Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
File: CZ-qshYRGNsbd8GnTszLc-doHDY.mft (raw, json)
Hash identifier: R5njEtlK2dgTQZwVfuPG/UtA7zA+y+Kdfkrrz1PoIN0=
Subject key identifier: F3:5F:96:B5:7C:D7:D1:63:57:06:1E:EA:23:C8:F6:FD:AD:D1:91:A1
Authority key identifier: 09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36
Certificate issuer: /CN=099faab2161118db1b77c1a74ecccb73e7681c36
Certificate serial: 01A0D1930781BB1620660053E8693517EE0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
Manifest number: 048F
Signing time: Thu 24 Sep 2026 04:01:08 +0000
Manifest this update: Thu 24 Sep 2026 04:01:08 +0000
Manifest next update: Fri 25 Sep 2026 04:01:08 +0000
Files and hashes: 1: CZ-qshYRGNsbd8GnTszLc-doHDY.crl (hash: cKHmdf0YYQXKE/T2xwc+BJwJjon5f+Z3o/i+Ry0ztMI=)
2: NRr2UI5e4wiswqTD1lGv01pJ4xk.roa (hash: 4mb2TEhQ6KvVYtVWs2U8Cn19nMjJqwA+tVusB1WoNvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:93:07:81:bb:16:20:66:00:53:e8:69:35:17:ee:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099faab2161118db1b77c1a74ecccb73e7681c36
Validity
Not Before: Sep 24 04:01:08 2026 GMT
Not After : Sep 25 04:01:08 2026 GMT
Subject: CN=f35f96b57cd7d16357061eea23c8f6fdadd191a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:0a:24:c1:4c:3e:f7:26:11:2b:3f:3d:2b:
bb:96:11:84:f7:01:6c:f4:50:71:3d:49:7b:b2:bf:
0e:f2:71:2e:6f:ef:b6:33:7d:3e:f0:cd:23:eb:b7:
66:bb:00:b1:48:8e:97:9f:d5:08:d2:5a:5b:c1:58:
f7:49:95:33:ad:af:39:19:f3:ed:d5:0b:9e:9a:3b:
f2:dd:80:ac:08:ec:1f:78:a6:53:ac:6d:6c:b2:15:
09:5f:99:b2:7c:fe:3a:3c:fb:fc:e4:55:9a:85:99:
6d:25:4d:49:df:ea:26:69:1a:4e:de:f1:04:ac:cf:
3e:9c:9c:a1:75:cd:b7:7e:00:69:49:f9:46:99:c9:
c9:dc:88:ad:95:48:7c:66:16:35:c4:ab:13:90:aa:
05:aa:96:b7:95:2c:45:3b:b1:ab:ca:1e:1c:ba:17:
6e:82:c5:c2:3f:cc:9f:a1:f3:2a:3b:15:9a:f0:66:
94:5d:2e:56:57:59:91:f6:ad:74:06:6f:7c:bb:03:
51:07:b2:8d:58:77:ad:78:42:dc:46:1a:85:29:0b:
2e:f0:6e:89:73:6a:a5:95:d6:9b:bd:cf:82:96:3b:
4e:b3:60:20:b8:89:97:fa:1a:e9:85:d5:c8:0d:ae:
98:2f:5e:73:de:e7:51:2a:19:8d:bf:96:e1:33:ce:
39:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5F:96:B5:7C:D7:D1:63:57:06:1E:EA:23:C8:F6:FD:AD:D1:91:A1
X509v3 Authority Key Identifier:
keyid:09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:9a:19:63:fe:10:cf:55:09:c6:8b:09:29:c7:1a:f5:4a:0a:
fe:de:d2:3d:ac:7f:6c:a2:fe:04:21:04:2c:88:12:3e:a3:ec:
7e:0a:7b:68:33:6c:bb:6e:f1:35:54:eb:8a:bc:2a:5c:4d:63:
22:a9:d9:36:30:0b:2b:dc:ef:1c:2a:de:d3:17:ea:a7:e6:fa:
53:ea:bf:a9:1e:37:16:1d:71:3d:00:3b:06:eb:0f:77:30:80:
16:a7:b6:6a:86:20:46:f7:30:2b:9e:19:bc:ab:9b:b1:7f:b3:
52:85:09:b3:5a:13:72:cd:ee:e7:93:fe:b8:12:85:d6:e4:24:
ab:2f:8e:4a:e2:d0:38:5b:47:cf:c4:c1:7b:fd:2e:a5:9d:c8:
4d:49:08:44:a6:94:71:7f:ec:9a:6c:ec:7e:9b:dd:88:aa:ff:
00:b4:ea:74:9a:9d:f7:af:82:d3:38:8b:7d:db:9c:fd:62:9a:
b2:7a:c6:21:06:54:e0:27:88:fc:aa:19:1a:f6:a9:58:1a:d3:
5e:79:0b:50:e3:dd:12:5a:7a:cd:d7:78:ea:95:6c:0d:1b:53:
f5:39:49:e9:1c:99:be:99:19:7e:3a:d1:e9:45:69:a9:b5:33:
dc:9f:d5:39:54:3b:0e:4a:50:0d:9c:65:ff:fd:78:cf:7f:58:
18:9c:e8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:19:32 2026 by rpki-client