Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
File: CZ-qshYRGNsbd8GnTszLc-doHDY.mft (raw, json)
Hash identifier: 57OaIU9/Q7TsUkN8bVWsc/v82DHPcDbqH/V8BNLinWQ=
Subject key identifier: 45:CD:72:65:9D:77:8E:3E:96:84:CE:ED:97:9A:7B:9C:EA:0D:5C:57
Authority key identifier: 09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36
Certificate issuer: /CN=099faab2161118db1b77c1a74ecccb73e7681c36
Certificate serial: 01A1DE02CBE74D21573A2CAF0A6ADD0E1337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
Manifest number: 051A
Signing time: Sun 15 Nov 2026 07:01:27 +0000
Manifest this update: Sun 15 Nov 2026 07:01:27 +0000
Manifest next update: Mon 16 Nov 2026 07:01:27 +0000
Files and hashes: 1: CZ-qshYRGNsbd8GnTszLc-doHDY.crl (hash: egmiE+8BWn/QY/BcvWE2CTyaUfqrSBjSBYIDtUMy4sg=)
2: NRr2UI5e4wiswqTD1lGv01pJ4xk.roa (hash: 4mb2TEhQ6KvVYtVWs2U8Cn19nMjJqwA+tVusB1WoNvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:cb:e7:4d:21:57:3a:2c:af:0a:6a:dd:0e:13:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099faab2161118db1b77c1a74ecccb73e7681c36
Validity
Not Before: Nov 15 07:01:27 2026 GMT
Not After : Nov 16 07:01:27 2026 GMT
Subject: CN=45cd72659d778e3e9684ceed979a7b9cea0d5c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e7:fb:97:98:0f:ce:fe:14:fd:66:a7:d1:44:
50:60:bb:9a:7b:e8:6a:31:c5:ce:99:e9:1e:22:86:
79:01:00:de:53:94:4d:0b:01:d9:95:e0:fc:ac:c2:
90:3f:5c:e2:0a:ec:64:bb:6d:91:43:bf:2f:6a:6e:
6a:51:20:1e:7e:12:d5:03:43:8b:b7:62:77:06:ab:
6e:34:cd:5d:56:7e:ad:c2:7d:d9:7e:88:2d:6a:68:
a4:62:bb:82:ec:d3:1a:4d:61:6d:e6:52:11:9a:83:
12:a2:c7:78:f7:f6:d5:3b:7b:54:6e:fd:ef:4c:98:
47:54:ee:57:e9:b7:1e:7c:57:cc:aa:8f:0e:d6:40:
f0:0e:0d:e7:41:ed:3e:0f:9b:de:b4:cc:be:f5:c6:
8a:dd:c0:b3:f8:3b:ea:59:9b:28:b9:0b:60:40:64:
7f:0c:ef:46:62:51:fa:17:2d:99:73:76:db:cd:11:
55:23:f4:0b:9c:52:23:4c:e9:e3:73:6d:90:39:29:
4b:9d:8c:f8:9f:12:d2:08:57:18:5e:53:2a:4b:9b:
da:1d:8f:2c:c8:c2:23:76:fe:8b:d7:be:09:53:68:
8d:4a:7d:db:70:20:f1:3b:d6:10:0a:e4:0a:e8:f3:
c4:25:d1:5a:c3:2b:19:af:30:5e:8e:29:0c:1a:cd:
ad:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CD:72:65:9D:77:8E:3E:96:84:CE:ED:97:9A:7B:9C:EA:0D:5C:57
X509v3 Authority Key Identifier:
keyid:09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e0:cb:7f:8f:af:e0:2f:b0:ae:92:76:fa:88:39:e7:55:76:
b2:b5:a2:9b:fb:81:f7:89:80:54:00:4f:24:f1:80:6d:35:e9:
d5:4b:bc:e6:bc:b4:45:49:3c:10:3c:a9:85:65:e0:25:7e:93:
80:46:02:8f:17:03:ba:63:ea:39:d3:63:e6:d2:00:e0:65:da:
8f:d3:3a:d1:87:4f:e8:be:f1:13:39:03:be:21:22:78:dc:46:
f8:a6:fc:d7:3f:4b:ab:61:49:d8:f4:67:71:ec:9f:08:5f:2d:
b5:61:b2:9d:39:a3:bf:7a:0d:50:1e:99:c3:b7:59:a8:d4:e1:
1a:f3:e6:30:c1:ad:c2:af:62:a9:f5:10:45:90:58:7e:fd:b8:
0c:ee:79:4b:c6:29:9a:a7:cc:88:41:ac:1b:be:24:c2:70:b9:
75:d9:eb:4e:b6:f3:be:fb:4c:e1:a2:ce:e6:a8:8d:a3:8f:78:
49:77:bf:7d:7c:31:cc:ba:bd:5c:7d:e8:96:ea:5d:44:e7:a4:
ea:06:a9:a4:a9:7f:90:a4:1b:12:dd:aa:61:4d:c4:3a:21:36:
c0:5d:31:76:5f:75:d7:44:88:52:5a:d5:9b:5b:b9:d1:64:5c:
1d:36:f0:70:c9:51:7b:3e:ec:66:d5:f4:c1:ff:df:99:cb:ce:
97:c2:29:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:04:47 2026 by rpki-client