Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
File: CZofLb97eoSuV7jWdCa35OQg-rU.mft (raw, json)
Hash identifier: Zo0MRMwGo0ksSuOKLnfNaSp9YltdGPaSWkN9tAA/iYk=
Subject key identifier: 09:44:DC:FC:A9:6C:F3:6D:1C:0C:D5:96:BD:9C:1B:57:A9:26:47:53
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 019FA7F509D2334A0EC2572E6CBB14AD0995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
Manifest number: 0BFE
Signing time: Tue 28 Jul 2026 09:01:21 +0000
Manifest this update: Tue 28 Jul 2026 09:01:21 +0000
Manifest next update: Wed 29 Jul 2026 09:01:21 +0000
Files and hashes: 1: CZofLb97eoSuV7jWdCa35OQg-rU.crl (hash: HA7+PumBPHZhRKkWc8eWO8xnyuI8ipEyfjrZyo7c9JI=)
2: Fi9A7ox4EzBVsjYUvBuYzjfrMx4.roa (hash: yPzWCEaVWwitvSN0VQpWfi2iaiWGTDPLLRlVVcJ92AY=)
3: lcFMLBJ4Qsm2pQ6VUD3RYi3MSqw.roa (hash: jCb7ZL+Zyxb7PMRFxkMl8BDTxyWFfiSmgO42R7iSszA=)
4: udDZlRqJiXtAXMmshEscXpSLRxA.roa (hash: wyIq2I1jx8vxdJZ8+x/YsQXsxSwsm8ATw7ArwjE7EFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f5:09:d2:33:4a:0e:c2:57:2e:6c:bb:14:ad:09:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Jul 28 09:01:21 2026 GMT
Not After : Jul 29 09:01:21 2026 GMT
Subject: CN=0944dcfca96cf36d1c0cd596bd9c1b57a9264753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:86:15:be:bf:05:d0:2d:45:65:ec:4d:08:56:
30:9d:2e:4b:94:7b:75:d8:31:8f:45:de:ea:02:60:
0b:7e:d7:fe:04:94:3f:3c:f0:6c:c9:30:8c:77:54:
74:ae:6a:6d:35:9a:cf:66:e4:d1:eb:6d:b1:38:cb:
f7:6c:d3:d2:db:e1:7a:22:82:a7:48:e9:32:5e:4d:
dd:b1:5f:ed:d4:d7:23:e4:ce:48:ae:46:7e:d3:5b:
80:27:eb:67:19:cf:56:7f:0e:c4:d2:ac:cc:64:e4:
e8:fe:3e:34:b4:f0:ac:dd:bc:13:24:30:c2:2d:18:
33:f2:53:e8:5a:0b:ed:60:4e:42:cd:56:a0:0b:0d:
45:5f:5b:0f:04:fc:ab:08:a3:0d:84:92:f5:39:fd:
1f:9f:53:69:fa:02:0e:67:34:32:c5:ff:0b:7a:13:
33:ed:aa:4a:22:a2:14:1d:0f:b8:f4:b5:14:e8:f3:
8c:59:54:b4:fc:10:d2:db:fc:af:d2:1b:e9:50:e2:
d9:6e:67:24:94:bd:2e:2d:0a:0c:92:b1:9a:75:0e:
b0:cc:1f:51:ef:58:4a:66:f2:8b:dd:96:e3:63:55:
fe:72:40:36:b4:af:4c:d3:8b:49:1a:fc:ca:08:8a:
9c:7c:a3:29:60:fd:a7:3c:9e:ec:9f:44:d4:89:ca:
74:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:44:DC:FC:A9:6C:F3:6D:1C:0C:D5:96:BD:9C:1B:57:A9:26:47:53
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c8:7a:3f:10:ef:b9:12:0a:24:97:11:44:5e:de:73:a2:45:
88:a6:0a:48:9c:c4:e8:5a:f7:9e:e4:aa:e8:53:f1:e0:fd:9c:
89:df:38:9f:8e:36:ac:c4:fc:d5:a6:a5:c2:46:d8:b0:16:f0:
6e:60:4b:a2:5f:17:47:71:54:41:5d:eb:df:7a:49:53:d9:99:
9a:6f:b8:c5:c2:9c:b5:ad:45:4f:07:41:60:48:a2:2c:b5:8a:
14:68:0f:d5:9d:8b:44:99:57:40:01:87:32:47:63:46:2b:4c:
dc:4d:10:67:08:fb:fd:eb:1b:e5:c0:d5:82:38:dc:52:f9:91:
cf:ba:1e:ab:87:29:c9:90:02:38:05:7f:6e:15:73:98:99:10:
29:67:79:a5:ca:46:78:d1:cf:b2:3e:e9:ad:4a:81:0e:c8:c5:
e9:b3:de:b2:a6:c2:5b:1d:b8:36:1a:8d:30:a1:23:7e:13:00:
fd:a1:8c:8e:a3:ef:04:9a:17:02:79:04:b0:1e:29:8a:df:82:
e6:f8:3c:0e:00:cd:b3:93:03:84:c0:68:4d:09:95:c1:d5:7e:
b3:d6:36:d4:a4:47:6b:0c:d5:fe:d4:eb:52:3f:5b:3f:f7:f3:
0b:b5:1c:d4:ae:fa:fa:29:9c:3d:11:a6:1b:e0:83:3a:7c:80:
51:1a:00:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:16 2026 by rpki-client