Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f1f0a0-da3c-4d95-a638-506672769d9c/1/CZoxZcQAepQBMaMnzHfMIhzBadk.mft
File: CZoxZcQAepQBMaMnzHfMIhzBadk.mft (raw, json)
Hash identifier: i4/yrBrk8wGlCM6yFwH8GVcrdek8iuOaPmPqun/zqDY=
Subject key identifier: 92:99:51:FD:6B:1D:01:B3:A4:33:3A:DE:12:22:2E:97:1A:23:28:9A
Authority key identifier: 09:9A:31:65:C4:00:7A:94:01:31:A3:27:CC:77:CC:22:1C:C1:69:D9
Certificate issuer: /CN=099a3165c4007a940131a327cc77cc221cc169d9
Certificate serial: 019F92ED08EF3A29C45EAD087A1AEB1575AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZoxZcQAepQBMaMnzHfMIhzBadk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f1f0a0-da3c-4d95-a638-506672769d9c/1/CZoxZcQAepQBMaMnzHfMIhzBadk.mft
Manifest number: 19C3
Signing time: Fri 24 Jul 2026 07:00:35 +0000
Manifest this update: Fri 24 Jul 2026 07:00:35 +0000
Manifest next update: Sat 25 Jul 2026 07:00:35 +0000
Files and hashes: 1: CZoxZcQAepQBMaMnzHfMIhzBadk.crl (hash: olC5TUZQ61KRG+dAwLs6NUFcEBSHPWYlhNkcOs78CLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f1f0a0-da3c-4d95-a638-506672769d9c/1/CZoxZcQAepQBMaMnzHfMIhzBadk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f1f0a0-da3c-4d95-a638-506672769d9c/1/CZoxZcQAepQBMaMnzHfMIhzBadk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZoxZcQAepQBMaMnzHfMIhzBadk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:08:ef:3a:29:c4:5e:ad:08:7a:1a:eb:15:75:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a3165c4007a940131a327cc77cc221cc169d9
Validity
Not Before: Jul 24 07:00:35 2026 GMT
Not After : Jul 25 07:00:35 2026 GMT
Subject: CN=929951fd6b1d01b3a4333ade12222e971a23289a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f4:29:e7:4f:29:54:00:de:d5:a0:dc:69:ba:
e4:dc:2f:b7:88:a5:4e:6b:8f:f2:72:cc:47:ae:1b:
70:eb:48:99:3b:fa:8c:c8:05:92:42:14:d3:c0:51:
ee:8e:bf:f7:50:93:2b:fb:73:38:ef:b5:5a:0b:16:
f5:87:14:4e:d0:d9:5e:28:77:42:d3:fe:e5:a4:0f:
18:f5:bd:67:22:85:10:87:a3:3e:1e:99:cc:19:59:
8a:bb:23:99:de:3d:38:24:2a:3e:9d:30:2c:60:ca:
54:90:c3:4a:79:54:d5:ad:7b:30:0b:97:65:03:54:
bb:bc:a6:62:cb:f9:44:a6:11:a0:9c:a4:9e:24:84:
a2:9f:98:1d:ea:2d:31:3f:9d:71:2a:97:ca:27:c6:
fa:74:a4:53:cb:44:37:ac:6a:69:54:cc:5e:ac:c4:
2c:5c:b6:a6:fb:4f:ba:dc:d6:e3:bd:80:2e:a4:21:
ba:e6:e6:03:4c:20:5f:ab:42:51:d3:ff:61:71:b5:
6d:41:75:63:4a:22:4b:bb:8d:83:4a:32:f5:cb:7a:
95:63:18:39:75:51:55:3b:df:1f:36:42:34:e8:cd:
0f:3b:56:33:b4:1f:3f:38:47:02:6c:67:33:58:b7:
a4:6a:93:f2:83:aa:d9:39:9c:0c:93:cd:1f:8b:38:
a2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:99:51:FD:6B:1D:01:B3:A4:33:3A:DE:12:22:2E:97:1A:23:28:9A
X509v3 Authority Key Identifier:
