Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
File: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft (raw, json)
Hash identifier: TuLLUS2zNrzr0eN8zolI6B7hwQmnsz3YcMcL/8oWLeY=
Subject key identifier: 7A:B1:E6:75:EF:B4:BE:F7:48:0D:C8:AB:F5:54:44:CA:00:0A:64:D8
Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Certificate serial: 01A0D9F1F9C7E12545945F6511BFD3F0DAB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 19:01:48 +0000
Manifest this update: Fri 25 Sep 2026 19:01:48 +0000
Manifest next update: Sat 26 Sep 2026 19:01:48 +0000
Files and hashes: 1: 7ciFHPcyDl_GiD4yOy7-6YbFSE4.roa (hash: spKjqMXNtC0h5y4SSbTIV4kFe/adq7sNxeFXmSbfQ7o=)
2: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl (hash: z/sQWFWIgpg9L+B3d+kGYeiW4w9ImONVoDV5IDDnkDs=)
3: QqEtI7mSBnf3k13sxA2thJ-1o4Q.roa (hash: MvaPAINH/RoYeDbeWcuMwbOZ15Dwjgbo2f18w/6CCqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 19:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:f9:c7:e1:25:45:94:5f:65:11:bf:d3:f0:da:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Validity
Not Before: Sep 25 19:01:48 2026 GMT
Not After : Sep 26 19:01:48 2026 GMT
Subject: CN=7ab1e675efb4bef7480dc8abf55444ca000a64d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:49:38:1c:de:3a:4f:f6:e1:56:52:b3:d9:ea:
5a:8a:0c:a3:6c:6a:ac:db:f4:13:a7:96:9a:61:8e:
b9:59:39:92:4b:37:af:0e:a1:fc:ba:3e:2d:d1:c2:
e2:b8:36:6f:88:37:e9:07:a3:7e:5b:1c:26:f7:f5:
e8:30:ba:07:d6:78:c4:e5:26:4b:a7:32:9d:d5:a7:
8a:cf:bb:a7:1c:99:a5:09:30:c8:75:19:d6:7d:41:
e2:35:1a:40:18:20:16:a6:9a:89:72:c1:a2:42:f2:
6e:c4:81:8c:f8:6a:0b:4d:8c:05:d1:4c:8e:29:b8:
26:c0:25:d7:58:b9:60:16:4a:6a:54:d5:09:f7:f0:
a2:39:02:85:9f:f7:c3:da:3f:14:1d:b8:79:db:df:
2e:74:d4:2e:42:64:1f:20:18:1c:71:01:3e:7f:09:
b8:bc:2e:32:c8:d3:3d:61:2d:26:b2:33:11:11:c9:
42:35:2c:6c:6e:8a:84:33:35:23:d7:5b:5d:9e:de:
99:a8:c5:16:66:55:14:bf:e6:3b:17:ed:2c:de:e0:
cc:aa:45:da:4b:21:56:a3:fa:ea:5d:f5:19:83:88:
6a:67:c8:da:d9:c7:7f:f4:bf:3d:96:8c:38:52:e2:
77:93:65:34:ae:57:6e:9a:03:a1:ff:16:cd:94:8a:
1a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B1:E6:75:EF:B4:BE:F7:48:0D:C8:AB:F5:54:44:CA:00:0A:64:D8
X509v3 Authority Key Identifier:
keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:41:86:d2:01:e8:5f:37:52:14:da:01:d8:39:fd:c5:df:35:
33:42:7c:ee:71:21:f5:bf:63:42:98:64:30:47:6f:69:e8:ed:
6e:a0:d7:78:18:f5:96:de:0b:96:82:d9:ab:9b:b4:7d:57:93:
66:17:dc:3c:64:48:65:bb:f9:18:90:57:6d:98:5a:2b:c1:75:
54:af:25:8c:f5:c6:b5:aa:5a:d2:65:aa:fe:63:f5:4c:8d:fd:
23:4c:2b:2f:e8:98:69:f9:68:54:a1:d7:1a:7c:e2:96:6e:05:
58:e5:ca:85:a4:fb:15:50:dc:65:49:2e:db:6c:58:28:17:cf:
15:89:37:8f:cf:b4:7b:81:a0:7e:49:60:bd:76:71:18:25:47:
98:94:5b:a9:bf:56:0a:06:87:de:bb:75:c6:57:29:44:95:25:
3d:58:6f:bb:42:2c:94:4c:b1:ea:cb:9a:d8:80:19:b1:7f:22:
4d:ea:58:35:b1:76:30:7e:8d:36:50:a4:1a:77:b8:07:16:d7:
76:d7:bb:6f:84:6c:d9:25:92:85:77:1a:0d:59:de:2d:b3:1f:
19:d6:83:cc:dc:97:dd:b2:29:6d:b0:e7:32:32:2f:3a:fc:42:
94:5e:cb:25:16:cd:a4:2a:92:9b:c6:2f:c7:d2:12:5a:f6:89:
6c:80:cd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:39:12 2026 by rpki-client