Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
File: CZofLb97eoSuV7jWdCa35OQg-rU.mft (raw, json)
Hash identifier: r9JjjiJsv8dWKFvKOaVAeTp4akaTZ/WgpWrk6/KCQYU=
Subject key identifier: 1E:D1:C1:C2:41:0C:5A:0B:52:A7:CB:F9:43:0E:A2:2E:1D:0E:83:1D
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 01A0CF36288FBB53EBF61E1E082179B9FD64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
Manifest number: 0C98
Signing time: Wed 23 Sep 2026 17:00:27 +0000
Manifest this update: Wed 23 Sep 2026 17:00:27 +0000
Manifest next update: Thu 24 Sep 2026 17:00:27 +0000
Files and hashes: 1: CZofLb97eoSuV7jWdCa35OQg-rU.crl (hash: QCxB7w8oDshL39A6uiBaw+e2ILQW1c/K9AofJJw7k+w=)
2: Fi9A7ox4EzBVsjYUvBuYzjfrMx4.roa (hash: yPzWCEaVWwitvSN0VQpWfi2iaiWGTDPLLRlVVcJ92AY=)
3: TFsYtnMK-S1MHjhB7ttIMTUYvTE.roa (hash: yhOmAEnX77ZvAO8FCgQkABRqf6EUa68cBRvbl3kyrmE=)
4: lcFMLBJ4Qsm2pQ6VUD3RYi3MSqw.roa (hash: jCb7ZL+Zyxb7PMRFxkMl8BDTxyWFfiSmgO42R7iSszA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:28:8f:bb:53:eb:f6:1e:1e:08:21:79:b9:fd:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Sep 23 17:00:27 2026 GMT
Not After : Sep 24 17:00:27 2026 GMT
Subject: CN=1ed1c1c2410c5a0b52a7cbf9430ea22e1d0e831d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:35:d8:a2:af:94:d8:b5:54:91:3c:c5:7e:95:
27:9e:68:42:09:9f:99:34:2c:a6:b6:a2:1c:f7:61:
17:b3:bb:d5:ed:2c:8c:7d:5c:15:eb:e8:ac:e9:df:
01:dd:05:9f:d3:2f:bd:cc:83:34:e1:22:57:aa:09:
a7:7b:af:d8:27:11:b3:cd:80:34:21:c6:5c:a8:94:
77:24:e2:b0:30:89:1d:0a:8b:24:54:7b:f7:b1:91:
a6:ac:1a:71:77:25:cc:b6:57:0d:56:9a:9f:be:f1:
9d:0c:f5:d1:33:84:78:8e:a5:58:62:11:6d:c9:fd:
70:e2:a2:50:b2:31:97:8f:a5:53:ec:0e:ed:0a:77:
0f:4f:c1:e9:f6:6f:b5:86:b6:94:2d:22:23:a7:8b:
90:c3:14:30:a7:86:69:62:ec:ca:74:36:64:d0:37:
a5:7f:8b:23:a2:d5:26:62:5d:71:2f:88:a2:84:63:
30:7f:8f:fb:82:10:46:68:57:0c:21:cc:fd:d4:9a:
22:b4:f7:90:8c:7e:53:9a:e9:c1:51:fc:5c:d9:d1:
11:ea:f9:f5:11:4a:a2:9c:36:11:c3:73:30:5d:90:
93:fe:4b:8c:12:1e:3e:20:b1:72:e7:38:2e:5c:6a:
55:9c:be:af:dd:21:fa:a5:dc:cf:e4:b4:7f:f3:cd:
cd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D1:C1:C2:41:0C:5A:0B:52:A7:CB:F9:43:0E:A2:2E:1D:0E:83:1D
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:dd:3b:5b:20:bc:d1:aa:eb:c0:7c:2d:8d:aa:d2:52:fd:5c:
fb:02:f1:0c:66:90:74:cf:65:78:bf:41:7d:73:95:45:63:3b:
76:11:75:31:bd:92:89:48:2f:1c:5c:b5:4e:0b:cb:10:4b:06:
b4:bc:66:f9:f3:f5:6e:28:47:89:52:9e:dc:8f:fa:06:48:11:
9f:41:f4:38:0a:43:dc:3e:7e:9c:30:af:8f:94:48:01:46:fb:
a6:60:49:6c:cf:96:00:89:4b:81:eb:3c:56:c4:82:bd:44:bf:
88:92:84:2b:38:22:bb:3c:19:28:fd:98:b0:81:25:5b:45:b6:
5f:30:07:04:9d:ac:c1:8c:c3:c8:19:bd:ee:6c:5c:0b:b8:d3:
64:d4:0f:1d:00:a2:35:81:c4:19:b2:0a:70:13:77:55:3a:77:
53:aa:58:72:94:d9:a5:ae:b5:db:8f:b3:20:07:b2:77:9e:c5:
f1:ed:81:b1:26:ee:7b:aa:e4:62:7c:bb:32:c2:3b:5b:d6:82:
f6:7f:25:c0:5a:44:b5:dc:18:a9:39:61:7f:b0:11:ae:1c:de:
fa:43:82:67:19:83:68:3d:09:3a:9f:2e:4b:96:97:79:4f:d5:
ee:d9:f5:fd:38:7c:5e:39:51:53:f9:d4:10:7f:dc:b8:84:1f:
23:d3:21:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:52:30 2026 by rpki-client