Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/CZ08jLo8YyFjzMLohMZ8krOSlEQ.mft
File: CZ08jLo8YyFjzMLohMZ8krOSlEQ.mft (raw, json)
Hash identifier: Fj22zrY3+I7v2lTdEdcQXMvW5UJRbJ6HsaxMca5exaI=
Subject key identifier: 37:D3:FF:39:11:42:43:02:68:4A:AC:9C:9E:F9:14:AB:87:57:15:8D
Authority key identifier: 09:9D:3C:8C:BA:3C:63:21:63:CC:C2:E8:84:C6:7C:92:B3:92:94:44
Certificate issuer: /CN=099d3c8cba3c632163ccc2e884c67c92b3929444
Certificate serial: 01A0CF363B8AB809D75F01710123132A711C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ08jLo8YyFjzMLohMZ8krOSlEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/CZ08jLo8YyFjzMLohMZ8krOSlEQ.mft
Manifest number: E4
Signing time: Wed 23 Sep 2026 17:00:32 +0000
Manifest this update: Wed 23 Sep 2026 17:00:32 +0000
Manifest next update: Thu 24 Sep 2026 17:00:32 +0000
Files and hashes: 1: CZ08jLo8YyFjzMLohMZ8krOSlEQ.crl (hash: j3sK0f6odt4e62WjKdLsv5oKBtKHZG52u8deOnOQOqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/CZ08jLo8YyFjzMLohMZ8krOSlEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/CZ08jLo8YyFjzMLohMZ8krOSlEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ08jLo8YyFjzMLohMZ8krOSlEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:3b:8a:b8:09:d7:5f:01:71:01:23:13:2a:71:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099d3c8cba3c632163ccc2e884c67c92b3929444
Validity
Not Before: Sep 23 17:00:32 2026 GMT
Not After : Sep 24 17:00:32 2026 GMT
Subject: CN=37d3ff3911424302684aac9c9ef914ab8757158d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2c:6a:32:a7:68:8b:c9:c5:77:2d:35:6b:ae:
98:06:71:b6:4f:f5:58:dd:e0:cc:96:0d:2e:cf:d5:
dd:7a:db:9d:d3:f1:27:a3:17:b7:0a:14:97:cd:aa:
e8:d5:c9:ab:ed:58:58:33:ad:9d:68:3d:08:d4:6e:
94:59:9d:87:5d:f5:7b:d4:0d:91:89:d6:53:c9:30:
c0:e5:47:63:fa:3e:75:cb:43:c0:be:05:0a:ec:40:
f6:4c:b2:bf:c9:1a:37:fe:c6:96:22:3c:e1:81:32:
00:ff:f5:1b:21:50:89:85:c3:c2:2f:e2:54:83:88:
82:93:56:0e:88:8e:f5:f6:66:86:50:f2:2e:2f:55:
e3:cb:6f:80:45:64:4d:f8:6f:cb:53:29:47:8f:37:
ed:32:47:ae:89:07:25:47:91:79:99:99:7d:44:74:
3c:f8:03:2f:d2:c0:41:94:bb:d3:2c:53:42:47:8c:
0d:34:ea:d4:01:45:02:91:0d:c7:d6:e1:03:74:c2:
67:e8:c6:9a:5e:59:38:68:b8:cb:12:f0:d9:2a:82:
d8:39:d2:6e:e1:7a:6a:2a:73:36:12:49:6a:5a:7e:
83:05:06:1c:10:4b:50:bd:4d:bf:16:a2:3a:ba:57:
fa:f4:cc:ef:8c:7f:0b:1b:aa:c4:fe:68:55:fa:26:
85:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D3:FF:39:11:42:43:02:68:4A:AC:9C:9E:F9:14:AB:87:57:15:8D
X509v3 Authority Key Identifier:
