Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
File: CZ-qshYRGNsbd8GnTszLc-doHDY.mft (raw, json)
Hash identifier: Aad0H2fPIicTIAkskel+duVH1FmcFhylEljD6ldClBY=
Subject key identifier: 69:46:BE:B6:6E:9F:F9:4A:93:AE:E9:07:79:03:07:83:10:F8:1A:BB
Authority key identifier: 09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36
Certificate issuer: /CN=099faab2161118db1b77c1a74ecccb73e7681c36
Certificate serial: 019E1EA3C3A10F359225A65C7778761CE170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
Manifest number: 0329
Signing time: Wed 13 May 2026 00:01:49 +0000
Manifest this update: Wed 13 May 2026 00:01:49 +0000
Manifest next update: Thu 14 May 2026 00:01:49 +0000
Files and hashes: 1: B4ECW0jtt5KyrtkmlUhbFQBxuus.roa (hash: Z8JjmJ/Yv+fCZ4euDC+I0rty80LYQ117ydvucBAt8Uw=)
2: CZ-qshYRGNsbd8GnTszLc-doHDY.crl (hash: 7SJsqInd0Ry6AqY9IUB4Pp0R4AW3gOIeJSH2xpTN1wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:c3:a1:0f:35:92:25:a6:5c:77:78:76:1c:e1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099faab2161118db1b77c1a74ecccb73e7681c36
Validity
Not Before: May 13 00:01:49 2026 GMT
Not After : May 14 00:01:49 2026 GMT
Subject: CN=6946beb66e9ff94a93aee9077903078310f81abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:eb:5a:84:2e:f1:aa:8b:2c:16:5e:ea:06:09:
49:1d:0f:e3:bf:0b:fd:f0:0f:b2:17:a1:67:7b:87:
4f:a8:85:af:2c:e2:c0:e8:51:15:10:fd:dc:b5:5b:
8c:e3:b3:eb:23:25:2a:bc:29:90:a8:8a:7a:ad:d4:
41:6b:3b:32:ec:69:e0:d7:0b:e0:5a:84:b8:b5:87:
08:82:10:62:d6:09:35:3a:94:88:a2:5b:9e:d3:aa:
91:19:f3:17:6c:8c:ad:6f:2e:f8:21:37:96:16:2f:
0a:3a:8a:25:d5:0e:70:c4:9e:53:6e:27:8d:cc:52:
5d:c5:4f:0e:3a:06:e8:c8:5e:ad:80:4c:e5:98:2b:
25:5d:9f:fa:4b:8d:e7:e4:24:ec:d7:1f:59:c3:b6:
0e:77:31:7b:70:97:11:19:20:fa:79:5a:cb:13:25:
61:53:1b:51:ae:69:70:26:19:bb:c4:d3:0a:3f:cb:
08:6a:e5:8e:42:79:96:c6:cc:c6:22:51:80:bd:f3:
19:87:24:dd:c1:33:8f:1b:73:46:ca:b7:f9:39:3f:
77:73:e9:28:20:de:a8:9b:4c:eb:47:f9:61:7f:76:
74:df:0e:b5:68:ff:8e:07:ce:1b:f0:85:6a:34:3a:
3f:25:b7:07:11:bb:fc:52:ea:cb:b8:1b:5f:84:8c:
ec:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:46:BE:B6:6E:9F:F9:4A:93:AE:E9:07:79:03:07:83:10:F8:1A:BB
X509v3 Authority Key Identifier:
keyid:09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d9:dd:21:42:99:84:c7:e7:84:65:5a:82:49:ed:a1:b8:63:
bd:ce:cb:05:3b:bd:3f:da:2a:17:71:5e:6c:fa:67:2f:95:f4:
98:58:23:bd:15:c0:d0:82:97:2d:e1:49:2e:f5:40:09:f2:0c:
bb:fb:2b:03:bb:f5:5d:21:42:d2:09:06:02:6e:b6:70:38:15:
7e:99:69:b2:ca:ab:d5:7a:51:f9:d8:8f:87:06:05:5c:b3:12:
c4:1f:70:d5:51:8f:fb:73:d5:d4:b3:74:d1:ea:6d:2a:86:88:
ca:ee:06:ef:81:7f:8d:b5:a9:d6:a2:77:dd:c6:93:9b:1e:bb:
7f:49:9c:8b:df:65:9c:f8:83:d5:40:a2:8f:e6:34:6f:82:31:
7d:a1:cc:30:9a:66:92:1d:9a:0b:bd:3e:23:b0:dd:0c:43:e6:
15:19:94:1c:61:ef:a9:49:0a:8a:ac:b5:49:c5:34:c7:33:44:
61:ed:4a:fd:0b:51:b7:5c:52:c2:29:c3:c2:d2:47:76:8f:f4:
e6:cb:06:19:5e:1a:89:32:2b:2d:ee:f7:9e:68:8e:9a:54:0d:
12:4d:1f:ce:27:54:58:14:5f:a7:91:e2:2f:19:ae:a7:4b:7e:
c3:6d:a7:d4:60:d2:8e:0a:fc:ef:dd:88:ac:33:0a:7f:a0:73:
9f:8e:be:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:30:14 2026 by rpki-client