Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
File: CzHLUw_lL8wCnmSX53ggA5jCnzw.mft (raw, json)
Hash identifier: ZL5xMdPOmNGgH5QNg8VNWriqD0/WZCgm7sNFF1w9rcg=
Subject key identifier: DE:BC:60:40:EC:A9:EB:07:F0:90:B6:BF:2C:A7:50:68:0D:5C:3A:B1
Authority key identifier: 0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
Certificate issuer: /CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Certificate serial: 01A0DEAAA69FC7C15EC61468CF6D91B0D333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 17:02:00 +0000
Manifest this update: Sat 26 Sep 2026 17:02:00 +0000
Manifest next update: Sun 27 Sep 2026 17:02:00 +0000
Files and hashes: 1: CzHLUw_lL8wCnmSX53ggA5jCnzw.crl (hash: bq9cCWZc9dyB7LAG0CnOHVh17ySEt0zOZeF78M1TZwU=)
2: F7SCLIzy92KJ-NREaaVjODfHqik.roa (hash: BwWuIIlFuPQUtjh0Ydgc0I6ELzPNPwQINU9/s1qI1yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 17:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:aa:a6:9f:c7:c1:5e:c6:14:68:cf:6d:91:b0:d3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Validity
Not Before: Sep 26 17:02:00 2026 GMT
Not After : Sep 27 17:02:00 2026 GMT
Subject: CN=debc6040eca9eb07f090b6bf2ca750680d5c3ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8a:3b:b6:50:d0:ed:9c:ba:40:30:70:08:c7:
2c:03:c3:5b:7e:cf:93:a2:53:e4:01:f1:c0:d1:e0:
e4:ff:b4:ef:05:60:a6:3c:60:03:42:0c:46:14:21:
02:c1:bb:4f:d7:c6:0a:43:03:5c:b8:ee:cc:85:c8:
d0:f9:a8:66:cc:80:c5:fc:97:03:a9:da:18:e1:eb:
62:b9:76:eb:fc:31:a6:9d:b9:df:6a:42:9d:09:4e:
30:c6:96:34:cf:62:c7:8e:1c:6c:c6:7a:91:81:63:
6c:af:c1:68:70:5b:16:85:e5:b6:d3:6d:f8:22:82:
2c:eb:e7:ac:ea:7a:81:1f:46:7e:2f:40:a7:04:6c:
8b:cc:e2:d9:00:ef:e6:1f:ed:86:3e:2a:8a:d1:26:
0d:6a:ab:93:e9:74:bf:77:e2:b8:9d:c9:3d:4f:16:
7b:e2:ed:02:40:72:47:76:cc:a9:68:6a:a0:98:37:
64:6f:2c:60:12:87:33:99:57:e2:7e:45:ad:85:83:
97:a0:24:44:8b:85:34:7e:34:bf:e9:f9:7d:55:62:
75:c2:ef:55:b3:c4:d1:11:9d:53:65:27:fd:ce:3f:
0f:57:7c:a2:dd:9f:0b:2b:93:68:c9:99:2e:64:1f:
4f:5e:b8:00:05:e1:b6:7b:8f:d9:c5:30:ec:32:6f:
74:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BC:60:40:EC:A9:EB:07:F0:90:B6:BF:2C:A7:50:68:0D:5C:3A:B1
X509v3 Authority Key Identifier:
keyid:0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c4:bd:0e:a3:11:1d:60:30:f3:4b:b4:39:73:17:9b:5a:73:
d2:c5:21:68:59:12:8b:31:c2:3b:1e:c6:14:93:ad:45:ad:e4:
