Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
File: CZ-qshYRGNsbd8GnTszLc-doHDY.mft (raw, json)
Hash identifier: 8aUHi4b/Ds9mSN795jgo4f4o01So2SKgt2gSoWMK0kY=
Subject key identifier: 61:53:66:8C:50:0B:58:1C:E5:13:7A:57:72:96:46:74:B2:0E:D6:04
Authority key identifier: 09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36
Certificate issuer: /CN=099faab2161118db1b77c1a74ecccb73e7681c36
Certificate serial: 019F916C75166024DD8E4440F27D02A683A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
Manifest number: 03E9
Signing time: Fri 24 Jul 2026 00:00:31 +0000
Manifest this update: Fri 24 Jul 2026 00:00:31 +0000
Manifest next update: Sat 25 Jul 2026 00:00:31 +0000
Files and hashes: 1: B4ECW0jtt5KyrtkmlUhbFQBxuus.roa (hash: Z8JjmJ/Yv+fCZ4euDC+I0rty80LYQ117ydvucBAt8Uw=)
2: CZ-qshYRGNsbd8GnTszLc-doHDY.crl (hash: YWFSZHrFGxrOAzd5NbNUURw+lE/G8IFrtDltzsKIHXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:75:16:60:24:dd:8e:44:40:f2:7d:02:a6:83:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099faab2161118db1b77c1a74ecccb73e7681c36
Validity
Not Before: Jul 24 00:00:31 2026 GMT
Not After : Jul 25 00:00:31 2026 GMT
Subject: CN=6153668c500b581ce5137a5772964674b20ed604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:89:db:fa:ac:0a:3e:ef:26:71:ba:2b:6c:fe:
b3:87:88:78:0e:f8:8b:0d:93:d0:4e:06:29:f8:75:
70:4a:cb:bc:c0:60:ee:1f:90:d7:11:52:bf:c0:02:
ea:bf:6d:c4:b8:84:59:d6:70:eb:a4:bc:3c:3c:a6:
c3:71:c7:b1:71:a4:b3:f0:20:83:75:ce:07:7d:fa:
c9:41:c7:65:4f:9c:35:8c:f4:86:2c:bb:3b:f8:ed:
ed:33:52:ba:84:32:9d:67:23:8b:98:0a:ee:24:09:
64:e5:87:a7:e6:a0:aa:cc:56:ee:1b:11:e2:95:31:
4f:1c:76:ea:16:15:6d:99:fa:0b:70:4c:11:86:62:
96:49:94:0a:5f:db:89:d6:85:9b:e9:c3:ef:1e:8a:
c0:29:63:0c:28:6c:b0:9e:b1:61:f5:16:1b:16:b0:
33:38:2c:17:e7:e6:1b:7e:48:ab:28:ee:d8:a6:3f:
b5:4e:9b:a8:41:03:b0:43:46:f1:fd:c9:47:06:eb:
90:a7:1a:d0:88:a4:f5:20:1d:91:87:8c:58:1b:6b:
6e:6e:0d:a3:e3:b3:13:58:fe:35:16:a6:2a:f2:2c:
e4:1a:86:d8:0b:61:b0:2d:49:89:91:fe:4a:b2:a8:
0a:a1:3c:fd:2a:82:4a:cf:a3:dd:7a:76:bc:7e:d2:
96:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:53:66:8C:50:0B:58:1C:E5:13:7A:57:72:96:46:74:B2:0E:D6:04
X509v3 Authority Key Identifier:
keyid:09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6d:34:e3:c1:54:ee:1c:26:7c:b3:d0:7f:d7:cb:87:1a:c7:
ba:ed:85:e4:26:b4:dc:95:7e:29:62:dc:5a:41:61:c1:5a:82:
18:05:e5:f5:2b:26:47:b7:ed:e6:d1:a1:92:d3:b2:09:68:c9:
0c:73:35:71:af:7a:c0:76:5f:0a:7f:39:25:b6:97:ee:83:f0:
90:47:08:33:a6:45:ac:76:9e:83:4c:06:76:6e:6e:a4:49:12:
26:bf:42:93:7a:d4:3a:e8:a9:ee:13:f8:b4:73:aa:dc:4c:86:
b9:0c:f2:cc:fb:33:06:e2:87:a4:62:2a:b6:ba:ba:1d:5c:d3:
e7:17:e8:22:57:28:88:47:9e:4b:c5:8f:96:be:4d:85:fd:ae:
17:50:f9:18:d2:8f:a8:ea:af:2e:77:df:d9:0d:0c:22:4c:0a:
c6:f1:fa:bc:b6:a7:8c:e2:44:bb:07:83:67:da:9e:24:09:be:
3a:8e:10:d7:44:64:2a:b7:07:e5:ad:8d:b7:e4:22:c5:0c:64:
73:12:39:66:53:8f:55:1e:c5:5a:9f:3c:93:2d:83:c2:94:f5:
64:5b:67:45:7d:52:8d:21:be:3e:f2:37:1f:7e:c7:fa:a2:44:
c7:53:2b:88:6a:76:17:f7:8b:59:06:a1:83:a5:f0:1b:86:ba:
6e:49:8d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:03:41 2026 by rpki-client