keyid:09:9D:3C:8C:BA:3C:63:21:63:CC:C2:E8:84:C6:7C:92:B3:92:94:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ08jLo8YyFjzMLohMZ8krOSlEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/CZ08jLo8YyFjzMLohMZ8krOSlEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/CZ08jLo8YyFjzMLohMZ8krOSlEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:eb:25:4a:dd:55:ea:17:90:01:1c:29:c6:d3:3f:5d:cd:c4:
06:ce:b9:c0:bf:9f:ff:ac:9f:d3:bd:b5:81:1e:11:8f:ef:9f:
fe:36:d3:f1:6c:3b:fe:49:aa:63:9e:a8:f0:c5:1f:f2:96:94:
41:81:47:0f:e6:34:f1:34:b9:02:19:fa:90:bf:b2:77:d4:1f:
c5:b1:db:43:8b:d9:55:70:27:45:2f:02:6e:0e:84:6d:89:af:
e4:91:b6:21:d3:9c:92:2e:7c:ec:d9:81:f8:23:fd:76:21:80:
75:95:f4:48:0f:71:73:db:6a:92:ac:42:bc:c9:e4:fa:c2:f1:
d3:de:b1:3f:69:90:d0:c4:9c:e8:74:c5:f5:7f:4d:21:ac:a4:
22:56:cd:ec:8b:b0:bd:99:36:2e:a0:a2:bd:bb:a6:24:2c:32:
45:f7:c2:08:4f:f6:d2:34:ad:e7:71:85:bd:4f:cb:b2:ba:21:
bf:ca:6a:27:9c:9c:0f:eb:f5:0e:f7:72:e9:ef:b6:f4:0b:98:
82:ef:aa:7b:78:95:7e:8f:d0:b3:ac:b9:fe:05:6c:d6:ab:f3:
9d:e1:81:9c:a1:aa:f4:ae:a7:0e:62:4e:87:f4:68:5f:10:ab:
ef:6a:ca:bd:59:13:2f:61:3f:da:42:4a:2e:32:ab:e1:58:23:
29:ac:c1:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPNjuKuAnXXwFxASMTKnEcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OWQzYzhjYmEzYzYzMjE2M2NjYzJlODg0YzY3YzkyYjM5
Mjk0NDQwHhcNMjYwOTIzMTcwMDMyWhcNMjYwOTI0MTcwMDMyWjAzMTEwLwYDVQQD
EygzN2QzZmYzOTExNDI0MzAyNjg0YWFjOWM5ZWY5MTRhYjg3NTcxNThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyxqMqdoi8nFdy01a66YBnG2T/VY
3eDMlg0uz9Xdetud0/Enoxe3ChSXzaro1cmr7VhYM62daD0I1G6UWZ2HXfV71A2R
idZTyTDA5Udj+j51y0PAvgUK7ED2TLK/yRo3/saWIjzhgTIA//UbIVCJhcPCL+JU
g4iCk1YOiI719maGUPIuL1Xjy2+ARWRN+G/LUylHjzftMkeuiQclR5F5mZl9RHQ8
+AMv0sBBlLvTLFNCR4wNNOrUAUUCkQ3H1uEDdMJn6MaaXlk4aLjLEvDZKoLYOdJu
4XpqKnM2EklqWn6DBQYcEEtQvU2/FqI6ulf69MzvjH8LG6rE/mhV+iaF1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDfT/zkRQkMCaEqsnJ75FKuHVxWNMB8GA1UdIwQY
MBaAFAmdPIy6PGMhY8zC6ITGfJKzkpREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1owOGpMbzhZeUZqek1Mb2hNWjhrck9TbEVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81NWQ3YzUtMzc0YS00ODc2LTk5MzQt
YWUzZjA1MmZmYWFkLzEvQ1owOGpMbzhZeUZqek1Mb2hNWjhrck9TbEVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC81NWQ3YzUtMzc0YS00ODc2LTk5MzQtYWUzZjA1MmZmYWFk
LzEvQ1owOGpMbzhZeUZqek1Mb2hNWjhrck9TbEVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAueslSt1V
6heQARwpxtM/Xc3EBs65wL+f/6yf0721gR4Rj++f/jbT8Ww7/kmqY56o8MUf8paU
QYFHD+Y08TS5Ahn6kL+yd9QfxbHbQ4vZVXAnRS8Cbg6EbYmv5JG2IdOcki587NmB
+CP9diGAdZX0SA9xc9tqkqxCvMnk+sLx096xP2mQ0MSc6HTF9X9NIaykIlbN7Iuw
vZk2LqCivbumJCwyRffCCE/20jSt53GFvU/Lsrohv8pqJ5ycD+v1Dvdy6e+29AuY
gu+qe3iVfo/Qs6y5/gVs1qvzneGBnKGq9K6nDmJOh/RoXxCr72rKvVkTL2E/2kJK
LjKr4VgjKazBOw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:49:15 2026 by rpki-client