Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
File: CZofLb97eoSuV7jWdCa35OQg-rU.mft (raw, json)
Hash identifier: UQ/Hpqd864ML3fEZvGHITFAfbgQHO5Ns/bNnsQv2CBI=
Subject key identifier: 7C:FA:61:4B:0A:31:E1:EF:06:88:45:51:55:6F:D8:97:63:40:46:54
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 019D9850203FD69D8140B906392E42200BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
Manifest number: 0AEC
Signing time: Thu 16 Apr 2026 22:01:20 +0000
Manifest this update: Thu 16 Apr 2026 22:01:20 +0000
Manifest next update: Fri 17 Apr 2026 22:01:20 +0000
Files and hashes: 1: BJowdLldqJHM3ir588qx25T2i1o.roa (hash: nGJPoQmYXI/63Ysvy1k3U4F/yfSsIELkLPYGxlPw234=)
2: CZofLb97eoSuV7jWdCa35OQg-rU.crl (hash: Z0m3hZU9UPwf0spEHUvk1aVoZEF84KijJJXZOIWKDEw=)
3: Fi9A7ox4EzBVsjYUvBuYzjfrMx4.roa (hash: yPzWCEaVWwitvSN0VQpWfi2iaiWGTDPLLRlVVcJ92AY=)
4: lcFMLBJ4Qsm2pQ6VUD3RYi3MSqw.roa (hash: jCb7ZL+Zyxb7PMRFxkMl8BDTxyWFfiSmgO42R7iSszA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:45:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:20:3f:d6:9d:81:40:b9:06:39:2e:42:20:0b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Apr 16 22:01:20 2026 GMT
Not After : Apr 17 22:01:20 2026 GMT
Subject: CN=7cfa614b0a31e1ef06884551556fd89763404654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d2:df:e6:b5:cd:5f:28:ab:d9:b0:e9:00:59:
bf:f8:ef:d6:f3:64:35:7a:b7:70:71:3a:71:5e:41:
dc:cc:15:a6:33:a8:8a:99:df:e9:9d:f2:9e:e7:31:
3d:43:5f:bc:ff:fe:69:66:a2:dc:d4:04:7e:1f:ac:
49:15:9c:2b:38:5a:23:31:57:ee:a8:c5:ca:c7:63:
15:54:de:b3:68:2b:96:10:73:61:c6:1e:f4:e9:1b:
b5:0f:c2:c2:98:e6:1f:7d:c6:4e:bb:22:3b:d0:4a:
51:ab:77:1d:8a:29:90:74:84:f9:af:46:04:f0:d0:
1c:91:f1:00:d7:46:8d:80:7a:9a:69:2e:7f:a6:e8:
f2:a4:c8:eb:13:0c:f7:48:0c:11:9d:ab:26:93:09:
8b:46:bb:e9:15:d4:5b:59:9e:45:37:a4:9f:65:80:
28:a0:5c:38:f6:c2:d7:5a:a9:49:52:12:be:dc:15:
08:d5:9f:02:ae:88:e5:22:ac:01:b2:66:a4:31:7a:
3e:32:5b:9a:5f:45:f9:e3:c6:b9:93:df:d0:16:d8:
26:c2:79:c5:d2:cb:f3:20:a4:59:f8:d6:27:43:03:
b6:6d:08:3f:c7:8b:39:a6:4e:a8:3b:7f:1a:fd:52:
4e:99:11:7c:c5:8b:f7:9a:93:9d:5e:fb:08:c5:24:
4f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FA:61:4B:0A:31:E1:EF:06:88:45:51:55:6F:D8:97:63:40:46:54
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f3:a4:79:42:8d:67:6a:46:05:fe:d1:1b:25:5d:6a:f3:e6:
7c:61:0c:14:4f:ab:ed:96:a4:43:3e:a0:85:6b:0b:ba:b4:2e:
6b:02:83:f7:b4:7d:a3:dc:a9:c7:09:34:bc:be:da:68:09:3c:
a5:30:7f:91:88:ac:35:c6:5a:cf:02:6c:7e:fb:ec:bc:24:b4:
bb:5c:4d:c7:fb:06:34:ed:5e:6f:d1:0d:cc:81:8e:f5:35:1e:
2d:25:f0:b4:12:28:6d:c6:7b:4d:dd:9d:4e:11:22:c1:6e:6f:
6b:2d:21:91:31:55:28:10:23:df:1f:c7:8b:b2:f1:1b:e0:0a:
86:78:2a:96:83:3c:7d:1f:34:4b:7b:e7:72:36:9e:58:9c:89:
23:5c:5e:1d:52:e6:30:df:c0:7d:a5:01:d3:5c:59:85:c0:73:
c3:90:4a:49:94:45:71:92:47:b9:71:73:20:47:b8:9f:82:f2:
81:43:a3:5e:25:5a:ca:30:d5:ae:f8:75:0a:63:b1:66:3a:96:
9e:cb:ca:d7:30:ff:ee:b6:d3:88:d6:0e:16:be:5a:5b:a6:11:
51:0f:cb:89:fc:35:3d:2b:4e:b8:36:7f:c8:ce:29:4a:67:56:
ce:b7:d0:f4:a3:c6:45:8d:ff:bd:b0:dd:42:68:62:ea:b1:45:
f5:95:33:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:55:40 2026 by rpki-client