Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json)
Hash identifier: 9qnpoArFY8qv9bn695kQi6Oay5ckPF/rczHhkkavmqE=
Subject key identifier: 5D:74:5D:92:79:54:A9:62:4C:D3:FD:BB:E9:0F:E4:39:71:24:C6:57
Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786
Certificate serial: 019D277211B0ADD83D72996B3C446BF4A136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
Manifest number: 06A1
Signing time: Thu 26 Mar 2026 00:01:19 +0000
Manifest this update: Thu 26 Mar 2026 00:01:19 +0000
Manifest next update: Fri 27 Mar 2026 00:01:19 +0000
Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: wWJo+56F7dLjKnA9k/TWg/u6O9l1/JOwLPEgti0S6Tw=)
2: G33itK1qq3WeYfI2JZv_Df-F-kM.roa (hash: M48oQ7e0L/CLHTbH2STVHWlHyf+bv796hviSQB+beow=)
3: lSqq2t5j5uhQNwBWbI6WL7tpfgY.roa (hash: O4mt9ymqocsZDQGjjG1ro7L0no6+r2S8A/5/+O3vsZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:11:b0:ad:d8:3d:72:99:6b:3c:44:6b:f4:a1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099da06b80fa749068028b597be3e50e8b118786
Validity
Not Before: Mar 26 00:01:19 2026 GMT
Not After : Mar 27 00:01:19 2026 GMT
Subject: CN=5d745d927954a9624cd3fdbbe90fe4397124c657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:76:fc:4c:f9:83:5e:45:e9:d9:95:39:bb:e4:
78:86:6b:37:29:a3:22:51:61:5f:bb:45:8b:d4:1d:
9a:9a:28:c1:ab:73:6c:54:c6:35:21:ae:cd:d7:ee:
ae:ad:b3:53:d9:76:a4:19:cb:c2:cb:3d:83:a7:93:
ab:55:1e:db:dc:dc:15:9b:6d:4b:ca:4f:18:e0:1d:
27:38:6e:31:54:56:19:ec:6c:e4:51:2b:5d:a9:6b:
24:63:73:36:34:96:17:f3:d5:d8:4c:34:a2:fe:39:
34:ae:fa:92:80:08:bc:bd:f0:83:b4:07:08:b3:7c:
4e:09:d3:85:fd:bc:6c:f9:dd:3f:7c:b5:50:69:e0:
eb:27:e8:53:70:72:0d:50:e4:51:14:3a:ec:67:f6:
f3:81:6c:ab:06:f5:5a:1d:33:33:5f:ce:90:de:c4:
9f:98:10:8a:05:ee:d2:36:4c:dc:99:e6:83:f2:58:
7c:b4:f1:b4:32:37:eb:81:36:85:4c:42:9f:05:2d:
4b:a2:0c:c6:5e:85:34:d5:4f:f8:27:eb:bf:40:58:
96:32:8e:a8:6c:7e:57:b5:ee:c0:81:64:da:2d:21:
13:8c:22:91:65:44:30:19:91:6d:72:57:0b:ce:58:
85:8c:18:8c:4a:de:8a:3c:ce:5e:26:af:a7:52:c7:
15:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:74:5D:92:79:54:A9:62:4C:D3:FD:BB:E9:0F:E4:39:71:24:C6:57
X509v3 Authority Key Identifier:
keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:09:ef:29:d7:ef:20:c4:e3:b6:88:52:5b:b8:9e:28:c7:95:
d9:c7:f1:f7:23:d9:7e:d2:1e:77:48:78:13:30:a3:53:38:ad:
aa:a5:f9:8b:31:e8:84:2c:a9:ed:92:38:eb:f1:d6:c9:0f:4b:
f8:3e:42:dc:09:48:05:33:2b:ad:c1:91:74:4d:db:d4:d8:28:
ae:c1:b2:0b:04:31:38:18:d6:95:17:b4:45:bc:69:66:5d:48:
d1:d3:61:a0:75:f2:fe:e6:02:00:6a:3b:78:7e:89:55:85:fc:
9a:be:89:04:e7:ff:71:97:ef:60:42:50:66:40:8e:41:2b:65:
33:80:71:46:e8:ad:8f:0c:a8:b3:85:f1:2e:6d:d2:1e:97:eb:
ae:a1:8b:bb:0e:5a:26:00:b9:30:67:b1:78:93:c8:9e:ae:ab:
a9:fd:56:46:39:68:97:cb:80:fb:35:78:10:4b:47:eb:94:75:
c1:17:21:5d:e2:e6:15:37:9e:48:30:ff:64:d3:ad:14:7c:ed:
fe:a2:47:ac:ec:7d:a1:ec:a6:81:1a:da:4b:1a:01:fc:80:ac:
9e:5a:a8:ff:93:ed:31:07:c7:90:5d:d2:11:2c:03:0c:23:10:
27:d4:a5:f7:cd:2b:d9:f9:75:35:dd:ad:73:4d:4f:6e:74:88:
28:ea:65:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:12 2026 by rpki-client