Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
File: CZ05RkE90RFhtGx99q02Kpk41dQ.mft (raw, json)
Hash identifier: qeevaFg2BjIkh3K8kEIHnzff+/dND3LaxEimcETnpu8=
Subject key identifier: F2:20:B7:FE:19:C5:B8:FC:FE:BF:04:2C:D7:96:69:43:F5:A5:28:98
Authority key identifier: 09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
Certificate issuer: /CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Certificate serial: 019EBD6C45514B4839C933BBBEC1CC745087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
Manifest number: 072B
Signing time: Fri 12 Jun 2026 20:00:49 +0000
Manifest this update: Fri 12 Jun 2026 20:00:49 +0000
Manifest next update: Sat 13 Jun 2026 20:00:49 +0000
Files and hashes: 1: 2YAgI74gbNqNd4cR2a1xK7IpNo0.roa (hash: UfaVQLtUsjyfgahDcdhJ4KwcH3jtGHAp5uCPoj3a35Q=)
2: CZ05RkE90RFhtGx99q02Kpk41dQ.crl (hash: FoPjbWEHMLqb9UmBa94bDXjPONO89XHOgEfd1KO+2jE=)
3: eO4OXeTBNdp3Wk5KjPR2B_e07OI.asa (hash: vSPUOrqLSS1QDlHSmyS6Ip+i1a344wmk09R05jnzxf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:6c:45:51:4b:48:39:c9:33:bb:be:c1:cc:74:50:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Validity
Not Before: Jun 12 20:00:49 2026 GMT
Not After : Jun 13 20:00:49 2026 GMT
Subject: CN=f220b7fe19c5b8fcfebf042cd7966943f5a52898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7c:3b:4b:bf:9d:30:8b:bb:40:62:f6:dd:58:
72:39:5a:9c:e2:69:f5:56:3c:9e:fd:61:8e:ba:ea:
17:d5:8c:af:07:9b:09:8d:92:bd:8a:82:2f:09:6d:
ac:6e:29:3b:b5:b4:4d:a1:3b:f8:15:ee:d3:57:c0:
40:41:f6:5c:27:15:44:ae:86:f8:c3:82:21:a7:77:
5b:cc:52:26:6e:b9:36:52:c8:51:ef:db:14:d2:f2:
fd:79:ca:43:c2:cc:8f:5e:73:38:c4:53:58:bf:32:
89:c4:d9:39:89:52:d0:03:e4:6f:78:a2:9e:af:75:
a6:28:ae:f3:3e:be:10:5f:30:61:87:88:7a:07:5c:
ef:be:15:91:3e:54:4b:7c:b4:77:8d:db:7d:3f:81:
20:9b:46:dd:c2:43:c2:13:bd:ae:a1:20:3d:3d:5c:
b6:a3:b1:32:a1:d4:6b:38:42:8e:ea:23:a4:32:4e:
fb:2e:f7:92:f1:e3:2e:87:db:76:5f:d8:77:a8:25:
80:54:d0:ea:52:47:01:fe:a2:28:eb:aa:76:c7:a2:
f5:79:d1:19:6e:fd:67:e8:4a:23:7c:3d:72:86:2c:
3e:3d:a7:46:89:1b:fd:2d:b9:b9:90:f5:2e:df:fc:
32:e1:c7:b3:d4:d1:3e:ae:38:32:0b:75:9e:c2:68:
56:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:20:B7:FE:19:C5:B8:FC:FE:BF:04:2C:D7:96:69:43:F5:A5:28:98
X509v3 Authority Key Identifier:
keyid:09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a1:76:e0:5b:95:ad:3c:c0:fa:6f:e1:31:30:0f:aa:df:0e:
e6:11:c4:f9:f7:cb:36:bc:9a:ae:24:c9:b6:b1:99:24:13:9d:
19:ef:ca:4d:28:8e:29:62:d9:21:98:a0:80:c1:5c:39:2c:ac:
b6:57:b3:37:90:14:58:22:af:92:ea:11:45:f4:39:4e:9a:7a:
d8:12:e6:f3:f6:11:76:42:4b:7b:81:23:97:fc:f4:3e:fc:15:
4f:13:33:a1:24:46:94:71:a0:1c:a1:2b:4d:79:5e:8b:74:36:
9e:31:dd:41:04:bb:95:ec:20:35:cb:bf:28:b1:23:ad:1e:af:
23:6f:0c:0e:7f:13:11:68:b5:5a:8f:b3:91:f6:d2:40:1d:20:
76:f3:27:00:fd:57:fe:6a:bd:8a:4b:4b:2a:46:f5:02:10:c8:
fb:b5:fd:2e:95:e3:ad:32:54:37:60:c2:f5:64:46:97:f6:4a:
d8:76:6b:70:12:d2:f6:8b:66:cd:71:7d:a3:e7:67:31:56:58:
c8:02:8a:47:ba:66:d2:c9:74:f6:6d:0d:43:bb:fe:07:48:7b:
e2:25:d1:74:73:a1:03:b8:26:75:66:6c:2c:6f:df:85:ab:e5:
ce:e2:b4:f6:34:4e:ea:60:80:7f:cd:fc:fc:32:43:ce:f0:c6:
6d:5d:13:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:48:17 2026 by rpki-client