Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json)
Hash identifier: FzKysBfPl1MU/OwcQp3O7pKV993hVe3IfvTxLA20F90=
Subject key identifier: A8:7A:9D:FB:F6:AA:20:78:C3:81:3B:1C:CE:BB:65:CF:9B:9B:E7:16
Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786
Certificate serial: 019CABD9B601EA0D25E2E9BF02B41827A681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
Manifest number: 0661
Signing time: Mon 02 Mar 2026 00:01:37 +0000
Manifest this update: Mon 02 Mar 2026 00:01:37 +0000
Manifest next update: Tue 03 Mar 2026 00:01:37 +0000
Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: Jh3fEvfltJFEVymhzksnOMdF3bb3IN2+arfUi3QHbVQ=)
2: G33itK1qq3WeYfI2JZv_Df-F-kM.roa (hash: M48oQ7e0L/CLHTbH2STVHWlHyf+bv796hviSQB+beow=)
3: lSqq2t5j5uhQNwBWbI6WL7tpfgY.roa (hash: O4mt9ymqocsZDQGjjG1ro7L0no6+r2S8A/5/+O3vsZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:b6:01:ea:0d:25:e2:e9:bf:02:b4:18:27:a6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099da06b80fa749068028b597be3e50e8b118786
Validity
Not Before: Mar 2 00:01:37 2026 GMT
Not After : Mar 3 00:01:37 2026 GMT
Subject: CN=a87a9dfbf6aa2078c3813b1ccebb65cf9b9be716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ec:40:b1:60:71:79:8d:43:18:a0:c5:d9:b9:
33:92:7b:79:c1:23:fc:e2:76:ef:5c:48:26:1e:ae:
1e:f0:10:aa:52:b2:11:80:6c:81:9a:f8:0f:80:93:
29:da:f3:36:96:e2:23:dd:89:92:16:59:46:93:24:
61:11:ed:e7:ff:f2:ff:17:25:1e:47:3f:2c:5d:e2:
9e:72:7c:cb:75:79:d7:48:44:fa:31:f4:fe:7e:f2:
df:ae:50:94:6f:b6:8c:ca:d1:bf:15:8c:07:dd:38:
54:de:51:68:53:d6:df:09:f2:ba:8f:0e:58:b2:35:
f8:de:c2:f3:77:7a:d3:78:8e:05:08:af:ab:08:69:
53:cb:f9:ee:24:51:0e:08:42:5d:3a:2b:c2:75:aa:
fe:86:e6:b1:2c:11:18:1e:52:ca:4d:8f:94:d9:42:
56:4a:df:dd:f1:67:60:9b:55:80:da:77:79:a9:7c:
9d:2f:f1:a0:aa:e9:92:09:29:84:74:72:14:f4:7a:
da:73:29:4f:04:86:be:a1:ad:37:31:c5:be:d6:cf:
5e:43:0c:a0:a3:33:e3:58:ac:62:66:ef:6b:b1:ab:
2d:9b:a1:ae:5d:4b:81:1f:9c:d4:b0:27:d0:35:92:
85:df:ab:66:5b:1a:6b:5f:02:cd:d0:7e:6f:80:f4:
e4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7A:9D:FB:F6:AA:20:78:C3:81:3B:1C:CE:BB:65:CF:9B:9B:E7:16
X509v3 Authority Key Identifier:
keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:11:56:eb:59:f3:3f:78:cd:b6:01:7b:82:20:d9:2b:ed:57:
c8:19:50:a3:c0:55:d3:9b:64:7a:53:89:bf:cd:10:08:95:ae:
14:7c:c1:62:0e:61:f0:ea:50:82:35:2a:ff:54:15:3b:ba:48:
05:ac:a0:f3:b3:30:dc:40:f2:15:ae:ca:51:d9:e1:68:46:16:
35:55:7b:e9:95:ca:34:07:00:2d:46:1c:6e:d0:a9:65:97:7f:
30:ee:69:92:f5:1e:4a:61:f0:86:e2:bf:74:1c:20:b4:df:dc:
53:31:1c:05:80:94:f4:9f:a8:0b:95:21:43:db:f9:fb:0a:5a:
e3:52:40:d7:15:a3:85:bc:0a:9d:f6:0d:ba:f4:e2:73:2e:81:
13:4e:fd:2e:62:d9:66:50:a0:26:a0:63:b5:62:ef:27:0d:68:
50:b9:9b:53:32:16:c2:74:0c:2e:80:87:a0:d0:d2:c5:7d:29:
4a:2c:f6:8e:71:c9:2e:3d:f2:34:a4:be:bd:92:52:5b:02:d4:
55:7e:57:0c:48:2e:42:86:39:cd:b2:ca:fe:30:8b:0a:ab:65:
0b:3c:90:44:54:82:ce:28:ff:28:e5:bc:81:98:97:58:70:ec:
42:44:99:6c:b7:32:b6:a0:79:fd:5d:1b:7f:e6:37:01:7c:83:
23:a2:06:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:00:27 2026 by rpki-client