Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
File: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft (raw, json)
Hash identifier: EH0oeSLxZD8gT+0GpcperlZnT5ySgRktjHDQ+a5pTPY=
Subject key identifier: 23:BC:B6:A9:79:AA:C1:58:E7:8D:7F:5B:10:71:70:6D:61:59:33:9C
Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Certificate serial: 019F8FB51D94BDD8ED83C7B2A98694B91315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 16:00:39 +0000
Manifest this update: Thu 23 Jul 2026 16:00:39 +0000
Manifest next update: Fri 24 Jul 2026 16:00:39 +0000
Files and hashes: 1: 7ciFHPcyDl_GiD4yOy7-6YbFSE4.roa (hash: spKjqMXNtC0h5y4SSbTIV4kFe/adq7sNxeFXmSbfQ7o=)
2: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl (hash: rbUJOGeEyqMwRVaJ5OG8XuNU8Of5D3vilvXrxPdwHlc=)
3: QqEtI7mSBnf3k13sxA2thJ-1o4Q.roa (hash: MvaPAINH/RoYeDbeWcuMwbOZ15Dwjgbo2f18w/6CCqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:1d:94:bd:d8:ed:83:c7:b2:a9:86:94:b9:13:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Validity
Not Before: Jul 23 16:00:39 2026 GMT
Not After : Jul 24 16:00:39 2026 GMT
Subject: CN=23bcb6a979aac158e78d7f5b1071706d6159339c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:51:cd:6d:09:da:99:e4:18:48:57:9d:51:
2b:e9:40:f8:b1:a9:39:0b:19:5e:9a:93:31:15:80:
e4:ac:c6:68:51:5a:91:e6:f1:10:a8:5c:22:de:a8:
bd:1c:ec:f3:ca:5b:71:95:30:e7:d0:bc:13:84:e3:
15:7c:ef:67:96:2f:f0:ca:97:bb:7d:48:ea:cd:ec:
57:fd:fd:5e:7f:87:04:aa:cb:ee:f2:8a:4a:4c:23:
8d:2a:d5:c7:c1:4c:d3:76:ad:b4:5c:3c:ea:2d:36:
00:18:e3:d1:d6:aa:fe:73:c5:c3:80:a5:5f:e9:4e:
b7:db:d0:eb:65:52:72:ad:4d:ca:63:37:9c:06:7a:
b8:dc:03:ae:5d:c9:f5:65:85:17:41:76:19:fe:26:
44:d9:4d:c9:d3:61:df:fb:66:52:98:3a:b6:24:a4:
be:df:6f:b0:7b:c8:d9:55:90:68:07:c1:45:a0:74:
ff:9f:62:81:22:20:08:d6:1e:70:5b:2e:85:dc:12:
d0:07:e1:49:8a:81:32:27:65:fc:75:da:ae:61:a4:
56:2f:13:2b:79:98:a9:80:28:9b:ab:9c:0a:64:68:
81:db:b5:fd:e3:5f:bf:c5:4e:7b:dd:94:b1:f0:f3:
1c:a1:e9:85:8b:11:11:b8:76:5e:25:c8:86:78:34:
61:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BC:B6:A9:79:AA:C1:58:E7:8D:7F:5B:10:71:70:6D:61:59:33:9C
X509v3 Authority Key Identifier:
keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8b:de:8a:1d:35:2a:db:6e:26:07:c6:36:b8:b6:b5:d7:db:
d1:78:03:09:45:85:36:ba:f9:a1:ae:8f:3e:e9:b5:64:b8:c3:
02:92:34:b1:2e:66:95:5c:ad:dd:ac:e9:1c:da:0a:47:55:df:
45:f3:04:ff:51:0c:be:03:8f:47:0d:49:4a:e8:e2:27:da:aa:
d5:c9:ba:86:64:f2:9d:32:2e:30:d7:39:ef:07:e4:78:01:e6:
13:49:1b:c8:bc:fc:9d:ff:3b:8c:8a:30:52:5b:3d:17:29:c2:
75:55:ea:5e:6e:67:83:0c:4e:1b:a0:78:51:59:8f:83:5e:51:
af:39:30:52:07:78:86:86:b4:f3:2d:08:b8:ec:2f:6a:ab:cf:
bf:10:0e:67:ce:47:17:48:08:4d:38:8a:bf:85:62:50:53:d1:
ca:d9:d1:1a:c4:ed:91:92:ee:1f:eb:4f:e5:7c:a2:df:26:05:
57:85:a5:26:d2:a7:4f:3e:3f:f4:bb:8a:51:22:39:92:c4:7d:
4b:19:38:1d:33:51:81:30:77:13:0e:71:98:e0:d9:c2:79:3e:
ec:19:4f:7b:d1:c2:e1:35:86:f9:db:d5:40:ea:fc:4d:78:ff:
2f:0e:b7:85:5e:7f:61:32:9e:5f:f8:eb:f3:72:4e:c4:50:79:
8b:a2:97:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:25 2026 by rpki-client