Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/CZ08jLo8YyFjzMLohMZ8krOSlEQ.mft
File: CZ08jLo8YyFjzMLohMZ8krOSlEQ.mft (raw, json)
Hash identifier: VBMHoLhExUewRCs3CJxGmKWvrEOzVXH1g8Ku9SNzd0w=
Subject key identifier: 37:07:78:81:71:61:DB:A9:B6:9C:C3:C7:B3:FA:EF:72:73:C3:DF:E9
Authority key identifier: 09:9D:3C:8C:BA:3C:63:21:63:CC:C2:E8:84:C6:7C:92:B3:92:94:44
Certificate issuer: /CN=099d3c8cba3c632163ccc2e884c67c92b3929444
Certificate serial: 019F9090FB015B6154FAEA719E9D1A2D5AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ08jLo8YyFjzMLohMZ8krOSlEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/CZ08jLo8YyFjzMLohMZ8krOSlEQ.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 20:00:48 +0000
Manifest this update: Thu 23 Jul 2026 20:00:48 +0000
Manifest next update: Fri 24 Jul 2026 20:00:48 +0000
Files and hashes: 1: CZ08jLo8YyFjzMLohMZ8krOSlEQ.crl (hash: 8v3EOO5a7oIo/m7XwjnLFXaZ8XAAv6vnV6VJVncXKAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/CZ08jLo8YyFjzMLohMZ8krOSlEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/CZ08jLo8YyFjzMLohMZ8krOSlEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ08jLo8YyFjzMLohMZ8krOSlEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:fb:01:5b:61:54:fa:ea:71:9e:9d:1a:2d:5a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099d3c8cba3c632163ccc2e884c67c92b3929444
Validity
Not Before: Jul 23 20:00:48 2026 GMT
Not After : Jul 24 20:00:48 2026 GMT
Subject: CN=370778817161dba9b69cc3c7b3faef7273c3dfe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f3:73:42:58:a3:eb:1b:3b:8c:23:ca:5e:6d:
53:3b:f0:c9:86:17:e1:3e:00:34:1f:29:7b:6a:76:
88:16:d3:6e:15:5b:ec:96:4f:0f:c5:23:b3:58:7d:
a6:e6:a6:1c:83:50:18:af:5f:13:b5:9e:f6:6e:88:
84:f2:65:13:ae:b3:cb:81:e5:f8:07:11:7c:9c:b0:
8d:a4:6e:c2:6a:1e:9d:31:8a:e2:34:a8:9d:5e:88:
f6:61:ab:06:48:9b:b4:62:6e:fa:b1:12:bf:e1:3a:
98:d8:aa:9d:cc:ff:8b:bd:ad:9c:49:de:d8:48:fd:
bc:b0:8b:d1:ce:03:04:fa:66:2a:53:43:0e:23:1b:
c0:3b:13:8a:eb:a8:9f:44:51:12:43:88:bf:ab:a1:
17:82:a5:94:b4:37:5c:7e:b9:cd:19:f4:10:36:a1:
77:9a:13:69:93:46:b5:9c:7e:20:84:c4:6c:87:b8:
ce:9d:02:25:54:1e:30:64:2b:48:48:f5:a1:8a:f5:
3c:54:38:90:8c:9f:15:64:e8:3a:fe:83:7f:20:73:
13:1c:e8:69:35:d2:b8:02:22:af:75:b5:2d:b4:70:
1f:09:7f:7b:ad:3b:c9:a7:f4:57:8d:c5:f7:43:89:
4f:7e:a9:f9:d0:d0:8a:ce:8b:40:c9:59:28:98:61:
b4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:07:78:81:71:61:DB:A9:B6:9C:C3:C7:B3:FA:EF:72:73:C3:DF:E9
X509v3 Authority Key Identifier:
keyid:09:9D:3C:8C:BA:3C:63:21:63:CC:C2:E8:84:C6:7C:92:B3:92:94:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ08jLo8YyFjzMLohMZ8krOSlEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/CZ08jLo8YyFjzMLohMZ8krOSlEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/CZ08jLo8YyFjzMLohMZ8krOSlEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e2:9f:cc:20:79:2e:ff:1f:e9:e2:10:63:3c:4a:e9:eb:0d:
0a:f3:8e:42:11:cd:0e:ea:5b:e5:7c:8b:75:7f:11:ee:f2:bf:
01:7d:c0:8f:48:5b:3a:67:0f:92:b7:7c:8b:16:b5:74:92:7b:
75:6e:6a:62:d0:c7:92:39:37:74:b4:8c:6f:d0:38:40:6e:f3:
02:3c:88:a6:4b:67:ec:f7:a9:18:05:7e:cf:c1:91:0d:2b:10:
5b:17:a3:e1:bd:0e:a4:44:0f:39:14:69:9d:96:bb:95:be:95:
39:8c:95:8b:69:c0:65:7c:db:d5:8c:2b:48:5f:f0:02:47:1c:
09:7d:cf:91:9f:5d:49:fe:af:80:54:aa:f1:7f:c8:54:94:fb:
75:9c:4d:d2:c6:f9:5c:89:92:ed:6a:fb:dd:a2:32:5c:45:44:
27:31:20:f2:09:3f:40:60:51:9e:44:69:d1:ff:b7:83:65:02:
b4:33:52:86:3c:2d:f8:30:ce:20:9a:71:db:0b:2e:64:6a:18:
3a:8c:da:f3:41:d2:64:7b:62:24:e5:98:0c:5a:22:7f:ce:57:
8c:ff:e8:41:25:43:8c:05:ca:0b:45:a1:04:20:82:c4:58:bc:
0c:5c:74:7a:20:c2:1b:b2:52:14:80:26:60:a2:15:24:4a:b4:
ee:77:d6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:21 2026 by rpki-client