keyid:09:9A:31:65:C4:00:7A:94:01:31:A3:27:CC:77:CC:22:1C:C1:69:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZoxZcQAepQBMaMnzHfMIhzBadk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f1f0a0-da3c-4d95-a638-506672769d9c/1/CZoxZcQAepQBMaMnzHfMIhzBadk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f1f0a0-da3c-4d95-a638-506672769d9c/1/CZoxZcQAepQBMaMnzHfMIhzBadk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:99:48:d8:12:19:e2:2e:7f:3b:68:bc:2b:55:17:f7:1a:38:
e4:f9:3f:9e:87:49:10:5e:72:cc:5e:95:49:e7:ba:13:f9:ae:
55:57:42:e6:fb:d3:5d:24:48:7a:ea:af:9c:8b:1e:b1:95:33:
19:ad:0f:bf:3a:a0:bf:2c:bd:d8:31:61:92:7f:73:d5:5c:37:
64:fe:04:3c:88:d7:42:47:04:12:71:87:66:13:ce:e2:ed:48:
e5:d2:ca:77:ad:31:9e:85:ac:57:66:5c:ae:f7:4d:91:06:72:
d5:19:01:c3:4b:40:49:5f:3e:74:f4:b9:e3:fb:f3:7d:f0:b1:
ca:43:a2:dc:b0:e4:87:14:bd:26:c6:e8:6b:7c:e1:87:e7:f9:
0a:c8:60:3e:78:9a:5c:13:33:98:d0:6c:f8:3e:85:d3:48:fd:
fe:4c:20:09:d9:aa:42:5f:5d:e3:c8:43:f7:aa:de:2f:7a:90:
05:bb:4e:f3:04:f7:19:fe:02:64:fc:40:9a:9b:02:25:68:ab:
84:06:a1:4e:ba:36:aa:f5:d6:87:e7:b5:ff:56:df:19:67:54:
07:d3:f6:fc:54:7f:37:26:49:81:ce:4b:a5:39:0b:d8:00:43:
3b:de:5b:2c:0b:5b:17:d2:b7:0b:17:3c:90:04:21:d0:ca:66:
d8:3a:8f:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7QjvOinEXq0IehrrFXWrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OWEzMTY1YzQwMDdhOTQwMTMxYTMyN2NjNzdjYzIyMWNj
MTY5ZDkwHhcNMjYwNzI0MDcwMDM1WhcNMjYwNzI1MDcwMDM1WjAzMTEwLwYDVQQD
Eyg5Mjk5NTFmZDZiMWQwMWIzYTQzMzNhZGUxMjIyMmU5NzFhMjMyODlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fQp508pVADe1aDcabrk3C+3iKVO
a4/ycsxHrhtw60iZO/qMyAWSQhTTwFHujr/3UJMr+3M477VaCxb1hxRO0NleKHdC
0/7lpA8Y9b1nIoUQh6M+HpnMGVmKuyOZ3j04JCo+nTAsYMpUkMNKeVTVrXswC5dl
A1S7vKZiy/lEphGgnKSeJISin5gd6i0xP51xKpfKJ8b6dKRTy0Q3rGppVMxerMQs
XLam+0+63NbjvYAupCG65uYDTCBfq0JR0/9hcbVtQXVjSiJLu42DSjL1y3qVYxg5
dVFVO98fNkI06M0PO1YztB8/OEcCbGczWLekapPyg6rZOZwMk80fiziigQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKZUf1rHQGzpDM63hIiLpcaIyiaMB8GA1UdIwQY
MBaAFAmaMWXEAHqUATGjJ8x3zCIcwWnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1pveFpjUUFlcFFCTWFNbnpIZk1JaHpCYWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMWYwYTAtZGEzYy00ZDk1LWE2Mzgt
NTA2NjcyNzY5ZDljLzEvQ1pveFpjUUFlcFFCTWFNbnpIZk1JaHpCYWRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9mMWYwYTAtZGEzYy00ZDk1LWE2MzgtNTA2NjcyNzY5ZDlj
LzEvQ1pveFpjUUFlcFFCTWFNbnpIZk1JaHpCYWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJlI2BIZ
4i5/O2i8K1UX9xo45Pk/nodJEF5yzF6VSee6E/muVVdC5vvTXSRIeuqvnIsesZUz
Ga0Pvzqgvyy92DFhkn9z1Vw3ZP4EPIjXQkcEEnGHZhPO4u1I5dLKd60xnoWsV2Zc
rvdNkQZy1RkBw0tASV8+dPS54/vzffCxykOi3LDkhxS9Jsboa3zhh+f5CshgPnia
XBMzmNBs+D6F00j9/kwgCdmqQl9d48hD96reL3qQBbtO8wT3Gf4CZPxAmpsCJWir
hAahTro2qvXWh+e1/1bfGWdUB9P2/FR/NyZJgc5LpTkL2ABDO95bLAtbF9K3Cxc8
kAQh0Mpm2DqPuQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:37:27 2026 by rpki-client