Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
File: CZ05RkE90RFhtGx99q02Kpk41dQ.mft (raw, json)
Hash identifier: LtbALPozr/YF/hx5TIUgk8OkJn31PO3sVtb+cWw4+yM=
Subject key identifier: 4D:A3:A9:A4:8E:7A:95:5B:19:AA:35:6D:62:E2:1A:34:1D:ED:8A:F5
Authority key identifier: 09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
Certificate issuer: /CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Certificate serial: 019FA90723277130B5DC2D83EF752DCA0638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
Manifest number: 07A5
Signing time: Tue 28 Jul 2026 14:00:44 +0000
Manifest this update: Tue 28 Jul 2026 14:00:44 +0000
Manifest next update: Wed 29 Jul 2026 14:00:44 +0000
Files and hashes: 1: 2YAgI74gbNqNd4cR2a1xK7IpNo0.roa (hash: UfaVQLtUsjyfgahDcdhJ4KwcH3jtGHAp5uCPoj3a35Q=)
2: CZ05RkE90RFhtGx99q02Kpk41dQ.crl (hash: yS4xy8iF/rxavWdFc+07PIa/rT2xfXcXq6ZjlGLcYOU=)
3: eO4OXeTBNdp3Wk5KjPR2B_e07OI.asa (hash: vSPUOrqLSS1QDlHSmyS6Ip+i1a344wmk09R05jnzxf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:23:27:71:30:b5:dc:2d:83:ef:75:2d:ca:06:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Validity
Not Before: Jul 28 14:00:44 2026 GMT
Not After : Jul 29 14:00:44 2026 GMT
Subject: CN=4da3a9a48e7a955b19aa356d62e21a341ded8af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:64:6f:42:ef:ca:68:ba:6d:40:cb:3d:00:
35:07:a2:f4:33:c0:1b:f3:7d:86:23:84:d4:f5:27:
cf:55:f8:c9:53:9a:a4:3d:fb:73:09:3c:61:50:bf:
59:4b:31:2f:05:99:64:8d:b6:1f:6a:eb:28:33:1e:
14:bd:75:d6:89:77:d8:16:c5:c9:d9:fa:e7:18:49:
94:88:4c:24:23:a5:08:24:c3:58:03:5c:88:bc:95:
f7:48:17:99:12:90:a8:4e:88:e4:32:70:d4:5a:2a:
f7:10:1d:06:7d:a5:a7:5a:ac:bc:84:d4:48:70:38:
23:3e:46:b0:c9:c0:f0:22:6d:38:45:64:32:dc:71:
04:70:51:b6:bd:6a:99:79:43:6b:16:db:55:f9:56:
c3:08:78:90:21:e8:b7:d5:44:7f:af:4f:53:a3:dd:
79:92:23:31:62:3b:c3:f7:a4:29:f4:e2:9a:90:47:
08:64:ad:41:c0:9a:b3:9b:4a:3e:bf:5f:de:a3:f5:
5a:3e:16:28:00:96:84:61:a5:b5:f7:e8:c0:67:98:
be:ea:46:3b:d4:67:f7:ee:21:da:52:aa:37:70:70:
a9:a7:a1:ec:1e:32:b7:a8:b8:2f:b2:18:6e:8a:dd:
37:3d:75:90:ac:37:ed:b3:98:39:5a:3f:0d:5b:33:
61:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A3:A9:A4:8E:7A:95:5B:19:AA:35:6D:62:E2:1A:34:1D:ED:8A:F5
X509v3 Authority Key Identifier:
keyid:09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:2d:6e:8f:1d:b9:52:52:6c:f5:38:7c:38:27:f4:bc:56:51:
