Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json)
Hash identifier: 7JJGXlJdtM4SPcRCD+rKKNJchea33aBp52dv/+F5R9s=
Subject key identifier: 2D:29:51:27:7B:F4:79:B8:EB:37:B8:BF:1B:FD:DA:E2:41:72:74:38
Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786
Certificate serial: 019E1CB552376F5E15C3B78A0F46B5C3B425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
Manifest number: 0720
Signing time: Tue 12 May 2026 15:01:45 +0000
Manifest this update: Tue 12 May 2026 15:01:45 +0000
Manifest next update: Wed 13 May 2026 15:01:45 +0000
Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: ArfUoPyabNW6+rCwvuIN2jVyyvQFmqtblD3GpaRqdXE=)
2: G33itK1qq3WeYfI2JZv_Df-F-kM.roa (hash: M48oQ7e0L/CLHTbH2STVHWlHyf+bv796hviSQB+beow=)
3: lSqq2t5j5uhQNwBWbI6WL7tpfgY.roa (hash: O4mt9ymqocsZDQGjjG1ro7L0no6+r2S8A/5/+O3vsZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:52:37:6f:5e:15:c3:b7:8a:0f:46:b5:c3:b4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099da06b80fa749068028b597be3e50e8b118786
Validity
Not Before: May 12 15:01:45 2026 GMT
Not After : May 13 15:01:45 2026 GMT
Subject: CN=2d2951277bf479b8eb37b8bf1bfddae241727438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:74:e2:06:47:91:8a:7f:b8:da:b8:10:f3:cd:
ea:ab:7b:db:23:ed:40:0c:38:56:0e:46:81:65:72:
c8:a9:a4:14:41:74:3a:ca:cd:2d:68:77:fb:7d:d0:
b9:90:d3:84:41:9e:d5:29:e9:e5:c1:89:a7:9d:af:
b7:a0:6f:0c:0c:b4:47:fe:45:de:13:77:76:39:4f:
f2:d6:88:59:2d:13:37:05:be:32:32:39:94:4e:4a:
81:05:b1:aa:5a:8c:5a:72:e0:db:16:ff:9c:20:4a:
db:19:ba:39:e8:ac:9d:6a:97:3d:e7:ce:72:05:e5:
78:ed:d9:49:e2:94:65:da:e3:35:e3:23:7e:08:ad:
b6:d0:37:36:1b:0b:f1:54:d1:5d:c3:81:79:b0:f3:
8f:8d:63:84:e2:82:7f:c0:a5:a0:43:0e:34:7e:5c:
f2:fc:b3:21:31:f6:0f:29:c0:1b:83:61:b8:cf:7f:
10:01:97:f0:e7:38:e3:9b:1c:e4:c5:8e:41:34:c0:
f3:bf:b4:4b:96:23:67:f9:86:e8:01:a5:a6:7b:ee:
76:8c:0f:87:2d:01:e1:06:34:17:3a:99:1a:d4:8b:
68:05:4c:b7:2b:53:8d:11:d8:6c:fb:96:10:bb:0c:
b1:ed:81:09:2a:77:c1:02:be:45:f5:87:dc:50:6e:
52:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:29:51:27:7B:F4:79:B8:EB:37:B8:BF:1B:FD:DA:E2:41:72:74:38
X509v3 Authority Key Identifier:
keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:dc:74:39:7d:f0:2f:ea:5c:ae:b4:72:16:54:df:c9:af:c2:
bf:46:29:b7:c8:8a:1c:06:ea:03:86:46:ac:3f:ed:1d:d6:b8:
35:58:15:ab:7e:fe:67:8a:2c:5f:1c:4c:08:8c:8f:2b:22:59:
c5:27:62:cc:4d:b4:32:d2:6d:33:4c:dd:9a:9d:4f:b1:01:4b:
cb:e3:38:19:d7:ab:17:22:f2:88:ce:48:6b:94:20:bc:ab:79:
21:68:c6:cb:aa:8e:9a:6a:f3:c1:70:69:b5:6c:c3:78:5f:c0:
f2:6e:a6:61:4d:0d:ff:89:e7:c5:5a:10:ef:26:11:2a:47:a2:
d1:9d:e7:3e:30:d5:e3:92:2e:9d:96:04:25:93:6a:d8:3f:26:
c6:6c:49:64:d5:90:85:61:0c:53:3e:e5:17:e7:01:80:41:4f:
29:22:4f:7b:a8:15:bf:f4:2b:bc:7c:4c:d7:9b:93:8d:d4:9f:
b9:11:4e:3b:0d:a8:56:69:7f:d7:54:40:5b:fd:21:6c:15:de:
81:68:4a:8f:55:5f:4b:b8:cb:7f:3f:31:ce:fa:1f:d6:47:5a:
fb:c0:ad:54:00:d3:c6:c5:45:f1:af:cd:4f:d2:bf:46:9b:ca:
ba:4a:8b:4c:03:90:9f:d4:fe:08:2a:a4:f2:54:91:7f:c1:2a:
00:00:ce:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:40:27 2026 by rpki-client