Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
File: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft (raw, json)
Hash identifier: TZsQIr7J2vNs2t4U6KYxWLCcou66PgfAGXhs3Tr329U=
Subject key identifier: 9D:6D:73:90:15:29:87:18:90:A4:61:B3:0F:65:D4:EA:53:CE:FF:2F
Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Certificate serial: 019E1ED9F57059D4650A2A1A3183972280E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 01:01:00 +0000
Manifest this update: Wed 13 May 2026 01:01:00 +0000
Manifest next update: Thu 14 May 2026 01:01:00 +0000
Files and hashes: 1: 7ciFHPcyDl_GiD4yOy7-6YbFSE4.roa (hash: spKjqMXNtC0h5y4SSbTIV4kFe/adq7sNxeFXmSbfQ7o=)
2: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl (hash: Ydg3D4eku6ayqWii86HNBx4tUB4Ygy5uMkWdgMg2aUI=)
3: QqEtI7mSBnf3k13sxA2thJ-1o4Q.roa (hash: MvaPAINH/RoYeDbeWcuMwbOZ15Dwjgbo2f18w/6CCqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:f5:70:59:d4:65:0a:2a:1a:31:83:97:22:80:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Validity
Not Before: May 13 01:01:00 2026 GMT
Not After : May 14 01:01:00 2026 GMT
Subject: CN=9d6d73901529871890a461b30f65d4ea53ceff2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d9:61:2e:a0:8b:52:53:fd:79:dc:25:d2:4c:
79:01:15:07:3a:ca:c6:99:c9:24:22:96:83:53:e9:
10:15:c3:37:61:a3:58:e9:1d:e2:e6:48:a0:f0:d6:
61:14:01:ef:04:29:5d:06:85:9b:e0:70:25:ba:f4:
23:0c:7f:28:bb:15:ab:d1:51:1c:e2:0e:11:42:8f:
9f:e0:84:86:68:5d:41:3d:79:b9:c0:32:08:e7:0e:
48:31:be:ec:8c:96:c0:15:19:2f:1f:d9:fb:e0:35:
79:66:9c:fb:c7:1a:fb:cd:f9:22:02:84:27:8c:2e:
e3:71:aa:ef:0c:a1:b3:22:1c:60:80:6d:46:8c:ab:
77:75:18:04:7b:8c:1e:ac:4e:b0:ac:bb:a6:64:fe:
e0:07:d6:c3:b2:72:ec:1e:d4:1b:00:45:3a:98:13:
2b:ff:86:e8:2d:30:85:1b:1c:27:f4:b0:af:1c:d6:
72:da:96:e4:76:d7:de:12:88:16:4d:93:c7:12:ab:
fe:57:a0:bd:74:c1:f5:f6:ba:b9:ff:dc:19:0d:c5:
5e:0c:81:51:7a:1c:05:59:8d:58:21:69:6d:d1:e2:
48:e1:f9:0a:4c:88:81:2e:79:25:c3:db:d2:39:18:
cf:84:33:68:a8:8a:51:e4:f5:3d:ce:19:dd:82:c2:
2f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6D:73:90:15:29:87:18:90:A4:61:B3:0F:65:D4:EA:53:CE:FF:2F
X509v3 Authority Key Identifier:
keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ed:39:4f:6c:6c:a8:4e:57:fd:a3:be:ba:21:57:58:3d:c3:
b5:7a:74:9d:be:82:84:38:f5:8b:71:61:14:f0:ba:d2:a5:b8:
c5:04:52:77:da:25:e0:1c:05:f9:97:43:70:0f:64:81:76:ce:
20:ec:fa:b8:bc:c1:80:ad:22:57:eb:2e:ea:76:b6:15:9a:af:
14:7e:44:6f:d2:65:01:b1:10:7a:02:08:af:6d:a4:b6:5c:bf:
3a:73:b2:bd:df:31:63:69:b2:16:b1:d6:9d:ad:ee:ab:77:74:
5d:06:e3:1d:7d:5b:27:0d:7d:5a:94:3b:0a:c3:d8:05:65:c6:
5e:a7:de:99:77:6a:96:cf:5f:ad:f4:49:08:77:fb:ca:ca:88:
ee:b3:7c:32:a9:9b:77:c4:b4:41:b1:62:d0:06:08:fd:87:8d:
ce:71:af:19:bc:00:e6:d2:34:32:c9:fd:6f:40:a0:ed:d2:4f:
0f:bf:0b:4e:d1:12:86:bc:41:99:4c:91:c0:10:f8:19:6e:3b:
60:6a:0a:07:a5:43:0c:ad:f8:67:7b:ba:76:61:04:94:6e:1d:
51:66:b0:e8:51:c9:26:a5:07:3f:14:33:d7:97:84:d3:6d:56:
b6:f3:9b:e0:7b:0b:15:e2:fb:07:8a:af:42:9f:0b:fd:9a:ed:
fe:ad:fa:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:13 2026 by rpki-client