Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
File: CZofLb97eoSuV7jWdCa35OQg-rU.mft (raw, json)
Hash identifier: Lm1/GSO5oILcWPEJ7R0lVHQhRvGFE7esPoNLYcMN1gw=
Subject key identifier: 8C:31:C7:94:7D:A5:2B:58:55:E9:4B:51:94:C3:57:48:C0:3A:E5:AE
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 01A0D6F0736E051545E88347FB910E7F0DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
Manifest number: 0C9C
Signing time: Fri 25 Sep 2026 05:01:17 +0000
Manifest this update: Fri 25 Sep 2026 05:01:17 +0000
Manifest next update: Sat 26 Sep 2026 05:01:17 +0000
Files and hashes: 1: CZofLb97eoSuV7jWdCa35OQg-rU.crl (hash: h4OuVEXJJW/lQfd2+QPtpkSC6SzOEEg6saGLRFAzWY8=)
2: Fi9A7ox4EzBVsjYUvBuYzjfrMx4.roa (hash: yPzWCEaVWwitvSN0VQpWfi2iaiWGTDPLLRlVVcJ92AY=)
3: TFsYtnMK-S1MHjhB7ttIMTUYvTE.roa (hash: yhOmAEnX77ZvAO8FCgQkABRqf6EUa68cBRvbl3kyrmE=)
4: lcFMLBJ4Qsm2pQ6VUD3RYi3MSqw.roa (hash: jCb7ZL+Zyxb7PMRFxkMl8BDTxyWFfiSmgO42R7iSszA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:73:6e:05:15:45:e8:83:47:fb:91:0e:7f:0d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Sep 25 05:01:17 2026 GMT
Not After : Sep 26 05:01:17 2026 GMT
Subject: CN=8c31c7947da52b5855e94b5194c35748c03ae5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:63:a1:67:b9:9d:0b:58:a1:0b:2d:c0:b8:
1d:cb:9e:65:21:b7:23:a4:b2:17:58:a7:f2:9d:f4:
46:91:4f:49:95:16:6b:ce:c9:ea:90:6e:42:40:ea:
fc:7c:1a:d8:ea:64:c6:27:38:d9:7b:64:32:89:e8:
bb:b1:a1:7c:17:c3:8d:06:d9:34:bd:53:77:50:e2:
ea:37:ab:6a:f0:6e:8c:80:d7:c6:d8:d1:40:1d:79:
f3:68:a1:e3:d1:13:5d:39:b1:60:92:b5:c0:ea:be:
2b:c0:d3:c6:f2:01:58:4b:0e:75:30:7d:aa:f0:9b:
0e:83:83:c6:16:b4:f0:01:7b:c0:dd:99:69:49:aa:
da:13:f4:fe:7d:1a:76:2b:45:96:68:df:e5:4f:2f:
c7:e1:fd:a9:6a:c2:52:e6:5d:6f:40:0a:6c:69:02:
41:66:79:85:3f:ca:f8:ec:0c:7a:fb:39:75:46:2e:
ba:05:95:ad:83:cc:ca:bf:0e:ab:e4:4e:79:b7:75:
5f:20:9c:9d:a6:3f:fc:a9:f0:e8:1c:98:3c:90:81:
db:92:f9:58:29:cc:26:4f:73:ee:61:5c:71:0a:fa:
74:6f:84:e6:f1:e9:87:37:04:e6:3a:c6:94:23:d1:
c3:6e:cb:5c:cb:a2:d2:24:b3:24:89:f9:6d:ce:a5:
15:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:31:C7:94:7D:A5:2B:58:55:E9:4B:51:94:C3:57:48:C0:3A:E5:AE
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:3d:c3:65:6f:ad:22:9e:b5:15:f3:3f:ea:fe:8d:39:8d:23:
d3:bd:dc:5f:ed:58:55:5f:a3:f6:c4:b2:09:ff:7b:5a:5a:10:
20:e7:54:9f:9f:dc:da:35:f1:2b:b7:ba:0a:9b:0a:ab:c5:5a:
a8:42:46:35:9d:de:c9:9d:83:41:71:82:8d:ef:45:f3:57:43:
df:4a:56:86:2e:2f:c4:f6:a8:9b:c9:8f:0b:b2:5a:9f:37:c5:
2f:2f:4b:86:d2:05:18:04:e4:4e:d6:3b:b1:df:70:32:ad:9a:
4c:0b:d7:18:68:70:c0:e1:03:86:09:e6:c9:a0:68:1b:2d:22:
70:b8:1b:ac:ad:46:7b:e8:2c:2d:a1:db:bb:bb:0a:d2:20:07:
aa:4d:c7:19:4b:97:b0:fe:09:4a:4c:63:96:dd:29:b5:dd:92:
bf:f6:0c:ca:88:3f:cf:93:5c:a5:24:a3:c6:63:ce:84:da:fc:
64:b7:e0:d0:be:47:c5:f1:bc:92:70:98:0c:20:e4:bb:dc:89:
e1:9e:0b:8a:5f:a2:62:06:23:5e:32:02:09:fd:9f:37:da:88:
8b:9a:55:5d:9b:3a:26:dc:b3:20:d8:21:26:a9:ed:4f:c8:71:
3d:33:d9:e9:18:e0:20:2b:7f:44:e8:b5:36:8a:13:82:cd:54:
ab:94:b4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:50:32 2026 by rpki-client