Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
File: CZofLb97eoSuV7jWdCa35OQg-rU.mft (raw, json)
Hash identifier: GOfnnUyMM/v7Zi6bPIEjvYOKJv9x0iX6lC+7MZhksUI=
Subject key identifier: F3:20:29:48:90:67:8D:FF:52:F2:C5:53:69:F1:5B:01:E9:75:90:BD
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 01A0C3D6AFDDA262690525750E1BD8F3810E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
Manifest number: 0C91
Signing time: Mon 21 Sep 2026 12:00:21 +0000
Manifest this update: Mon 21 Sep 2026 12:00:21 +0000
Manifest next update: Tue 22 Sep 2026 12:00:21 +0000
Files and hashes: 1: CZofLb97eoSuV7jWdCa35OQg-rU.crl (hash: jlwWkA4vRZvOvPvCNusAUOOqizP47iZqhEzy54iUJpg=)
2: Fi9A7ox4EzBVsjYUvBuYzjfrMx4.roa (hash: yPzWCEaVWwitvSN0VQpWfi2iaiWGTDPLLRlVVcJ92AY=)
3: lcFMLBJ4Qsm2pQ6VUD3RYi3MSqw.roa (hash: jCb7ZL+Zyxb7PMRFxkMl8BDTxyWFfiSmgO42R7iSszA=)
4: udDZlRqJiXtAXMmshEscXpSLRxA.roa (hash: wyIq2I1jx8vxdJZ8+x/YsQXsxSwsm8ATw7ArwjE7EFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:af:dd:a2:62:69:05:25:75:0e:1b:d8:f3:81:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Sep 21 12:00:21 2026 GMT
Not After : Sep 22 12:00:21 2026 GMT
Subject: CN=f320294890678dff52f2c55369f15b01e97590bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fa:9c:58:37:b1:3e:69:b1:b2:a3:e6:1e:fe:
e1:71:82:ac:11:c2:a2:44:73:a0:a3:84:f2:77:8b:
7e:9f:04:22:72:54:54:61:05:c7:c0:b1:6e:c3:5a:
b1:b1:df:2f:5f:02:12:c9:0d:a7:3a:fb:a2:49:f4:
80:a1:a6:76:67:97:49:97:49:6d:23:c2:1d:08:1b:
6f:81:3a:22:ec:81:fb:00:2c:18:ab:c2:4f:2f:96:
9a:1b:a1:e9:29:5e:88:e2:dd:c9:f0:91:9a:36:e8:
80:a7:7a:1c:f2:c5:1b:ef:50:80:af:dd:81:df:7f:
b0:f1:1c:c5:4f:a8:f7:17:37:82:43:83:70:e3:a5:
63:7a:54:fc:f0:36:ab:a4:9f:a4:3a:a1:c1:4f:47:
84:b1:f1:b6:7c:e5:8a:cb:82:5c:38:4c:c0:df:3f:
1e:57:10:ab:7c:93:9d:39:4b:34:dd:5d:1f:ee:03:
bb:d4:aa:66:05:8e:69:94:8c:d2:62:5d:45:70:f9:
2f:90:41:f6:6f:4b:ff:b1:3d:a2:0a:5e:e1:e8:68:
e9:1c:6f:c8:fb:14:ac:72:71:78:bf:79:82:69:98:
a9:66:fb:06:b4:a1:47:6e:2a:93:78:68:fc:b8:52:
e5:30:0e:37:c1:30:a6:19:6a:47:ab:13:1c:9e:2f:
21:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:20:29:48:90:67:8D:FF:52:F2:C5:53:69:F1:5B:01:E9:75:90:BD
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ea:a4:50:a1:d2:57:b7:26:cd:48:c1:99:49:13:69:b8:08:
d4:c3:ec:ff:36:de:a2:10:13:6b:75:63:3f:b7:07:e6:08:90:
d5:6d:ad:14:e3:be:69:4a:56:90:7a:b8:0a:68:09:86:9c:47:
05:21:48:8b:5c:00:ff:4f:99:b4:76:00:84:c2:53:68:e0:d6:
2b:31:bc:17:34:23:7e:af:9a:2b:d1:a2:cc:e0:c5:e7:21:9d:
d4:53:97:b3:ff:63:55:5c:ff:78:af:26:c3:79:57:af:2e:ca:
08:49:31:8a:31:77:b2:52:85:7a:75:d9:1f:58:0a:5b:88:72:
42:59:e4:ca:64:93:bd:cc:53:55:f7:14:8d:5f:2a:2a:b0:61:
ca:29:b4:f1:96:ec:23:7e:84:3f:f6:d7:b6:0f:bb:12:fc:71:
09:a0:a8:1f:06:a7:3c:cc:56:91:31:b3:5f:52:34:a5:e1:31:
ad:77:73:df:85:86:8e:12:4d:db:48:84:92:04:5d:de:3d:69:
21:00:72:ca:b4:7c:1b:41:2d:0e:be:5c:6b:3d:5b:85:fd:a2:
b9:86:0b:f5:3a:77:cd:03:45:18:fe:5e:29:88:4e:29:1b:61:
71:10:5b:ed:6f:fb:47:6c:d1:0e:a3:1a:1f:9b:24:0c:18:95:
c9:4c:a9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:53:37 2026 by rpki-client