Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
File: CZ05RkE90RFhtGx99q02Kpk41dQ.mft (raw, json)
Hash identifier: Hp0+zxlRex5XUrRv19FeVoHSwLpGy/cCVUWWjZoQZIM=
Subject key identifier: 11:A5:72:CF:B9:3E:3D:61:30:97:52:F9:9A:35:F5:CB:E5:76:80:2B
Authority key identifier: 09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
Certificate issuer: /CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Certificate serial: 019F8FEC0A1BF271A9C30D845D65A2A86184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
Manifest number: 0798
Signing time: Thu 23 Jul 2026 17:00:38 +0000
Manifest this update: Thu 23 Jul 2026 17:00:38 +0000
Manifest next update: Fri 24 Jul 2026 17:00:38 +0000
Files and hashes: 1: 2YAgI74gbNqNd4cR2a1xK7IpNo0.roa (hash: UfaVQLtUsjyfgahDcdhJ4KwcH3jtGHAp5uCPoj3a35Q=)
2: CZ05RkE90RFhtGx99q02Kpk41dQ.crl (hash: 5CXoGsMrk17Jzae8f+4iogIDnZmlybLSDZnScLMM1cs=)
3: eO4OXeTBNdp3Wk5KjPR2B_e07OI.asa (hash: vSPUOrqLSS1QDlHSmyS6Ip+i1a344wmk09R05jnzxf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:0a:1b:f2:71:a9:c3:0d:84:5d:65:a2:a8:61:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Validity
Not Before: Jul 23 17:00:38 2026 GMT
Not After : Jul 24 17:00:38 2026 GMT
Subject: CN=11a572cfb93e3d61309752f99a35f5cbe576802b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5d:4a:7f:75:ff:67:8a:9e:71:ab:69:10:c9:
e5:7e:59:e2:45:e4:6b:bf:f9:6e:9a:e3:a3:08:5b:
49:21:67:2f:5d:6f:0e:b4:9f:aa:06:d7:df:5a:f7:
d2:8a:3f:58:6c:69:b1:c0:a4:63:48:6b:aa:4e:97:
9e:84:5b:1e:41:57:f1:c5:a5:97:c3:c4:a5:05:23:
fb:06:38:d1:c3:e1:cb:d8:1c:f0:52:3d:fc:39:eb:
3c:20:ae:af:a6:dc:88:15:d3:5c:33:50:f4:b9:2f:
fd:c8:9a:b8:89:ff:89:52:d3:ac:2f:95:96:09:3a:
97:65:bd:85:4b:b6:17:ac:c0:f9:c1:e5:af:61:ff:
30:e0:67:17:e8:12:e2:b7:70:87:b3:30:b4:15:d4:
0a:5f:4e:09:66:07:4f:a3:46:1f:0a:0c:6c:27:c1:
b3:aa:d7:1c:90:25:ed:49:b5:d9:c9:9b:11:60:0f:
a4:c9:65:5a:65:e3:96:67:a1:28:9b:96:36:cb:ac:
cd:15:cc:53:73:66:e4:84:59:49:d7:73:4a:f2:2c:
31:5a:a3:3b:13:47:a1:c6:86:1c:56:50:92:c1:57:
53:f9:9a:43:0f:9b:51:0f:79:f4:46:f8:9c:1f:9a:
ad:ad:e2:b4:a2:5c:1f:57:3c:bc:6c:f2:f8:d9:db:
e2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A5:72:CF:B9:3E:3D:61:30:97:52:F9:9A:35:F5:CB:E5:76:80:2B
X509v3 Authority Key Identifier:
keyid:09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:07:2f:96:73:3b:15:04:55:ce:0c:0a:bc:61:42:82:3f:39:
b4:79:04:ef:ce:07:e9:d5:da:f3:33:16:bb:3b:b2:45:ee:fd:
ab:f9:bf:e2:6f:97:0b:49:3a:50:72:dc:81:88:14:dd:00:55:
96:cd:de:d5:1a:33:a7:81:e2:79:d5:7d:90:0e:33:6a:93:52:
68:1f:44:7f:ee:34:40:3c:78:65:ff:d9:b6:d8:9f:2e:16:62:
4d:52:61:99:7c:5f:9a:66:8e:68:61:3c:68:ac:49:80:1b:c9:
f3:32:49:21:33:43:10:ab:e8:a4:4a:8c:20:1d:24:9d:52:fc:
88:67:bc:dd:24:fc:6d:a0:03:d8:59:eb:dc:b3:c6:6d:60:c0:
33:10:23:dc:11:c3:73:4b:c4:d4:95:d8:91:cf:cd:2a:14:81:
bb:54:1f:5e:ab:5d:77:40:fe:b3:4d:5f:76:04:6d:93:e2:67:
27:08:da:f9:82:94:e1:21:e1:91:4f:c8:ad:1b:66:9e:40:ba:
ac:01:7b:ed:8d:14:e6:98:ab:be:47:81:c3:97:e0:48:b1:89:
da:b2:ca:a2:fd:cf:d7:ac:24:1e:4b:2a:e6:52:cc:07:1d:39:
9d:9f:ca:ef:58:78:e6:ac:a5:64:32:bd:65:1b:39:97:77:a0:
82:44:9e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:23:25 2026 by rpki-client