Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
File: CZ-qshYRGNsbd8GnTszLc-doHDY.mft (raw, json)
Hash identifier: anA9ZEpuzdTU3GkXb1xCOuszbDCz9rSD2sgX7hco3XQ=
Subject key identifier: 45:02:B7:90:82:0B:C6:19:01:BE:B3:94:36:2B:CE:91:4A:4D:A7:B6
Authority key identifier: 09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36
Certificate issuer: /CN=099faab2161118db1b77c1a74ecccb73e7681c36
Certificate serial: 019D2772A80FDD7B5E174AD2F5C1C180FAE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
Manifest number: 02A9
Signing time: Thu 26 Mar 2026 00:01:58 +0000
Manifest this update: Thu 26 Mar 2026 00:01:58 +0000
Manifest next update: Fri 27 Mar 2026 00:01:58 +0000
Files and hashes: 1: B4ECW0jtt5KyrtkmlUhbFQBxuus.roa (hash: Z8JjmJ/Yv+fCZ4euDC+I0rty80LYQ117ydvucBAt8Uw=)
2: CZ-qshYRGNsbd8GnTszLc-doHDY.crl (hash: e81WlUDJcNSp4ybSdS2IunECoU6yLkQSjvTbai72aPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:a8:0f:dd:7b:5e:17:4a:d2:f5:c1:c1:80:fa:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099faab2161118db1b77c1a74ecccb73e7681c36
Validity
Not Before: Mar 26 00:01:58 2026 GMT
Not After : Mar 27 00:01:58 2026 GMT
Subject: CN=4502b790820bc61901beb394362bce914a4da7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:26:ae:f4:ae:aa:be:43:49:f8:ca:6a:d9:66:
f9:70:73:3f:8f:b0:23:b1:2f:9c:7d:b9:ad:47:b7:
4d:01:c5:3e:46:46:70:c4:7b:36:d9:e6:a2:62:1f:
6e:27:9d:2c:1d:af:01:81:7f:42:f2:e5:52:a9:76:
80:a9:e0:94:4b:15:40:ba:2b:82:81:03:94:50:98:
40:6a:a9:30:7f:93:72:4d:79:6f:d5:27:d8:0e:55:
c3:ce:13:01:f8:3d:fe:34:d4:d3:2a:c6:ed:a7:3e:
ad:b7:b0:40:64:51:13:23:dc:f0:e8:1a:8f:d0:6e:
52:e8:c2:1d:16:5d:73:44:7b:89:e5:1b:3d:a6:45:
d6:1a:fd:c3:ef:4e:7e:dd:b8:68:46:b7:df:c1:3e:
e7:47:86:c6:2c:24:47:2d:bc:51:6b:0d:36:e5:ee:
13:87:41:08:a3:26:06:ef:82:74:b4:e3:61:1c:b6:
a9:33:a2:ef:5e:af:af:30:e8:6a:41:98:9a:c1:2f:
52:b3:68:bc:21:f6:e6:6b:b7:2b:9c:56:25:a7:34:
dd:10:ca:bb:f8:0c:eb:e3:68:f8:8e:5a:a5:0d:ea:
d2:5a:38:c0:17:89:b1:4a:41:97:39:ab:dd:31:71:
06:81:63:04:93:44:ae:fe:38:31:c4:ee:aa:e4:80:
90:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:02:B7:90:82:0B:C6:19:01:BE:B3:94:36:2B:CE:91:4A:4D:A7:B6
X509v3 Authority Key Identifier:
keyid:09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:be:4f:a3:fa:45:ef:4f:d4:d6:dd:9f:ac:02:92:9e:02:af:
a5:55:ff:c0:c9:83:37:28:7c:77:22:e4:b2:df:d7:8c:0b:2e:
46:b5:c2:19:dd:ea:e0:a6:86:ac:32:ab:45:db:fa:62:19:a7:
98:1f:a9:6e:3c:a4:fd:45:24:12:37:66:84:88:f2:19:23:ac:
04:47:de:75:a4:ef:06:f7:f1:0b:73:f8:ed:d4:55:d4:61:1b:
d3:c9:2f:96:43:2a:df:0b:c4:84:c8:ab:97:24:fa:61:3e:fc:
ed:9a:48:ee:11:c4:f9:c9:7b:3f:cf:3b:9d:12:4d:4c:3f:c3:
6c:ce:11:80:f6:84:f3:41:e8:9b:70:ad:8c:d1:a5:14:00:20:
f2:0b:7b:c3:9e:e8:8d:e1:40:b3:1a:a8:eb:f7:51:e7:88:4e:
da:e9:41:7d:87:d6:69:df:06:79:3b:1c:0b:6b:3e:9d:b5:6a:
0d:b4:52:ce:ef:c5:56:70:07:70:85:57:5c:24:b2:b9:bc:2b:
9a:f8:ff:f2:bb:c1:ec:ab:1d:76:ad:82:8e:83:9c:29:e3:16:
a1:ab:90:e6:e9:e6:2b:26:05:28:07:2a:56:1e:a5:87:a3:db:
81:d4:a9:72:1c:54:65:49:49:1a:ac:c9:59:a7:63:bf:5b:8c:
c9:21:e9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:54 2026 by rpki-client