Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json)
Hash identifier: aHwhQsso0jGZfm3xUTl7+7PS7abWnZauKKQHC9g0JqY=
Subject key identifier: 3B:DD:1C:B5:66:1D:C4:8F:F6:C2:39:78:B1:19:D2:06:B1:8A:97:6E
Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786
Certificate serial: 019EBEEC53EEDF5BC5E898C824CD22B58CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
Manifest number: 0774
Signing time: Sat 13 Jun 2026 03:00:19 +0000
Manifest this update: Sat 13 Jun 2026 03:00:19 +0000
Manifest next update: Sun 14 Jun 2026 03:00:19 +0000
Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: ppS+XK8iIFLVojA9yxwv3ILTD+K6YA0JedToEdO6tug=)
2: G33itK1qq3WeYfI2JZv_Df-F-kM.roa (hash: M48oQ7e0L/CLHTbH2STVHWlHyf+bv796hviSQB+beow=)
3: lSqq2t5j5uhQNwBWbI6WL7tpfgY.roa (hash: O4mt9ymqocsZDQGjjG1ro7L0no6+r2S8A/5/+O3vsZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:53:ee:df:5b:c5:e8:98:c8:24:cd:22:b5:8c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099da06b80fa749068028b597be3e50e8b118786
Validity
Not Before: Jun 13 03:00:19 2026 GMT
Not After : Jun 14 03:00:19 2026 GMT
Subject: CN=3bdd1cb5661dc48ff6c23978b119d206b18a976e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2d:71:dd:b2:ea:58:49:e3:b4:bf:74:a4:1e:
f4:71:03:67:61:10:06:1d:cf:5d:e5:80:47:d7:1a:
a0:51:59:80:2c:89:ac:43:cc:45:79:ca:da:fb:7e:
62:0f:cb:dc:a6:45:8c:93:c3:ef:83:5f:23:11:b7:
d9:a0:13:fd:fa:22:ae:0c:30:47:15:bf:7b:08:91:
a5:4f:f4:5f:aa:45:e3:4b:53:8a:e8:b0:f0:a6:22:
80:e7:1c:73:77:83:11:7c:5a:99:c8:a4:61:5e:2c:
92:58:58:58:78:53:7d:ca:47:92:af:ab:2b:11:d3:
a3:ed:70:d1:e9:70:0a:dc:12:d7:7a:aa:9e:b2:c2:
d1:04:2d:b4:ca:38:b4:42:fa:80:ea:f7:3a:ba:6d:
00:89:72:22:4c:cf:fa:64:01:d5:ec:ec:d7:ff:06:
3e:ce:41:ed:c9:cc:dd:00:1e:68:43:50:80:3d:3d:
3a:2c:64:1a:52:7e:78:2b:03:0a:0f:23:c9:b6:c3:
62:3c:c7:2c:20:e7:c9:01:85:89:53:fc:2c:e3:17:
4e:35:98:cb:72:30:51:14:4a:31:0a:79:5f:f9:ac:
14:2b:e2:11:04:16:d7:3c:cf:ac:ff:93:f7:9a:61:
e8:9b:41:50:df:cd:70:04:cf:15:5a:61:71:66:8a:
4a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DD:1C:B5:66:1D:C4:8F:F6:C2:39:78:B1:19:D2:06:B1:8A:97:6E
X509v3 Authority Key Identifier:
keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e0:d3:54:57:55:36:5e:8e:c1:5e:f4:b2:0b:0b:d9:fe:e7:
ec:e5:3a:08:ec:0b:2e:d3:f8:26:ca:47:d9:b7:1b:b8:6c:82:
1d:39:d9:72:8b:49:30:1f:fb:5c:a9:e7:d3:0c:ad:fb:ab:0e:
0f:77:9a:dd:f8:a7:e8:90:d4:77:7a:87:41:00:77:42:6d:8d:
92:ae:55:8d:cc:fe:6a:89:ae:c3:48:2f:eb:07:8c:75:47:4d:
11:11:2d:8d:23:3b:47:b5:d3:66:57:f1:05:22:69:00:47:31:
56:80:27:08:92:04:32:f7:01:46:a6:ea:f5:d9:c8:63:18:e1:
95:7d:10:8a:73:3f:b6:41:88:65:84:06:55:34:e6:15:16:9f:
52:cd:7c:64:86:3a:f9:51:d7:4f:96:c4:e5:72:3a:24:52:2e:
6e:36:3d:fc:2d:74:2d:a3:14:5c:04:73:62:ec:d5:0e:11:dc:
c2:72:eb:7d:1e:d7:1a:fe:00:4e:5c:3f:1e:f6:6c:59:57:3d:
e5:e9:9e:e0:4b:80:8e:77:86:dd:dd:37:e0:89:39:28:11:92:
7e:b9:64:9d:f5:4f:a1:18:31:f6:89:53:ee:04:a7:61:d3:97:
ec:84:c2:d0:18:d3:04:bf:18:08:82:45:f7:0b:fc:13:a1:ce:
1e:9b:f6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:17:58 2026 by rpki-client