Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
File: CZofLb97eoSuV7jWdCa35OQg-rU.mft (raw, json)
Hash identifier: DVN96twfpt36Etmkm48Q0fXPaZXd9bQXeVkrL0DlD4o=
Subject key identifier: 68:8F:B4:36:CF:B9:CA:5A:42:05:08:54:AF:76:E6:5F:CD:2A:D6:9F
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 019E1D910CF632D74173CAB7C63EC1092AF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
Manifest number: 0B31
Signing time: Tue 12 May 2026 19:01:45 +0000
Manifest this update: Tue 12 May 2026 19:01:45 +0000
Manifest next update: Wed 13 May 2026 19:01:45 +0000
Files and hashes: 1: BJowdLldqJHM3ir588qx25T2i1o.roa (hash: nGJPoQmYXI/63Ysvy1k3U4F/yfSsIELkLPYGxlPw234=)
2: CZofLb97eoSuV7jWdCa35OQg-rU.crl (hash: EY1k35ksQzgB2HgWC++H/F7nr4R2wHRlNJ4yyvi8MS4=)
3: Fi9A7ox4EzBVsjYUvBuYzjfrMx4.roa (hash: yPzWCEaVWwitvSN0VQpWfi2iaiWGTDPLLRlVVcJ92AY=)
4: lcFMLBJ4Qsm2pQ6VUD3RYi3MSqw.roa (hash: jCb7ZL+Zyxb7PMRFxkMl8BDTxyWFfiSmgO42R7iSszA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:0c:f6:32:d7:41:73:ca:b7:c6:3e:c1:09:2a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: May 12 19:01:45 2026 GMT
Not After : May 13 19:01:45 2026 GMT
Subject: CN=688fb436cfb9ca5a42050854af76e65fcd2ad69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:47:17:30:8c:32:c2:5d:23:f3:8c:1e:21:1c:
f4:67:5b:13:1f:af:36:c2:a6:dd:68:03:11:1a:c3:
97:05:63:64:3e:7e:8d:e4:81:3c:4f:d8:1c:e6:ec:
7f:ba:ec:de:f1:62:a6:38:05:16:f7:e5:04:05:00:
13:75:91:ec:42:b0:24:26:e3:ec:60:02:17:33:ad:
a4:25:d1:be:07:40:83:aa:e3:fb:43:a8:b1:72:11:
88:3b:65:28:ce:23:6b:28:35:bf:1b:62:d8:15:ff:
9f:e0:4f:6a:b5:a2:15:6d:60:a8:7e:8f:11:62:87:
ef:fb:26:40:e1:22:b4:b1:f1:98:e7:23:2b:8c:f6:
20:dd:9a:71:f6:87:5b:e8:c7:ce:59:68:16:2a:5b:
16:e8:57:b0:d2:3b:e1:61:63:72:8b:09:16:45:e2:
ba:9c:d7:2a:d4:20:fd:1e:3c:67:63:c4:c6:aa:49:
5e:0a:f1:c0:eb:11:c4:bc:9f:31:85:97:04:b9:56:
8e:78:21:bc:6f:ab:6a:32:10:8e:35:14:ad:5f:e2:
82:13:6c:57:e8:14:eb:03:fa:e8:41:53:5d:c2:6a:
08:e5:b1:64:6c:1c:b7:49:50:05:4b:6f:52:77:27:
ae:59:74:c0:4a:eb:44:3c:e3:eb:44:da:7a:62:b4:
05:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8F:B4:36:CF:B9:CA:5A:42:05:08:54:AF:76:E6:5F:CD:2A:D6:9F
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b4:69:6e:40:49:1e:ae:09:2e:a4:66:8e:b6:a9:bd:92:1d:
13:f6:c4:cb:a5:72:20:92:e5:90:e2:6c:54:54:18:31:44:da:
cc:e7:ff:b2:7f:b8:ca:c6:86:07:44:9b:1c:93:23:3a:66:e1:
f7:3c:f5:a5:72:ee:f4:0a:56:33:9b:27:1a:ac:45:49:87:84:
99:cd:db:cf:f2:f7:11:7e:45:95:01:b6:8c:e4:8c:ea:87:11:
b6:b2:b6:24:d0:b2:e7:22:ac:75:cd:e6:4a:b6:11:4b:0f:2b:
34:0b:d4:83:5c:a6:a4:71:29:25:78:95:bc:a0:72:35:b6:b4:
4a:70:92:6f:9d:aa:e4:6e:a7:14:ef:7b:be:69:fc:94:d9:9d:
6d:da:41:cf:2c:ca:d8:98:10:8e:be:9c:bd:2f:e2:29:3d:28:
a1:09:6c:91:ab:cb:d7:21:43:17:03:07:b1:a5:fb:ca:eb:7c:
8c:5f:52:cd:10:e3:27:0f:29:d8:71:66:55:c3:e6:64:ae:a2:
ca:94:47:3f:60:93:82:f2:ce:67:62:f7:5a:86:8d:90:90:48:
ee:36:f9:9a:ba:80:f8:65:10:be:8e:44:b7:26:2c:bf:99:0c:
51:04:8c:ce:0b:70:dc:be:ea:a5:ba:cd:5d:98:4d:28:0a:56:
cd:52:45:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:55:36 2026 by rpki-client