Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
File: CzHLUw_lL8wCnmSX53ggA5jCnzw.mft (raw, json)
Hash identifier: 6jlLxGDFlp/SfLy/sm4SAYjZB8+MAL4z1cxJGFSqgpw=
Subject key identifier: 12:34:5A:41:25:26:D6:E6:FA:85:80:E7:D7:D2:DB:6B:ED:61:7D:BB
Authority key identifier: 0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
Certificate issuer: /CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Certificate serial: 019F927F543DA7A996AD9AE13D3BDECF23BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 05:00:45 +0000
Manifest this update: Fri 24 Jul 2026 05:00:45 +0000
Manifest next update: Sat 25 Jul 2026 05:00:45 +0000
Files and hashes: 1: CzHLUw_lL8wCnmSX53ggA5jCnzw.crl (hash: slkXF0ijDo5c5hAQ3AX/n5o3KFTy7qC3WWGcreU8APo=)
2: F7SCLIzy92KJ-NREaaVjODfHqik.roa (hash: BwWuIIlFuPQUtjh0Ydgc0I6ELzPNPwQINU9/s1qI1yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:54:3d:a7:a9:96:ad:9a:e1:3d:3b:de:cf:23:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Validity
Not Before: Jul 24 05:00:45 2026 GMT
Not After : Jul 25 05:00:45 2026 GMT
Subject: CN=12345a412526d6e6fa8580e7d7d2db6bed617dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:85:56:42:3b:49:d2:00:71:99:3a:42:58:11:
ec:74:79:2b:72:20:e0:e0:c7:ad:49:bf:7e:db:14:
57:fb:b1:88:b1:d5:f4:fe:26:09:98:d6:97:f5:8c:
d2:52:db:fc:09:21:94:3e:cb:27:a5:54:1b:40:84:
da:b9:55:f3:63:55:7b:96:5f:a5:0c:76:a9:c4:39:
d8:7d:f4:4a:0d:fa:9a:c1:5c:93:44:83:a2:ba:6b:
86:4a:0d:5c:76:54:a8:45:71:8c:4f:47:70:78:bb:
25:2c:17:2b:62:74:bc:93:59:ab:4d:b3:cc:45:24:
1b:23:4b:f6:95:49:a3:a6:f4:19:80:77:14:88:da:
03:15:14:0b:c1:da:03:3a:47:9a:d1:ad:6d:43:c2:
9b:69:26:92:81:f4:e0:5f:a9:f0:ae:80:a8:6f:a1:
77:05:e6:93:16:23:9a:7c:c4:c2:5d:78:a7:5d:d1:
4d:df:68:cd:4b:a2:0b:ce:1f:38:b7:eb:c9:27:7f:
07:f9:83:01:92:68:42:03:21:cd:04:91:5b:58:0f:
34:a6:de:25:47:ca:74:54:e0:00:54:0d:8b:bc:fe:
c4:a5:8d:a9:c8:d0:a8:57:c3:38:ff:ba:ba:e9:11:
08:e5:d4:45:24:4d:a7:48:a0:01:c3:36:46:ec:7d:
65:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:34:5A:41:25:26:D6:E6:FA:85:80:E7:D7:D2:DB:6B:ED:61:7D:BB
X509v3 Authority Key Identifier:
keyid:0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c0:c0:67:02:63:f6:b9:81:30:91:c3:56:9b:8e:a0:24:01:
9e:1e:45:48:a8:0b:37:5f:da:db:ff:16:0f:65:08:d9:ff:99:
5e:22:d0:d7:4f:7d:d5:b3:ad:be:9b:30:cf:6c:b5:bd:07:44:
4a:f8:1c:bd:96:0e:f4:d2:bb:fe:2f:31:a9:8c:17:fe:0c:80:
d7:26:50:e2:70:5d:52:8b:d3:ee:37:8a:19:92:68:45:fd:9e:
65:ac:d3:c2:a5:39:b5:1d:1e:08:5b:76:84:d9:18:dd:79:a0:
42:6d:9e:46:cc:02:11:f7:1b:97:de:02:33:bb:9f:74:38:72:
6f:0d:a7:52:63:a7:76:dc:ba:57:f9:62:28:c2:f6:b8:d6:a1:
21:c3:bb:8e:45:f0:dd:82:3c:18:95:a8:56:11:5c:dc:81:2f:
69:d1:06:46:53:3c:52:52:2a:17:04:b8:8c:21:64:1d:f3:05:
80:e0:da:7a:ba:c4:b1:99:b8:a4:d2:f6:27:97:e4:fd:b2:54:
e8:1d:9b:fc:6c:8d:6c:7b:dc:f0:64:48:54:15:35:f0:67:c7:
a2:95:da:90:7a:c6:ef:74:a6:14:ef:ec:21:04:84:dd:8f:1d:
e3:ac:7f:7f:67:5f:c1:8b:94:a9:13:2c:3b:00:ae:71:db:c7:
44:08:c8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:14:33 2026 by rpki-client