Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
File: CZofLb97eoSuV7jWdCa35OQg-rU.mft (raw, json)
Hash identifier: tLNTKcqvoSHLxjYy3EwG+kSbZ63Y6Q8plecG9Sd8Gko=
Subject key identifier: FD:7A:C2:5A:ED:79:1F:BE:33:F2:5B:8F:49:E0:C9:86:26:D9:F6:46
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 019EBF91A1D82788BCFE72A6D4AF8270E788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
Manifest number: 0B85
Signing time: Sat 13 Jun 2026 06:00:52 +0000
Manifest this update: Sat 13 Jun 2026 06:00:52 +0000
Manifest next update: Sun 14 Jun 2026 06:00:52 +0000
Files and hashes: 1: CZofLb97eoSuV7jWdCa35OQg-rU.crl (hash: 9LzM/QD7J68c/DXJS15lKayzlYcrX1imtYwhMvJ6i6w=)
2: Fi9A7ox4EzBVsjYUvBuYzjfrMx4.roa (hash: yPzWCEaVWwitvSN0VQpWfi2iaiWGTDPLLRlVVcJ92AY=)
3: ZZAGyODBQuhSTq1KG9XN62QS3MQ.roa (hash: NKGmXLYVBB2xSYaGxp7Ky80sTerHdcg/u7ExH6ngk0E=)
4: lcFMLBJ4Qsm2pQ6VUD3RYi3MSqw.roa (hash: jCb7ZL+Zyxb7PMRFxkMl8BDTxyWFfiSmgO42R7iSszA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:a1:d8:27:88:bc:fe:72:a6:d4:af:82:70:e7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Jun 13 06:00:52 2026 GMT
Not After : Jun 14 06:00:52 2026 GMT
Subject: CN=fd7ac25aed791fbe33f25b8f49e0c98626d9f646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:53:39:65:3a:2f:d8:98:26:98:06:94:a1:a7:
37:e6:be:84:1b:4c:a7:1f:8a:b3:73:f6:64:3b:5c:
40:6a:04:75:4a:bd:ca:28:54:ec:e2:53:0b:33:65:
08:e9:aa:c8:46:e1:c3:02:fa:6d:ad:dc:17:5f:96:
31:ed:2c:77:50:08:cb:ad:33:74:0b:06:9e:9c:a4:
fb:3a:1a:af:8b:d7:70:ad:6f:4a:40:05:a6:be:ed:
78:1d:68:ac:8c:a3:e0:37:6e:79:dd:35:ac:90:95:
0d:61:2c:60:ec:3a:d8:cc:e5:c5:4f:31:04:9a:d8:
8e:c7:26:f8:42:97:fa:9b:c7:3a:dd:7a:d0:7c:01:
e6:d0:38:26:39:a4:cc:fb:3c:b7:bd:24:af:c3:b3:
69:40:32:ee:60:4c:cb:fc:d2:b9:4b:c1:c8:34:7e:
73:37:e5:5f:05:64:be:f9:dc:ad:ce:ce:73:9f:dc:
6a:f2:ff:9c:3f:e2:66:54:cf:00:93:36:30:48:2a:
a9:da:1e:77:52:44:c1:31:fb:44:59:fb:76:ab:98:
8f:fc:c7:1e:f5:6e:41:65:f6:25:bd:4f:33:b0:f8:
14:ab:e7:de:ac:a7:90:8d:4c:ac:0d:fd:fc:4f:04:
b9:54:e3:36:c1:69:da:14:fb:d5:f6:d2:31:cd:81:
fe:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7A:C2:5A:ED:79:1F:BE:33:F2:5B:8F:49:E0:C9:86:26:D9:F6:46
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:63:94:e2:8f:4e:01:33:25:c6:6b:46:7f:c6:a2:50:f4:57:
8d:81:a6:b4:41:e9:f8:da:ba:d2:7d:df:1a:29:19:a0:fd:61:
27:bf:c7:de:9a:90:2e:00:d3:68:0e:b2:2e:b3:fb:27:de:d7:
59:47:ba:03:2b:17:77:0f:4c:d4:5c:09:91:61:64:b4:17:23:
c3:55:96:02:b7:6f:c0:51:be:e9:43:17:fa:45:c0:3c:75:75:
4c:7f:19:ed:ef:65:9a:8f:70:ad:e8:a4:06:95:fb:e2:cb:0a:
b0:68:02:7f:2e:57:a4:29:67:10:1c:e6:b5:c3:fd:fa:27:d3:
74:c8:36:19:b6:28:83:3e:cd:ed:cf:a0:39:a3:3f:2f:88:4e:
0d:23:08:23:89:09:85:cd:74:61:9d:39:30:1d:22:31:de:37:
eb:41:5d:ca:b9:41:e7:0b:d4:a4:64:e2:e3:d6:a7:68:4d:95:
59:74:8d:b4:6a:62:e4:cf:4e:f8:07:01:2e:07:00:03:bc:95:
75:e6:0d:53:90:57:cb:12:2d:8a:bb:21:37:42:41:0d:22:c3:
b2:e4:f9:5f:ad:61:fe:91:fd:43:58:c6:65:3e:c6:01:72:57:
0c:1a:5e:87:c5:ca:31:49:65:dc:d8:88:a5:ec:aa:3d:6c:64:
77:d7:db:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:15:35 2026 by rpki-client