Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json)
Hash identifier: 9iCW6JSaLBZn6qacsByPUy+bNCLZrqLaKSkqLkucISM=
Subject key identifier: D3:A2:11:2B:CC:59:93:31:DD:3C:72:64:1F:7C:07:E3:24:96:C3:BC
Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786
Certificate serial: 019F916D9F90823E5D82550C56BD0342EF33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
Manifest number: 07E1
Signing time: Fri 24 Jul 2026 00:01:48 +0000
Manifest this update: Fri 24 Jul 2026 00:01:48 +0000
Manifest next update: Sat 25 Jul 2026 00:01:48 +0000
Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: C7THlikWO7dsMBAVfoGu3Y4Gm2TT9Ocnub4kFGwOdfM=)
2: G33itK1qq3WeYfI2JZv_Df-F-kM.roa (hash: M48oQ7e0L/CLHTbH2STVHWlHyf+bv796hviSQB+beow=)
3: lSqq2t5j5uhQNwBWbI6WL7tpfgY.roa (hash: O4mt9ymqocsZDQGjjG1ro7L0no6+r2S8A/5/+O3vsZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:9f:90:82:3e:5d:82:55:0c:56:bd:03:42:ef:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099da06b80fa749068028b597be3e50e8b118786
Validity
Not Before: Jul 24 00:01:48 2026 GMT
Not After : Jul 25 00:01:48 2026 GMT
Subject: CN=d3a2112bcc599331dd3c72641f7c07e32496c3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:35:46:09:70:29:13:ff:ec:67:17:70:0d:bd:
39:df:97:de:1e:78:65:fa:0c:ee:09:87:54:b1:b7:
87:2e:25:97:8f:92:9c:5e:77:41:02:52:88:8f:ac:
ab:5f:dc:10:c0:8d:d9:b9:96:fe:af:55:df:ff:20:
e0:b8:69:a5:b0:54:53:47:ee:1f:2f:d8:56:f6:3b:
77:a9:bb:55:4b:eb:94:96:4c:4d:6f:51:ca:47:b1:
93:3b:03:38:b5:3b:b5:77:a5:82:fe:85:a7:dd:00:
bd:0f:0c:6c:50:26:af:b7:d5:85:f3:1c:ec:a0:ef:
48:3a:bb:15:85:0b:1a:fc:cf:48:1e:ba:3f:b3:c4:
ee:36:d7:2e:6e:3e:dc:c0:a6:1b:cb:d1:7b:1e:c5:
28:83:ba:29:85:50:53:2e:5e:62:f3:a4:a5:87:30:
39:4b:cc:f7:fc:d4:1e:93:e8:33:32:48:7a:a4:a2:
e6:58:2e:bf:35:e6:f9:99:85:e3:2a:c8:42:f4:1a:
25:de:a9:dd:70:66:b0:20:45:81:36:87:90:9a:f1:
74:70:fd:53:14:f9:7c:79:b5:29:d1:6c:27:2f:17:
66:d6:38:ab:20:c8:10:4b:a2:33:2a:bf:2c:89:cd:
2e:02:c3:4d:60:ea:4a:06:49:20:55:1f:e9:6a:01:
5a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A2:11:2B:CC:59:93:31:DD:3C:72:64:1F:7C:07:E3:24:96:C3:BC
X509v3 Authority Key Identifier:
keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:07:2e:39:15:ba:1b:87:22:7f:47:db:0b:e2:bb:3a:a3:db:
e1:2e:01:0e:aa:80:ec:7a:45:85:fb:c3:96:78:32:02:57:08:
f1:2b:5e:b8:1e:5c:2c:78:6b:4f:4e:3a:85:c4:f8:83:b8:02:
ec:02:34:6a:ec:19:f3:d4:ee:fa:9d:1c:5a:be:a6:df:69:3f:
61:8d:ae:96:56:46:3a:14:11:17:14:4f:ee:f0:3d:13:a3:2b:
a9:b9:e3:ed:a7:b6:ad:dd:f6:29:4b:8b:c9:3e:8b:31:02:51:
a6:6e:f2:61:9d:b4:a0:c6:37:44:66:2e:3c:9b:0b:6e:43:5b:
96:36:91:fa:e4:6d:dd:93:14:a3:01:9a:7c:a0:fe:4d:93:81:
ae:08:52:39:9d:d9:7c:a9:63:79:21:32:8d:e9:bb:35:cb:58:
64:10:bf:2c:ba:57:d9:e4:00:56:04:f8:46:7b:6b:fe:ff:1c:
74:23:8e:a8:ef:0d:51:a5:f2:42:39:bc:5a:c5:0c:c7:e4:8c:
b1:8e:63:8b:7e:da:08:5d:c2:4c:36:90:5b:37:8b:79:ce:8c:
e9:97:09:cb:d8:de:c2:b1:c0:19:0f:a9:0f:71:d9:23:a1:a3:
18:39:7c:1d:d7:94:bd:02:f0:0a:39:23:7b:b1:a9:3e:05:c4:
94:4b:0b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:19:01 2026 by rpki-client