Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
File: CZ05RkE90RFhtGx99q02Kpk41dQ.mft (raw, json)
Hash identifier: TsSpF9uQLCfADCV8TsK/MEWfNwSNSGGXbEpwiaBXAnQ=
Subject key identifier: EF:CF:42:8E:D6:76:A8:7E:A5:E0:73:9B:C4:2F:99:68:05:4B:1A:D7
Authority key identifier: 09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
Certificate issuer: /CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Certificate serial: 01A0CCA385639278616E66F6EDE9F2F8E434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
Manifest number: 083C
Signing time: Wed 23 Sep 2026 05:01:03 +0000
Manifest this update: Wed 23 Sep 2026 05:01:03 +0000
Manifest next update: Thu 24 Sep 2026 05:01:03 +0000
Files and hashes: 1: 2YAgI74gbNqNd4cR2a1xK7IpNo0.roa (hash: UfaVQLtUsjyfgahDcdhJ4KwcH3jtGHAp5uCPoj3a35Q=)
2: CZ05RkE90RFhtGx99q02Kpk41dQ.crl (hash: +YrGzDMfoEppfTcHhQkZZDLYBsI2H6E/VAnmmLnpBsM=)
3: eO4OXeTBNdp3Wk5KjPR2B_e07OI.asa (hash: vSPUOrqLSS1QDlHSmyS6Ip+i1a344wmk09R05jnzxf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:85:63:92:78:61:6e:66:f6:ed:e9:f2:f8:e4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Validity
Not Before: Sep 23 05:01:03 2026 GMT
Not After : Sep 24 05:01:03 2026 GMT
Subject: CN=efcf428ed676a87ea5e0739bc42f9968054b1ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a4:50:72:69:55:72:52:4e:f4:ed:08:e0:2d:
17:91:32:62:1d:b4:58:24:6a:6e:32:c4:27:9b:85:
f4:85:cf:b4:13:bf:74:5c:22:c2:17:24:4f:db:ca:
16:c0:9b:25:f2:a4:6c:44:45:2a:1a:27:d4:35:ff:
6f:96:70:a4:ea:c3:65:35:7a:c2:cc:4e:1f:81:f1:
9a:fe:6a:a3:46:bb:1e:18:88:6f:15:33:32:a6:0d:
4f:34:f2:14:67:da:e8:5c:2c:ba:45:d3:1c:55:b7:
9a:06:62:6f:43:5a:d5:95:c7:13:fc:73:b3:ff:ad:
e0:5d:4f:56:70:c5:bb:3a:b7:1b:1d:ce:7e:d1:e0:
c4:33:b1:24:40:1e:78:24:a5:0f:b2:45:55:22:d4:
af:ff:d1:ae:29:6a:e1:bd:cb:9f:93:82:e0:1a:d9:
69:a6:e3:2e:73:93:52:55:94:76:c5:5d:ee:5b:fb:
a9:6c:1c:2b:cf:63:1e:63:a4:a2:ab:18:4d:f2:04:
9a:02:a5:21:5f:5a:59:1a:b1:96:1a:88:92:5c:38:
e2:7f:f4:59:23:e9:fa:52:55:b0:79:14:c7:8c:d1:
a2:41:88:40:4e:4c:b6:84:b1:34:3e:c8:98:ba:fd:
bc:06:4e:a3:11:12:bd:f5:b8:ce:72:08:5a:c9:da:
a5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CF:42:8E:D6:76:A8:7E:A5:E0:73:9B:C4:2F:99:68:05:4B:1A:D7
X509v3 Authority Key Identifier:
keyid:09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:de:88:3c:46:82:a6:9d:89:d3:39:c2:12:d6:8d:29:0d:c6:
