Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json)
Hash identifier: Z13iwOvhAhzcP+nuDJU4iY3pDlJeRp/WOt8JT2AMSGw=
Subject key identifier: E3:63:FA:52:6E:05:96:E0:46:7F:F8:1C:7F:64:BC:31:F5:D6:F0:6D
Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786
Certificate serial: 019D9962300E88C41A21FA7574C79CDEADE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
Manifest number: 06DC
Signing time: Fri 17 Apr 2026 03:00:42 +0000
Manifest this update: Fri 17 Apr 2026 03:00:42 +0000
Manifest next update: Sat 18 Apr 2026 03:00:42 +0000
Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: 2bF/1KxauNxtAb+5U9vV2XewTNcmoMMb/5NgcnLMb3w=)
2: G33itK1qq3WeYfI2JZv_Df-F-kM.roa (hash: M48oQ7e0L/CLHTbH2STVHWlHyf+bv796hviSQB+beow=)
3: lSqq2t5j5uhQNwBWbI6WL7tpfgY.roa (hash: O4mt9ymqocsZDQGjjG1ro7L0no6+r2S8A/5/+O3vsZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:30:0e:88:c4:1a:21:fa:75:74:c7:9c:de:ad:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099da06b80fa749068028b597be3e50e8b118786
Validity
Not Before: Apr 17 03:00:42 2026 GMT
Not After : Apr 18 03:00:42 2026 GMT
Subject: CN=e363fa526e0596e0467ff81c7f64bc31f5d6f06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7a:62:eb:40:3f:ef:5d:9f:d8:18:d6:5d:3b:
46:9d:b5:2b:96:0f:52:30:19:6f:a4:cd:9f:26:5c:
38:ea:46:71:ec:e1:10:8e:d9:28:d4:ab:25:2d:86:
2c:f4:57:31:d5:d7:a7:e7:8a:ad:fa:c6:c1:00:2b:
f4:45:0b:68:1c:63:c5:31:25:7e:ee:d2:ba:92:21:
54:db:89:55:51:63:d0:a2:e6:f7:b6:43:e0:85:2d:
f3:4e:9a:d3:e9:cf:4d:8c:4f:b1:bd:48:cc:ef:25:
71:7b:1c:15:35:c0:0b:46:bd:1a:14:d2:c2:52:1a:
a7:61:14:52:cd:2c:42:b0:05:28:2f:c4:bf:08:ae:
6b:d0:14:9e:c7:cb:90:29:9e:8c:29:0f:35:8a:31:
77:0d:9c:4f:90:b6:c7:a7:5b:7a:73:82:da:2d:a0:
a3:d7:ba:e2:ae:a4:78:72:6e:a2:32:61:dd:6a:f1:
92:af:3e:ab:86:6b:93:aa:93:43:13:3a:54:b3:dc:
fa:4d:18:a4:8d:17:ca:59:68:16:35:38:8e:05:08:
f8:f9:40:58:68:7b:1b:e1:6b:33:fa:ca:b4:1a:9c:
5d:60:05:fc:4b:9b:49:e0:cc:3a:25:b9:6b:83:29:
fa:1a:32:ed:13:61:6e:a9:db:cc:17:ce:e6:f3:e3:
c4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:63:FA:52:6E:05:96:E0:46:7F:F8:1C:7F:64:BC:31:F5:D6:F0:6D
X509v3 Authority Key Identifier:
keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:7c:70:dd:51:ce:a7:64:6c:18:58:8b:26:12:3e:c8:d8:41:
59:54:0a:e2:4c:a6:16:57:3b:ae:a1:62:62:6e:a3:87:f4:12:
29:f0:da:b0:79:ef:27:54:75:ed:a7:c4:c3:cb:d2:b2:53:b8:
b8:8d:6f:2a:c0:5e:04:90:6a:2a:86:6f:33:0a:23:8e:fc:e0:
a9:3a:3f:c6:8e:f8:0e:98:28:28:81:7b:1f:5c:ce:0a:9d:0f:
74:c8:c3:e5:ae:83:47:4f:3a:6d:df:89:8e:7b:07:f7:59:67:
1a:2a:53:35:fc:fa:cb:c8:2d:61:5a:ea:68:3b:98:56:40:b4:
19:8e:c6:96:e0:7d:a2:6a:2c:fd:9a:cd:59:83:d9:b5:5c:c9:
15:79:9d:2c:44:38:2a:ae:85:0a:c3:91:a0:a9:12:d9:63:4a:
2c:c6:ed:ac:66:45:ca:26:ea:2e:34:1a:4c:61:fe:a5:b9:aa:
a9:77:97:d4:e5:06:0e:62:66:b7:a2:ef:5a:8b:8b:d2:d5:5a:
8c:6c:32:bf:75:80:27:32:93:08:70:e9:e7:7d:98:05:d2:88:
c4:e7:8d:fa:c9:c6:3e:79:61:b4:5b:56:dd:d6:7f:5d:91:34:
49:8f:af:6b:cf:9b:f5:71:b7:75:5b:85:b7:16:f6:be:dc:7c:
1c:b2:ed:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:56:04 2026 by rpki-client