Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json)
Hash identifier: fzV1PAm+B82Z7voTLxKiC56MrVcit6Vm6LOEZ0y6FQg=
Subject key identifier: 27:BA:41:86:51:EF:0E:6C:FB:76:29:5E:50:BC:66:19:41:2F:36:AA
Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786
Certificate serial: 019FA89A3A957DA41B2FFB2C1BF585489AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
Manifest number: 07ED
Signing time: Tue 28 Jul 2026 12:01:47 +0000
Manifest this update: Tue 28 Jul 2026 12:01:47 +0000
Manifest next update: Wed 29 Jul 2026 12:01:47 +0000
Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: l9dTFev3XEhQliLriLe8uvZx235GY7v8e7IplYwuxZY=)
2: G33itK1qq3WeYfI2JZv_Df-F-kM.roa (hash: M48oQ7e0L/CLHTbH2STVHWlHyf+bv796hviSQB+beow=)
3: lSqq2t5j5uhQNwBWbI6WL7tpfgY.roa (hash: O4mt9ymqocsZDQGjjG1ro7L0no6+r2S8A/5/+O3vsZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:3a:95:7d:a4:1b:2f:fb:2c:1b:f5:85:48:9a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099da06b80fa749068028b597be3e50e8b118786
Validity
Not Before: Jul 28 12:01:47 2026 GMT
Not After : Jul 29 12:01:47 2026 GMT
Subject: CN=27ba418651ef0e6cfb76295e50bc6619412f36aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ab:00:61:de:ed:d5:04:7c:66:3f:0f:1b:08:
96:81:8f:9e:37:ea:c5:bb:3d:98:51:8e:7d:14:98:
2a:cf:06:5c:ad:99:46:5f:cd:17:29:f7:a2:91:29:
ef:45:d3:48:9c:fd:76:57:ed:8c:76:eb:2c:15:7c:
48:86:6f:f9:15:a1:24:d5:41:e8:87:79:de:6c:ca:
1e:db:57:59:b4:db:1c:c2:39:3c:13:9d:b1:a1:fd:
ec:bf:e8:2a:e7:a7:b3:45:31:fc:f0:aa:23:05:ad:
7d:65:ec:d4:c7:ee:b3:62:3b:35:90:1a:4a:85:69:
7b:2b:35:38:c2:38:4f:6d:53:70:bc:f5:65:c0:06:
17:92:aa:98:61:26:9c:1b:18:cf:a7:23:94:f4:43:
39:27:fa:f1:97:fe:97:f0:de:8f:39:60:51:e1:b9:
4a:0f:60:29:cd:52:52:ec:0c:90:2f:2a:59:e3:b5:
69:46:2a:cc:24:40:c7:5c:c8:0c:b7:2d:af:84:95:
32:09:05:d2:4b:00:b2:cc:b1:8a:20:97:85:60:91:
e7:ed:1b:0a:98:e7:44:5a:5e:e3:c2:a9:13:bb:e2:
21:9d:f2:1a:69:72:98:ea:03:8a:26:18:66:9e:09:
ae:d5:94:b4:b8:ff:18:dd:e0:7d:70:de:b9:75:60:
e7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BA:41:86:51:EF:0E:6C:FB:76:29:5E:50:BC:66:19:41:2F:36:AA
X509v3 Authority Key Identifier:
keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f6:82:6b:42:44:91:c6:57:cd:87:e6:9b:61:7e:9b:1b:60:
b5:ba:f4:b8:17:06:ab:45:64:e6:af:f0:66:76:7d:6e:de:5a:
e3:a4:d1:47:4a:af:3d:6e:42:2b:6f:09:d1:4f:5c:55:7a:2a:
7a:bc:df:42:84:43:f7:2b:25:42:c7:86:04:1a:89:9f:6e:c0:
54:fe:1b:5f:3b:62:0a:2d:f3:e0:40:c4:7d:b5:0e:6a:9b:d0:
e7:5a:00:89:cd:cc:af:70:7f:91:b3:11:1b:70:38:d2:28:7a:
25:c3:8a:ef:8e:5e:63:8d:15:29:e3:17:4e:4b:ca:bd:2e:52:
f8:1e:d7:ae:74:aa:c8:3f:ff:b9:ef:c8:a4:57:73:b7:a2:2a:
f1:a7:03:3f:ab:61:eb:20:e1:89:2f:74:14:e3:d6:ce:aa:6b:
89:ef:4c:7a:21:4f:08:48:8b:0e:3a:fe:ad:e4:2f:a1:23:1c:
b5:19:0f:c6:c9:99:c1:05:fd:57:a2:8b:72:aa:21:72:03:58:
7c:0c:83:ee:1d:13:b7:f9:2b:61:88:a5:64:cd:c9:b8:8c:bc:
be:c1:55:1f:64:7b:85:b7:c0:a2:6e:72:96:bf:a2:60:d0:3d:
36:58:82:2e:52:e5:62:71:b6:ce:5e:25:1c:15:07:9f:46:62:
ad:8b:26:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omjqVfaQbL/ssG/WFSJr5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OWRhMDZiODBmYTc0OTA2ODAyOGI1OTdiZTNlNTBlOGIx
MTg3ODYwHhcNMjYwNzI4MTIwMTQ3WhcNMjYwNzI5MTIwMTQ3WjAzMTEwLwYDVQQD
EygyN2JhNDE4NjUxZWYwZTZjZmI3NjI5NWU1MGJjNjYxOTQxMmYzNmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+KsAYd7t1QR8Zj8PGwiWgY+eN+rF
uz2YUY59FJgqzwZcrZlGX80XKfeikSnvRdNInP12V+2MdussFXxIhm/5FaEk1UHo
h3nebMoe21dZtNscwjk8E52xof3sv+gq56ezRTH88KojBa19ZezUx+6zYjs1kBpK
hWl7KzU4wjhPbVNwvPVlwAYXkqqYYSacGxjPpyOU9EM5J/rxl/6X8N6POWBR4blK
D2ApzVJS7AyQLypZ47VpRirMJEDHXMgMty2vhJUyCQXSSwCyzLGKIJeFYJHn7RsK
mOdEWl7jwqkTu+IhnfIaaXKY6gOKJhhmngmu1ZS0uP8Y3eB9cN65dWDnJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCe6QYZR7w5s+3YpXlC8ZhlBLzaqMB8GA1UdIwQY
MBaAFAmdoGuA+nSQaAKLWXvj5Q6LEYeGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iNDA0YzctYmQzZC00NzUyLThhZGUt
MzFmY2M0NTU1NzVlLzEvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9iNDA0YzctYmQzZC00NzUyLThhZGUtMzFmY2M0NTU1NzVl
LzEvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPaCa0JE
kcZXzYfmm2F+mxtgtbr0uBcGq0Vk5q/wZnZ9bt5a46TRR0qvPW5CK28J0U9cVXoq
erzfQoRD9yslQseGBBqJn27AVP4bXztiCi3z4EDEfbUOapvQ51oAic3Mr3B/kbMR
G3A40ih6JcOK745eY40VKeMXTkvKvS5S+B7XrnSqyD//ue/IpFdzt6Iq8acDP6th
6yDhiS90FOPWzqprie9MeiFPCEiLDjr+reQvoSMctRkPxsmZwQX9V6KLcqohcgNY
fAyD7h0Tt/krYYilZM3JuIy8vsFVH2R7hbfAom5ylr+iYNA9NliCLlLlYnG2zl4l
HBUHn0ZirYsmtg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:31:17 2026 by rpki-client