Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
File: CZ05RkE90RFhtGx99q02Kpk41dQ.mft (raw, json)
Hash identifier: LZP+uSjQrkFDP/A13BNRJBHzWRiv9Q8o1zW868fQcyw=
Subject key identifier: 86:A5:E0:C8:4B:80:09:4A:EA:C5:4C:7A:B7:A5:A0:72:91:BA:EC:E0
Authority key identifier: 09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
Certificate issuer: /CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Certificate serial: 01A0C2FB6DAA2A97BCAB549969C34B687F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
Manifest number: 0837
Signing time: Mon 21 Sep 2026 08:00:52 +0000
Manifest this update: Mon 21 Sep 2026 08:00:52 +0000
Manifest next update: Tue 22 Sep 2026 08:00:52 +0000
Files and hashes: 1: 2YAgI74gbNqNd4cR2a1xK7IpNo0.roa (hash: UfaVQLtUsjyfgahDcdhJ4KwcH3jtGHAp5uCPoj3a35Q=)
2: CZ05RkE90RFhtGx99q02Kpk41dQ.crl (hash: AoePH9eH8PSP5QPILzxFDjnIF5MKAy+60vD63pNO6N0=)
3: eO4OXeTBNdp3Wk5KjPR2B_e07OI.asa (hash: vSPUOrqLSS1QDlHSmyS6Ip+i1a344wmk09R05jnzxf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:6d:aa:2a:97:bc:ab:54:99:69:c3:4b:68:7f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Validity
Not Before: Sep 21 08:00:52 2026 GMT
Not After : Sep 22 08:00:52 2026 GMT
Subject: CN=86a5e0c84b80094aeac54c7ab7a5a07291baece0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6c:9f:11:c1:64:99:e5:ad:57:fb:0e:a4:66:
7f:30:92:77:7e:c9:00:a2:0e:f7:a4:96:c4:1b:1b:
3f:ff:51:94:89:03:f9:82:41:aa:26:cf:9f:8f:a0:
d5:c3:09:86:0a:e0:38:c9:3d:03:17:e3:15:68:e7:
be:0f:53:ae:c5:bf:f6:b3:a4:17:38:8e:d8:e2:2d:
ac:93:8e:90:98:c8:bb:09:15:9b:a9:ad:d0:e8:2f:
6a:6f:a7:e0:a7:ee:39:44:aa:77:07:6a:8b:a4:7e:
ae:59:96:f0:35:cb:28:20:0d:ee:62:f8:b3:b7:da:
26:55:6e:bc:63:7d:75:1c:b2:35:73:40:e6:50:dd:
19:28:f4:d6:34:f3:46:6d:e4:fe:f7:e7:ac:fe:26:
bf:f3:2b:81:c6:fd:60:0a:52:6a:ce:7b:c6:7d:35:
ed:1e:0d:ac:e6:4e:11:0f:1c:db:14:00:49:d2:12:
19:d8:84:ca:7f:9d:1e:f2:64:f9:9a:a8:cf:0f:d2:
d2:75:94:81:c3:e3:00:34:11:26:03:e1:4d:e1:d7:
de:5d:b3:62:3d:58:b3:68:47:63:c4:1d:a5:71:71:
7a:25:25:a5:b0:57:97:b1:b6:2a:0a:50:5b:2b:06:
b8:ef:c4:20:e6:d2:60:54:3e:d8:9c:dc:d4:d8:a9:
40:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A5:E0:C8:4B:80:09:4A:EA:C5:4C:7A:B7:A5:A0:72:91:BA:EC:E0
X509v3 Authority Key Identifier:
keyid:09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:6f:6f:3b:12:94:32:12:05:90:1a:09:b0:51:d2:5a:35:61:
19:b6:ff:e2:37:2f:83:37:7d:29:db:10:e6:4c:7d:99:e1:46:
05:04:ec:7e:14:ca:4a:20:76:17:ac:36:7a:47:26:79:9d:8c:
33:b6:b6:f9:ab:38:f9:a1:df:84:e7:ec:f8:7f:2b:1a:ee:45:
6a:fa:66:de:59:95:40:37:49:7d:8f:1e:a5:84:8a:28:5e:3d:
f1:5d:b4:d5:28:b3:8f:4f:b9:d0:6a:9b:57:99:8b:2e:ef:54:
dc:7e:e5:48:fc:d3:38:83:a0:e7:16:ab:75:6e:ae:17:11:95:
0d:e3:1a:61:80:6f:16:9b:8d:4d:c9:10:bd:a8:08:ba:ba:9c:
2e:7e:67:4f:9b:db:f2:bf:75:8c:70:51:bb:ce:bd:5f:92:86:
f6:4d:05:ef:66:0f:5c:dc:c2:41:ed:c6:45:cb:88:9c:71:4c:
08:23:16:7e:cb:d9:cb:51:6e:25:b9:19:3a:49:41:48:53:64:
ae:b9:e3:c8:bf:56:69:97:a8:19:01:d9:8a:90:9a:73:c3:4e:
76:2a:43:a3:50:e4:b8:58:16:be:4e:78:59:2b:21:57:3c:3e:
52:50:ee:aa:37:c0:d0:9e:45:d3:1c:92:ec:c0:bf:b3:90:08:
e9:8f:1f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:53:46 2026 by rpki-client