Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json)
Hash identifier: 4MdCQleU/ZKsYnwjbEYoN/U8oTj3MMOIf4YQhazUqmI=
Subject key identifier: AD:00:2D:14:6F:31:08:40:E2:15:E1:E3:37:A9:CE:D8:33:25:F8:F0
Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786
Certificate serial: 01A0D0127E92E2A5A50A86F580BB3E91099B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
Manifest number: 0886
Signing time: Wed 23 Sep 2026 21:01:07 +0000
Manifest this update: Wed 23 Sep 2026 21:01:07 +0000
Manifest next update: Thu 24 Sep 2026 21:01:07 +0000
Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: UjbFDTxW7hv2AP2V3CB/3K+NMp3WS0UR9J1FN3GZsJE=)
2: G33itK1qq3WeYfI2JZv_Df-F-kM.roa (hash: M48oQ7e0L/CLHTbH2STVHWlHyf+bv796hviSQB+beow=)
3: lSqq2t5j5uhQNwBWbI6WL7tpfgY.roa (hash: O4mt9ymqocsZDQGjjG1ro7L0no6+r2S8A/5/+O3vsZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:7e:92:e2:a5:a5:0a:86:f5:80:bb:3e:91:09:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099da06b80fa749068028b597be3e50e8b118786
Validity
Not Before: Sep 23 21:01:07 2026 GMT
Not After : Sep 24 21:01:07 2026 GMT
Subject: CN=ad002d146f310840e215e1e337a9ced83325f8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:54:a4:c9:bd:eb:b1:05:ea:cc:ea:4d:db:de:
db:62:cf:b7:f4:bb:61:8a:a0:06:1e:6b:55:5e:ee:
93:79:ab:0d:ee:26:be:40:fa:0f:58:89:34:b5:66:
20:8c:f1:3b:56:f2:4f:3c:66:cc:2e:09:77:4c:9b:
42:4e:30:b3:12:49:34:03:90:6e:66:20:76:65:b8:
10:d8:c8:69:d7:18:a6:27:07:cd:dd:b6:b3:50:dd:
97:4d:85:4c:a6:1d:7d:70:fd:e1:b7:90:1c:bf:f6:
91:3f:91:08:30:df:fc:b7:ce:c1:b5:13:48:9a:e3:
aa:d5:1d:32:47:23:d2:4f:cd:6e:82:39:f4:31:39:
b1:4a:83:db:6e:28:b3:09:de:55:d7:35:db:b7:c9:
66:de:1d:e4:94:66:55:69:b7:c3:5e:0b:fa:5c:12:
ba:8f:10:42:6c:3b:6e:43:47:86:f8:8a:2a:90:c4:
6f:05:db:ca:32:dc:94:ca:b4:27:ba:aa:38:c1:31:
b1:2a:56:b5:3f:3d:ed:be:90:bb:70:cd:d0:20:0b:
73:ed:0c:d2:6f:b4:b5:a4:80:31:48:65:2d:08:c7:
8a:32:e4:0c:5a:38:fd:71:6c:fb:57:64:5a:3f:9d:
ea:85:fb:46:b6:18:ff:ce:3f:7a:4d:ce:34:23:73:
13:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:00:2D:14:6F:31:08:40:E2:15:E1:E3:37:A9:CE:D8:33:25:F8:F0
X509v3 Authority Key Identifier:
keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:4f:9b:11:e1:36:6f:f7:b7:72:97:5b:e7:a6:7b:20:84:c8:
1a:75:97:8d:ec:6b:36:c3:37:27:a0:55:79:51:c4:b6:c8:61:
fd:55:bd:5b:55:b7:7a:9e:c6:28:47:4d:1b:8b:ec:20:9b:f9:
f3:84:2e:49:51:b0:09:d5:74:57:7b:24:3a:bb:77:91:f4:9d:
f1:c6:e7:95:ce:77:59:d3:5e:34:17:fc:39:11:ba:25:09:fa:
91:c2:2f:5c:f0:c5:99:dc:f2:cd:f5:51:71:a8:7b:b7:06:13:
1b:4d:ad:d8:e7:80:ce:f7:37:fc:e9:8a:3f:cd:31:f5:51:93:
b7:7f:3f:07:5c:01:aa:93:e0:ae:af:0e:37:86:af:ee:33:e5:
e7:f3:6c:48:1d:96:3e:0b:82:81:c6:c8:77:4e:f5:bf:15:e5:
80:58:83:6b:23:13:2c:f6:b9:aa:71:12:5a:aa:23:25:3a:d7:
50:31:ab:98:bd:0c:86:80:c7:b4:c1:02:b0:5e:c1:7c:bd:67:
fb:02:49:09:5a:20:31:ed:7c:7b:cd:37:cd:a6:ef:87:3c:a8:
cf:04:7c:bd:0f:40:1e:82:6e:d8:19:cc:b2:b3:79:4d:d1:6e:
02:2d:5b:c7:3c:02:ad:88:ad:10:e6:8d:d7:31:af:42:ef:25:
64:3f:09:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:55:08 2026 by rpki-client