b9:41:88:fa:ce:64:43:78:f5:4e:76:ae:b7:a3:42:4e:e6:95:
f5:f8:d1:d4:b8:99:1d:c7:60:61:82:91:9b:be:5d:5a:27:c2:
6c:42:07:6a:d1:11:93:b6:af:3f:58:bf:bc:81:ff:ab:e0:2e:
e0:63:52:48:07:83:1e:45:c4:a3:51:0d:19:42:4a:36:c4:ad:
38:e4:24:a1:21:1b:30:8d:bf:32:61:5f:ab:69:c6:24:6f:db:
58:3a:25:14:3a:32:b3:9a:5f:f8:5e:d4:80:41:43:53:d2:5c:
61:1c:a1:b9:33:bf:a4:d8:13:52:91:b7:b2:7c:e2:08:8a:3c:
b3:2c:5a:78:90:fa:a6:b0:9b:ca:49:20:65:46:30:af:72:83:
4e:61:63:db:10:6c:f1:b1:aa:c8:5f:f1:9e:1a:99:43:81:37:
f0:14:6c:da:b3:68:46:90:17:77:e3:7c:c8:7f:c4:75:96:de:
f4:2d:a7:a9:a7:ce:ff:9a:44:3f:05:c4:87:99:a0:4f:53:81:
44:8b:55:54:53:e5:fa:0e:f9:48:9f:ff:67:9f:ae:8b:22:cd:
f3:b4:41:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDeqqafx8FexhRoz22RsNMzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMzFjYjUzMGZlNTJmY2MwMjllNjQ5N2U3NzgyMDAzOThj
MjlmM2MwHhcNMjYwOTI2MTcwMjAwWhcNMjYwOTI3MTcwMjAwWjAzMTEwLwYDVQQD
EyhkZWJjNjA0MGVjYTllYjA3ZjA5MGI2YmYyY2E3NTA2ODBkNWMzYWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYo7tlDQ7Zy6QDBwCMcsA8Nbfs+T
olPkAfHA0eDk/7TvBWCmPGADQgxGFCECwbtP18YKQwNcuO7MhcjQ+ahmzIDF/JcD
qdoY4etiuXbr/DGmnbnfakKdCU4wxpY0z2LHjhxsxnqRgWNsr8FocFsWheW20234
IoIs6+es6nqBH0Z+L0CnBGyLzOLZAO/mH+2GPiqK0SYNaquT6XS/d+K4nck9TxZ7
4u0CQHJHdsypaGqgmDdkbyxgEoczmVfifkWthYOXoCREi4U0fjS/6fl9VWJ1wu9V
s8TREZ1TZSf9zj8PV3yi3Z8LK5NoyZkuZB9PXrgABeG2e4/ZxTDsMm90LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN68YEDsqesH8JC2vyynUGgNXDqxMB8GA1UdIwQY
MBaAFAsxy1MP5S/MAp5kl+d4IAOYwp88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3pITFV3X2xMOHdDbm1TWDUzZ2dBNWpDbnp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hNjg5OWItM2JiMi00ZGRjLTljOTEt
YTFlM2MzOTRlZTgwLzEvQ3pITFV3X2xMOHdDbm1TWDUzZ2dBNWpDbnp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9hNjg5OWItM2JiMi00ZGRjLTljOTEtYTFlM2MzOTRlZTgw
LzEvQ3pITFV3X2xMOHdDbm1TWDUzZ2dBNWpDbnp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANcS9DqMR
HWAw80u0OXMXm1pz0sUhaFkSizHCOx7GFJOtRa3kuUGI+s5kQ3j1Tnaut6NCTuaV
9fjR1LiZHcdgYYKRm75dWifCbEIHatERk7avP1i/vIH/q+Au4GNSSAeDHkXEo1EN
GUJKNsStOOQkoSEbMI2/MmFfq2nGJG/bWDolFDoys5pf+F7UgEFDU9JcYRyhuTO/
pNgTUpG3snziCIo8syxaeJD6prCbykkgZUYwr3KDTmFj2xBs8bGqyF/xnhqZQ4E3
8BRs2rNoRpAXd+N8yH/EdZbe9C2nqafO/5pEPwXEh5mgT1OBRItVVFPl+g75SJ//
Z5+uiyLN87RB4Q==
-----END CERTIFICATE-----
Generated at Sun Sep 27 01:43:35 2026 by rpki-client