Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
File: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft (raw, json)
Hash identifier: tJ9NJnbdqpR+r0hb6YjVISRO1CV8qRABPt+sThqJ6r0=
Subject key identifier: C0:0F:4E:8F:EB:3A:A6:86:E5:79:5A:E8:C8:9A:33:41:26:51:59:FD
Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Certificate serial: 019D27A89115FE41FA4E741F5C448D245578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 01:00:51 +0000
Manifest this update: Thu 26 Mar 2026 01:00:51 +0000
Manifest next update: Fri 27 Mar 2026 01:00:51 +0000
Files and hashes: 1: 7ciFHPcyDl_GiD4yOy7-6YbFSE4.roa (hash: spKjqMXNtC0h5y4SSbTIV4kFe/adq7sNxeFXmSbfQ7o=)
2: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl (hash: VeMd0W7jY4RErwnyP33RgHjSCHPfkar13ogt8T2EfOI=)
3: QqEtI7mSBnf3k13sxA2thJ-1o4Q.roa (hash: MvaPAINH/RoYeDbeWcuMwbOZ15Dwjgbo2f18w/6CCqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:91:15:fe:41:fa:4e:74:1f:5c:44:8d:24:55:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Validity
Not Before: Mar 26 01:00:51 2026 GMT
Not After : Mar 27 01:00:51 2026 GMT
Subject: CN=c00f4e8feb3aa686e5795ae8c89a3341265159fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:09:01:f7:8e:74:10:bc:a7:42:f8:06:9b:d6:
8e:a5:77:43:bf:5c:ca:03:8c:72:4a:da:23:7e:41:
e8:03:3d:43:af:a3:c9:c2:44:a9:04:24:cd:45:b7:
ea:36:a9:44:8e:f5:6c:df:fd:6e:8c:74:57:95:2a:
d8:ff:92:4d:93:10:50:2c:a1:fb:0b:66:da:61:ec:
a0:de:b9:49:6b:a8:d5:4c:78:5d:d4:15:92:70:78:
53:23:5e:16:80:b7:1a:95:93:ef:ae:b0:a8:25:9f:
9e:d9:cc:18:d1:b2:45:4f:53:3e:65:94:b5:4a:24:
3d:bc:1e:70:ff:85:a8:5f:c4:46:11:91:06:2d:07:
e5:1c:90:4e:5d:83:55:f5:42:3c:18:49:f2:56:77:
7e:1c:a1:0c:62:cc:b9:a0:6b:e6:a9:8b:e2:ea:03:
a3:15:72:3d:fd:f4:42:0f:63:3d:b8:33:3f:f1:5c:
7d:7e:1a:a7:76:9b:55:06:19:3a:28:18:bf:11:a8:
c9:ad:5b:86:d3:07:db:7c:15:6f:f1:7b:8f:67:0f:
47:c6:35:c8:70:48:7f:3b:06:38:9f:61:4f:a0:01:
ea:4e:85:fa:85:0e:9b:be:b3:4e:97:d5:ca:8c:53:
36:5c:ff:88:c9:d2:6a:66:37:2c:bf:5b:a9:75:8d:
23:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0F:4E:8F:EB:3A:A6:86:E5:79:5A:E8:C8:9A:33:41:26:51:59:FD
X509v3 Authority Key Identifier:
keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:74:0d:cc:78:2f:1b:84:2c:c7:13:30:36:35:5f:c8:d7:aa:
9e:76:a2:e1:0f:60:2c:68:90:52:9a:83:83:27:38:49:24:48:
4c:39:a8:b3:08:07:47:2a:75:8c:33:88:5c:91:7c:fc:c4:8a:
58:52:4e:6b:7f:cc:92:b1:f0:20:a2:82:9e:27:e8:8a:3b:50:
d7:85:61:5a:eb:78:8b:9d:b3:cb:b6:23:01:5d:1a:c6:41:92:
e3:d0:e1:db:f3:29:da:35:05:1c:c0:6b:0e:b4:92:11:68:d2:
f4:32:d1:82:12:96:a5:a2:b0:a9:87:8b:a8:b9:86:f7:49:21:
43:49:f9:8e:27:9a:1a:d5:98:27:5a:db:e5:89:09:e8:84:7b:
16:3b:8d:34:98:ef:24:d4:0f:a2:49:1f:e1:5d:6d:72:ce:96:
5c:fb:06:02:34:c6:12:de:fc:aa:23:92:ca:26:3b:db:d0:b5:
45:35:4c:05:00:db:90:11:2f:74:f9:f4:eb:1f:e2:61:ca:74:
df:c6:c9:bc:d8:b1:cb:13:71:29:8b:87:c1:2b:76:49:bc:c5:
59:87:ef:af:08:b9:af:68:16:7b:77:d1:23:86:d9:02:d2:bc:
cb:fc:a7:68:46:96:4c:77:eb:a4:22:69:e4:d9:74:5f:57:9d:
c6:41:4c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:38:39 2026 by rpki-client