Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
File: CZofLb97eoSuV7jWdCa35OQg-rU.mft (raw, json)
Hash identifier: ptCDZOWh5aBpN8RMUY61SX18ndhF0rbmhSr3iJmTzck=
Subject key identifier: 89:C4:3E:85:EB:1A:4E:CF:1A:EC:6A:CE:3F:35:05:15:4A:8D:A6:BF
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 019D31F4D3E81D583B0BA054729E557C51EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
Manifest number: 0AB7
Signing time: Sat 28 Mar 2026 01:00:21 +0000
Manifest this update: Sat 28 Mar 2026 01:00:21 +0000
Manifest next update: Sun 29 Mar 2026 01:00:21 +0000
Files and hashes: 1: BJowdLldqJHM3ir588qx25T2i1o.roa (hash: nGJPoQmYXI/63Ysvy1k3U4F/yfSsIELkLPYGxlPw234=)
2: CZofLb97eoSuV7jWdCa35OQg-rU.crl (hash: QpzDWWx7wlHikkg2yC1w0W/c8Lr7PlLHs4sI65i4KQc=)
3: Fi9A7ox4EzBVsjYUvBuYzjfrMx4.roa (hash: yPzWCEaVWwitvSN0VQpWfi2iaiWGTDPLLRlVVcJ92AY=)
4: lcFMLBJ4Qsm2pQ6VUD3RYi3MSqw.roa (hash: jCb7ZL+Zyxb7PMRFxkMl8BDTxyWFfiSmgO42R7iSszA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f4:d3:e8:1d:58:3b:0b:a0:54:72:9e:55:7c:51:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Mar 28 01:00:21 2026 GMT
Not After : Mar 29 01:00:21 2026 GMT
Subject: CN=89c43e85eb1a4ecf1aec6ace3f3505154a8da6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:8b:20:7c:b8:dd:de:c2:06:82:28:5e:86:
2f:e8:98:26:40:d2:ce:78:f9:13:3e:1c:b9:ee:52:
6d:14:f3:4d:e3:84:88:35:40:88:0d:77:be:ca:e1:
d1:3b:6e:95:46:fa:6f:e6:db:27:58:0a:f3:85:8f:
6a:a6:ab:84:45:e6:2c:7f:62:f9:f3:ac:e8:bf:72:
60:06:83:4f:67:e2:91:44:34:64:a0:4d:da:5e:07:
e8:1a:0d:61:0d:61:f3:3f:95:a5:cb:7b:0a:0e:8c:
32:55:d9:a4:b8:9d:5a:cc:44:6d:46:76:26:1e:2c:
8d:2e:6f:fe:cb:28:05:28:88:bd:c2:9f:58:46:e5:
1d:6b:eb:c4:34:b3:56:ea:9a:6d:52:e5:82:a6:7c:
25:ff:ff:2b:9a:06:f0:ab:27:ea:14:0e:50:39:17:
03:fa:a7:11:03:1e:d7:3b:4c:3b:13:80:cd:bd:17:
ac:de:ba:16:22:bc:f1:75:59:c9:d9:26:8e:bf:af:
72:e5:17:e2:0d:bd:11:16:2c:dd:f5:2c:c0:f9:46:
bc:b1:24:a8:bb:9f:83:02:57:50:db:2e:92:45:bc:
26:6d:5f:4d:ae:de:d4:27:c1:e8:7c:ab:ac:e1:92:
cb:73:ab:c2:fe:b1:b9:14:e6:26:98:02:ef:43:99:
13:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C4:3E:85:EB:1A:4E:CF:1A:EC:6A:CE:3F:35:05:15:4A:8D:A6:BF
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:28:36:43:50:f8:fc:35:3a:8f:f1:89:a7:d4:0e:1f:81:1b:
94:bf:53:51:06:cd:a4:a0:4f:41:f1:49:d5:b1:91:84:53:08:
76:46:c6:f2:7d:5b:89:d4:ef:6a:a8:0a:3f:22:5b:fe:af:22:
8a:02:c3:c8:2a:a8:1a:a5:8d:90:83:28:01:1d:2f:ad:ce:b4:
39:ae:0f:24:81:24:a2:e8:5c:88:3f:81:d7:79:1f:16:58:b5:
3f:fb:df:6b:81:e7:5e:75:b3:29:77:2e:b6:27:f5:29:25:ab:
32:35:ba:eb:2f:a3:e6:32:d9:85:91:2e:e1:00:e6:8c:d2:f3:
a2:2c:1b:e0:94:5e:71:88:d3:55:03:ae:f2:f4:77:cb:be:37:
b1:ab:21:f6:12:76:83:08:e5:97:dd:f5:ed:c6:b2:77:73:ad:
ff:20:90:55:10:f1:0c:f4:e1:b2:96:b4:67:33:0e:af:2e:17:
ad:f2:08:a1:55:19:a3:30:04:c2:a4:33:cd:23:8e:6a:03:56:
6f:1c:f1:b4:ab:aa:f1:ad:ff:14:57:d1:db:ff:f6:76:a9:6e:
08:1e:be:24:ba:d1:4a:6d:da:1c:38:27:ee:a6:30:fd:ac:01:
78:24:78:be:84:8b:7e:20:67:cb:7d:90:87:23:77:44:22:ee:
ce:8a:49:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0x9NPoHVg7C6BUcp5VfFHsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OWExZjJkYmY3YjdhODRhZTU3YjhkNjc0MjZiN2U0ZTQy
MGZhYjUwHhcNMjYwMzI4MDEwMDIxWhcNMjYwMzI5MDEwMDIxWjAzMTEwLwYDVQQD
Eyg4OWM0M2U4NWViMWE0ZWNmMWFlYzZhY2UzZjM1MDUxNTRhOGRhNmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzSLIHy43d7CBoIoXoYv6JgmQNLO
ePkTPhy57lJtFPNN44SINUCIDXe+yuHRO26VRvpv5tsnWArzhY9qpquEReYsf2L5
86zov3JgBoNPZ+KRRDRkoE3aXgfoGg1hDWHzP5Wly3sKDowyVdmkuJ1azERtRnYm
HiyNLm/+yygFKIi9wp9YRuUda+vENLNW6pptUuWCpnwl//8rmgbwqyfqFA5QORcD
+qcRAx7XO0w7E4DNvRes3roWIrzxdVnJ2SaOv69y5RfiDb0RFizd9SzA+Ua8sSSo
u5+DAldQ2y6SRbwmbV9Nrt7UJ8HofKus4ZLLc6vC/rG5FOYmmALvQ5kTmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInEPoXrGk7PGuxqzj81BRVKjaa/MB8GA1UdIwQY
MBaAFAmaHy2/e3qErle41nQmt+TkIPq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kNDJhYmItMzM0Mi00ODg3LWFmNDAt
OWNkNjhmMjIxZTIxLzEvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kNDJhYmItMzM0Mi00ODg3LWFmNDAtOWNkNjhmMjIxZTIx
LzEvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCg2Q1D4
/DU6j/GJp9QOH4EblL9TUQbNpKBPQfFJ1bGRhFMIdkbG8n1bidTvaqgKPyJb/q8i
igLDyCqoGqWNkIMoAR0vrc60Oa4PJIEkouhciD+B13kfFli1P/vfa4HnXnWzKXcu
tif1KSWrMjW66y+j5jLZhZEu4QDmjNLzoiwb4JRecYjTVQOu8vR3y743sash9hJ2
gwjll9317cayd3Ot/yCQVRDxDPThspa0ZzMOry4XrfIIoVUZozAEwqQzzSOOagNW
bxzxtKuq8a3/FFfR2//2dqluCB6+JLrRSm3aHDgn7qYw/awBeCR4voSLfiBny32Q
hyN3RCLuzopJ6w==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:07 2026 by rpki-client