Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json)
Hash identifier: lKKRtxHGiWQpimj3crnEeYkLtZRYqruT8cQvVq0ovns=
Subject key identifier: FA:E0:59:B5:CB:20:84:6E:52:18:A6:4F:52:94:14:7E:CD:A8:A3:8A
Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786
Certificate serial: 01A0C28E02D0E25DBB3535D5CF373ABACB53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
Manifest number: 087F
Signing time: Mon 21 Sep 2026 06:01:21 +0000
Manifest this update: Mon 21 Sep 2026 06:01:21 +0000
Manifest next update: Tue 22 Sep 2026 06:01:21 +0000
Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: +gx0Tn1B4Cx6XwIRoTg7y3ERXnDJVW4c7UsPtPoU2O0=)
2: G33itK1qq3WeYfI2JZv_Df-F-kM.roa (hash: M48oQ7e0L/CLHTbH2STVHWlHyf+bv796hviSQB+beow=)
3: lSqq2t5j5uhQNwBWbI6WL7tpfgY.roa (hash: O4mt9ymqocsZDQGjjG1ro7L0no6+r2S8A/5/+O3vsZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8e:02:d0:e2:5d:bb:35:35:d5:cf:37:3a:ba:cb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099da06b80fa749068028b597be3e50e8b118786
Validity
Not Before: Sep 21 06:01:21 2026 GMT
Not After : Sep 22 06:01:21 2026 GMT
Subject: CN=fae059b5cb20846e5218a64f5294147ecda8a38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:38:47:8a:e1:3d:f6:53:a2:31:21:bd:b9:79:
39:f0:b2:38:08:f3:51:8a:f8:af:07:73:e1:02:cd:
01:5e:88:10:31:12:e8:2a:5c:08:88:c8:65:7a:d9:
ca:0a:4d:f7:1f:b4:be:9f:df:c0:2a:c7:7e:01:8d:
b6:7b:2a:9f:90:cd:dc:d4:5c:55:66:77:2e:8c:5f:
af:d5:70:2a:c8:a2:0b:b7:96:6d:21:b9:41:98:47:
bb:91:e9:15:85:42:c7:4f:b4:5b:3d:6d:8d:df:b6:
94:92:5b:53:b9:d5:28:5c:ee:83:a9:13:e4:dd:5f:
e8:a7:60:7f:3b:ff:f6:6c:c7:1f:7b:1e:67:92:e8:
30:a0:d0:6d:b5:b4:cc:84:10:f1:88:d7:95:72:fe:
23:27:28:6c:62:71:e0:f1:4c:fd:b5:ce:e4:70:63:
bc:5d:bd:7f:d2:81:e7:45:27:98:a4:1a:60:54:67:
bd:06:ea:8b:78:11:7d:e1:7a:c8:b3:df:2f:2c:a0:
f7:68:c4:80:3f:f2:3f:f1:b1:bb:ae:db:93:24:6d:
34:f7:cf:71:80:ff:13:00:34:46:ad:7a:43:eb:c3:
a8:c3:de:6f:90:cc:1a:fe:4f:78:ae:e0:f6:c0:36:
b8:e0:e5:08:2f:a5:9f:5e:4b:bc:87:93:ed:be:90:
d2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E0:59:B5:CB:20:84:6E:52:18:A6:4F:52:94:14:7E:CD:A8:A3:8A
X509v3 Authority Key Identifier:
keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0c:e1:0b:7c:fb:56:cd:4f:82:ba:4d:43:ee:70:66:4e:21:
ab:bb:4f:68:88:4e:5f:04:1b:5d:0f:59:1e:77:5b:18:74:11:
27:e4:f3:e2:cb:f6:bc:a7:45:c9:4b:88:32:84:66:5c:89:68:
45:93:ea:b8:f3:a0:cd:b5:05:a2:28:7a:55:dd:da:54:60:fe:
8b:c5:a1:88:14:5c:b1:1c:4f:d4:e9:2d:f1:65:3e:4e:f0:7b:
22:59:ef:84:be:69:5f:8a:52:0a:b7:c1:8a:2f:6b:16:03:37:
aa:ab:46:6d:e6:98:a2:20:3e:7d:9f:5e:4c:f3:9f:cf:ea:39:
f3:6c:2d:e2:0b:0c:d1:59:d9:f1:78:26:31:3a:b9:50:3c:a5:
f2:d5:00:0d:55:3b:bc:99:c3:ea:c3:01:3c:ad:cc:0e:44:2d:
e4:44:b3:6b:af:68:c0:0e:55:cd:48:dc:65:62:9a:7e:d5:02:
b4:5a:44:87:20:06:39:7a:a0:0c:e3:e8:10:6f:3a:e2:f7:c3:
da:44:92:85:a9:5f:48:7f:8e:ab:2b:29:13:93:ed:ee:f0:06:
8c:ab:59:19:aa:7a:96:9b:84:14:22:02:8e:a7:38:38:ca:a4:
09:df:26:a7:be:b3:7c:87:18:7f:b0:6a:18:97:b9:d2:d7:45:
29:96:f3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:47:27 2026 by rpki-client