78:
f1:49:03:a7:f2:8a:0f:11:94:9c:ed:c4:82:89:fb:
d9:9f:bd:14:24:46:0d:53:5b:a6:e1:32:e8:70:59:
fd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:98:B1:0D:33:DF:C0:D9:3C:AC:29:F6:1F:C2:8D:AB:75:B0:33:58
X509v3 Authority Key Identifier:
keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ca:ca:34:c0:c5:b3:ae:5a:c3:4f:95:32:4a:f3:96:87:b3:
85:90:d2:21:5c:5f:46:66:68:b5:8c:bd:e7:36:c2:71:d2:7c:
c3:13:f9:b8:a2:1d:26:87:26:9c:01:60:06:0e:eb:63:cd:02:
ea:55:ec:52:f3:a5:e8:8b:87:b6:48:32:61:50:86:6c:25:80:
36:45:09:04:2f:4e:04:ea:8c:a1:a6:24:9c:ac:5a:54:59:9e:
fc:eb:7b:cd:8d:19:34:4a:40:a3:ce:0a:e3:d1:ef:9b:52:24:
58:80:c8:15:18:61:12:73:4b:5f:d1:96:a9:15:de:c9:f1:c4:
e6:c7:d1:87:f4:00:4a:26:d4:74:a9:d3:d2:e9:ac:14:e7:fb:
b3:45:02:dd:a8:8e:6e:f0:5b:75:49:02:32:51:21:37:74:2f:
05:aa:e9:cc:f9:d5:cd:26:b8:3b:3e:1e:89:21:a6:3a:4e:2e:
ad:79:dd:04:ea:33:50:d0:5b:9e:d8:81:ee:1d:b0:ad:2f:ab:
94:ef:20:1f:be:48:92:f6:c4:f1:c3:c9:e5:13:16:06:d6:c7:
9d:0b:74:46:b3:58:e8:dc:f3:37:a6:34:47:c7:0f:8c:09:8a:
cb:ad:75:48:ea:ce:32:a1:08:4b:92:7b:db:61:52:44:47:07:
fe:dc:19:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdzpSSNrzYiSuSk/0NoUUKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OWYxMmYzZmE3MzExY2Q5OTNhYjZiYzViYjI5YTFiZjJh
ZDQ4YTEwHhcNMjYwOTI2MTMwMTM4WhcNMjYwOTI3MTMwMTM4WjAzMTEwLwYDVQQD
EyhkNDk4YjEwZDMzZGZjMGQ5M2NhYzI5ZjYxZmMyOGRhYjc1YjAzMzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmDJRxpOf059yrSjJRHCK7foSqRc
iEEOzf5ZJpgjvKnJD6/z9a2EiUap0+yODvu+qxRsEGjPCo3d34dxa5NPB3J6ULEw
TE4++LPdXzrE7LhALnk2rP8aLHTBWZiLbq5lOyfm322g8vtIZXh/U+bCyFFGmXEs
QZitxngRis1sCLRfFiuSNoU1TGhE0lLH2BIREpy5Cti7iLGlN+jtu3XPfH3b5JEC
GVXd2Vl9MR4PAErBIlQdEeuinRQMueHtwW73PrvKVdn7OEYvZO4tOP77RtUcQER5
Vigayo7FadesgXjxSQOn8ooPEZSc7cSCifvZn70UJEYNU1um4TLocFn90wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSYsQ0z38DZPKwp9h/Cjat1sDNYMB8GA1UdIwQY
MBaAFAmfEvP6cxHNmTq2vFuymhvyrUihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mNTllZTEtNmFmZS00ZTM4LWI5OTUt
NDE5YjU3MjNlZWY5LzEvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mNTllZTEtNmFmZS00ZTM4LWI5OTUtNDE5YjU3MjNlZWY5
LzEvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcrKNMDF
s65aw0+VMkrzloezhZDSIVxfRmZotYy95zbCcdJ8wxP5uKIdJocmnAFgBg7rY80C
6lXsUvOl6IuHtkgyYVCGbCWANkUJBC9OBOqMoaYknKxaVFme/Ot7zY0ZNEpAo84K
49Hvm1IkWIDIFRhhEnNLX9GWqRXeyfHE5sfRh/QASibUdKnT0umsFOf7s0UC3aiO
bvBbdUkCMlEhN3QvBarpzPnVzSa4Oz4eiSGmOk4urXndBOozUNBbntiB7h2wrS+r
lO8gH75IkvbE8cPJ5RMWBtbHnQt0RrNY6NzzN6Y0R8cPjAmKy611SOrOMqEIS5J7
22FSREcH/twZZw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 19:51:49 2026 by rpki-client