Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
File: CZ05RkE90RFhtGx99q02Kpk41dQ.mft (raw, json)
Hash identifier: YjpxKnodnCoLAdKmdNfB6X74o6IlfJ+dnQ/47AdOGag=
Subject key identifier: 3F:6B:BF:0D:D3:AB:5E:EE:45:D2:20:C4:44:48:24:1F:2B:21:4A:32
Authority key identifier: 09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
Certificate issuer: /CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Certificate serial: 019E1D229BD49C57CFFF27697219CCB942D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
Manifest number: 06D8
Signing time: Tue 12 May 2026 17:01:07 +0000
Manifest this update: Tue 12 May 2026 17:01:07 +0000
Manifest next update: Wed 13 May 2026 17:01:07 +0000
Files and hashes: 1: 2YAgI74gbNqNd4cR2a1xK7IpNo0.roa (hash: UfaVQLtUsjyfgahDcdhJ4KwcH3jtGHAp5uCPoj3a35Q=)
2: CZ05RkE90RFhtGx99q02Kpk41dQ.crl (hash: MDzm45hGyoiTraQfQNzWBJHo8endkEbNsakj3blD8mU=)
3: eO4OXeTBNdp3Wk5KjPR2B_e07OI.asa (hash: vSPUOrqLSS1QDlHSmyS6Ip+i1a344wmk09R05jnzxf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:9b:d4:9c:57:cf:ff:27:69:72:19:cc:b9:42:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Validity
Not Before: May 12 17:01:07 2026 GMT
Not After : May 13 17:01:07 2026 GMT
Subject: CN=3f6bbf0dd3ab5eee45d220c44448241f2b214a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:20:68:0a:58:65:a4:41:6a:4d:3b:88:56:c1:
d9:28:d4:1e:2c:15:80:1a:92:88:c4:55:c4:b9:a2:
af:f9:e2:d8:6c:1c:e1:43:b2:b9:07:53:6b:98:37:
bd:81:e9:14:c5:91:75:f6:9a:97:f6:e6:3a:05:2f:
02:4e:df:ab:df:10:93:11:05:0e:36:0b:49:59:37:
66:bb:0a:39:09:29:8d:24:19:14:09:42:69:e3:1d:
21:b2:91:ce:c6:3c:ae:0f:bc:45:bc:14:40:b2:b2:
da:fd:5a:a4:16:97:a9:53:06:0a:24:bd:c3:fc:36:
18:ab:e8:9a:14:d5:c2:a6:e7:b2:8f:12:f1:9f:24:
19:77:16:3d:7b:65:cc:8a:54:76:4d:4a:b8:c0:d9:
68:12:77:c8:61:06:80:1e:41:d8:52:0e:e7:27:5f:
88:ec:10:71:16:d6:b9:28:02:3f:60:97:24:81:40:
ad:69:95:a3:9e:42:4d:3c:c8:68:88:e2:27:d0:f8:
0c:3a:18:1b:19:c9:b8:74:62:a4:24:07:b8:8e:62:
61:b1:ee:1b:e1:ea:f1:f0:d6:77:f2:4c:84:da:a5:
13:9b:37:c1:23:29:11:01:9d:3f:57:f4:8e:22:cc:
67:65:3c:88:db:53:9f:35:7f:61:62:a1:3f:38:e2:
3d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6B:BF:0D:D3:AB:5E:EE:45:D2:20:C4:44:48:24:1F:2B:21:4A:32
X509v3 Authority Key Identifier:
keyid:09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f8:e5:3b:60:7e:f8:71:2f:cf:ad:fc:0c:16:63:85:6b:a3:
c3:83:8f:80:6e:74:0a:7d:90:b9:7e:6d:d8:da:f1:0c:06:8b:
4e:ef:f5:0c:15:aa:48:9f:c4:0b:46:0a:0b:5c:a1:21:23:5b:
de:0d:8c:06:d1:57:ef:f4:3c:80:f8:62:f1:22:08:bd:23:f7:
88:3d:f0:03:7d:43:13:34:3d:e8:9a:3e:12:2f:45:61:26:ec:
1f:e7:ff:94:fc:97:17:a8:1b:21:cb:4d:c0:85:89:b4:4f:b7:
ab:a1:89:61:ca:ca:05:8e:6b:f9:c9:52:82:ba:a4:1f:7f:0c:
30:92:d4:69:d3:e5:63:83:9f:e5:0c:ed:8a:ef:8e:83:3a:66:
d8:fa:8d:b4:f8:3e:26:b2:80:d4:56:61:47:6a:a3:74:23:14:
1b:2a:d1:f5:e5:b3:2d:09:54:c9:17:0c:57:81:6c:33:48:fe:
1c:59:0f:f0:7d:4d:77:cf:c4:44:29:2f:70:00:47:5b:fc:79:
63:40:71:4e:4b:fe:a8:fd:36:48:03:8e:cf:cb:89:19:9c:bf:
d4:ca:9b:c6:7b:3a:4a:6d:10:57:76:ae:14:85:0a:db:bf:99:
70:ee:4a:ba:bf:8b:be:6c:f6:7d:92:e4:df:61:5c:ee:46:85:
a8:ff:d4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:56:09 2026 by rpki-client