0f:b8:f6:ab:e0:03:82:79:f6:a9:c3:95:69:83:cd:fb:1a:35:
40:77:bc:c1:63:dd:48:6c:dd:55:8f:b3:94:7d:92:1b:5d:b7:
8b:be:29:66:b7:fd:5c:f3:ac:66:55:85:d6:ec:66:bf:cb:ec:
98:18:4a:bc:03:b4:46:27:17:ba:10:67:dc:a6:2c:0d:65:1a:
ed:83:d4:62:ba:34:fc:ce:8c:48:b4:22:9a:66:0d:64:ca:0f:
ea:67:2f:65:b2:50:8b:87:bf:15:12:8a:c8:9a:5b:38:30:92:
f5:63:af:5a:b3:5e:af:15:99:0e:ad:36:fc:5b:29:52:8b:dc:
af:54:c1:05:b5:e8:d4:94:e8:cd:10:3b:cc:62:6e:92:5f:ff:
a1:50:8f:04:72:d5:cf:0a:3f:3c:78:7a:6c:5d:29:4a:cb:e1:
e1:ad:6e:68:29:a5:e6:23:c5:ba:62:64:4c:d8:f3:67:19:c4:
4d:dd:26:28:ab:eb:93:06:73:89:01:4d:1a:e4:ed:0c:4b:22:
b9:fd:a6:64:ee:d1:7b:92:5e:e0:96:8d:c1:28:1e:37:7b:53:
64:52:8a:81:7d:ae:90:c6:b5:56:7e:9b:f4:ce:88:79:ba:2b:
29:9a:98:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pByMncTC13C2D73UtygY4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OWQzOTQ2NDEzZGQxMTE2MWI0NmM3ZGY2YWQzNjJhOTkz
OGQ1ZDQwHhcNMjYwNzI4MTQwMDQ0WhcNMjYwNzI5MTQwMDQ0WjAzMTEwLwYDVQQD
Eyg0ZGEzYTlhNDhlN2E5NTViMTlhYTM1NmQ2MmUyMWEzNDFkZWQ4YWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq19kb0Lvymi6bUDLPQA1B6L0M8Ab
832GI4TU9SfPVfjJU5qkPftzCTxhUL9ZSzEvBZlkjbYfausoMx4UvXXWiXfYFsXJ
2frnGEmUiEwkI6UIJMNYA1yIvJX3SBeZEpCoTojkMnDUWir3EB0GfaWnWqy8hNRI
cDgjPkawycDwIm04RWQy3HEEcFG2vWqZeUNrFttV+VbDCHiQIei31UR/r09To915
kiMxYjvD96Qp9OKakEcIZK1BwJqzm0o+v1/eo/VaPhYoAJaEYaW19+jAZ5i+6kY7
1Gf37iHaUqo3cHCpp6HsHjK3qLgvshhuit03PXWQrDfts5g5Wj8NWzNhZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2jqaSOepVbGao1bWLiGjQd7Yr1MB8GA1UdIwQY
MBaAFAmdOUZBPdERYbRsffatNiqZONXUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1owNVJrRTkwUkZodEd4OTlxMDJLcGs0MWRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84NTY0NDMtYjhmYi00NzhlLTg3Yzkt
Y2Y1MmFhOWQ2Y2NjLzEvQ1owNVJrRTkwUkZodEd4OTlxMDJLcGs0MWRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC84NTY0NDMtYjhmYi00NzhlLTg3YzktY2Y1MmFhOWQ2Y2Nj
LzEvQ1owNVJrRTkwUkZodEd4OTlxMDJLcGs0MWRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAny1ujx25
UlJs9Th8OCf0vFZRD7j2q+ADgnn2qcOVaYPN+xo1QHe8wWPdSGzdVY+zlH2SG123
i74pZrf9XPOsZlWF1uxmv8vsmBhKvAO0RicXuhBn3KYsDWUa7YPUYro0/M6MSLQi
mmYNZMoP6mcvZbJQi4e/FRKKyJpbODCS9WOvWrNerxWZDq02/FspUovcr1TBBbXo
1JTozRA7zGJukl//oVCPBHLVzwo/PHh6bF0pSsvh4a1uaCml5iPFumJkTNjzZxnE
Td0mKKvrkwZziQFNGuTtDEsiuf2mZO7Re5Je4JaNwSgeN3tTZFKKgX2ukMa1Vn6b
9M6IeborKZqYig==
-----END CERTIFICATE-----
Generated at Tue Jul 28 16:00:58 2026 by rpki-client