c0:0a:cb:dc:ac:e9:58:87:f0:05:a8:35:9c:cf:bd:13:62:3b:
c5:38:13:3e:8c:f8:55:36:e8:51:ee:4f:68:91:ff:2c:e8:32:
63:46:86:36:85:da:38:d5:b5:1d:bb:7e:ec:ff:c0:52:ea:58:
7c:50:ea:c5:73:e1:c1:7b:22:b5:54:5b:9b:e1:2d:9a:a3:35:
f7:35:99:0b:1f:83:19:56:a3:35:78:62:a0:fc:dc:d7:b2:55:
fc:c2:fc:ba:a3:85:49:de:96:90:c1:8d:25:e0:43:6d:34:5f:
98:f8:95:8b:8b:70:b7:f4:df:82:74:d3:89:46:d5:c7:77:99:
5c:82:43:16:e6:c3:3c:ee:b5:e5:52:89:9d:49:eb:c1:a6:ff:
b2:d3:05:63:15:aa:a1:83:d4:22:e0:f3:01:5d:86:98:af:d1:
92:22:36:3d:bf:f3:42:ce:68:6b:3c:10:5f:f2:c6:b3:e2:75:
4d:4e:36:a2:24:93:9b:ce:bb:58:c1:6b:3b:5d:d8:18:2a:ac:
0a:18:04:7f:fd:78:7e:e9:7a:ee:22:5c:b6:3d:ab:91:9d:83:
d9:28:74:a0:6c:b9:b1:11:a6:82:71:b2:70:63:21:42:b4:07:
2b:06:cf:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMo4Vjknhhbmb27eny+OQ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OWQzOTQ2NDEzZGQxMTE2MWI0NmM3ZGY2YWQzNjJhOTkz
OGQ1ZDQwHhcNMjYwOTIzMDUwMTAzWhcNMjYwOTI0MDUwMTAzWjAzMTEwLwYDVQQD
EyhlZmNmNDI4ZWQ2NzZhODdlYTVlMDczOWJjNDJmOTk2ODA1NGIxYWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKRQcmlVclJO9O0I4C0XkTJiHbRY
JGpuMsQnm4X0hc+0E790XCLCFyRP28oWwJsl8qRsREUqGifUNf9vlnCk6sNlNXrC
zE4fgfGa/mqjRrseGIhvFTMypg1PNPIUZ9roXCy6RdMcVbeaBmJvQ1rVlccT/HOz
/63gXU9WcMW7OrcbHc5+0eDEM7EkQB54JKUPskVVItSv/9GuKWrhvcufk4LgGtlp
puMuc5NSVZR2xV3uW/upbBwrz2MeY6SiqxhN8gSaAqUhX1pZGrGWGoiSXDjif/RZ
I+n6UlWweRTHjNGiQYhATky2hLE0PsiYuv28Bk6jERK99bjOcghaydqlhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/PQo7Wdqh+peBzm8QvmWgFSxrXMB8GA1UdIwQY
MBaAFAmdOUZBPdERYbRsffatNiqZONXUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1owNVJrRTkwUkZodEd4OTlxMDJLcGs0MWRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84NTY0NDMtYjhmYi00NzhlLTg3Yzkt
Y2Y1MmFhOWQ2Y2NjLzEvQ1owNVJrRTkwUkZodEd4OTlxMDJLcGs0MWRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC84NTY0NDMtYjhmYi00NzhlLTg3YzktY2Y1MmFhOWQ2Y2Nj
LzEvQ1owNVJrRTkwUkZodEd4OTlxMDJLcGs0MWRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgt6IPEaC
pp2J0znCEtaNKQ3GwArL3KzpWIfwBag1nM+9E2I7xTgTPoz4VTboUe5PaJH/LOgy
Y0aGNoXaONW1Hbt+7P/AUupYfFDqxXPhwXsitVRbm+EtmqM19zWZCx+DGVajNXhi
oPzc17JV/ML8uqOFSd6WkMGNJeBDbTRfmPiVi4twt/TfgnTTiUbVx3eZXIJDFubD
PO615VKJnUnrwab/stMFYxWqoYPUIuDzAV2GmK/RkiI2Pb/zQs5oazwQX/LGs+J1
TU42oiSTm867WMFrO13YGCqsChgEf/14ful67iJctj2rkZ2D2Sh0oGy5sRGmgnGy
cGMhQrQHKwbPtw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:05:59 2026 by rpki-client