Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft
File: CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft (raw, json)
Hash identifier: uNw0CGZTp8Imo9ydyVHZ3ibaJl+KHRdogK3yMktma5I=
Subject key identifier: 43:13:F4:65:CA:69:0C:9E:14:84:97:7B:06:39:82:78:62:8C:C9:35
Authority key identifier: 0B:35:AC:BF:30:55:96:68:EA:18:EA:3F:10:B2:97:EE:64:C8:E4:93
Certificate issuer: /CN=0b35acbf30559668ea18ea3f10b297ee64c8e493
Certificate serial: 01A0D012D12FA7D7C44C6B86B951AD8315CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 21:01:29 +0000
Manifest this update: Wed 23 Sep 2026 21:01:29 +0000
Manifest next update: Thu 24 Sep 2026 21:01:29 +0000
Files and hashes: 1: CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl (hash: 57rrjJSlYtgRYZGxoTkFYvAQbUfav+Y331/l4zZNuUg=)
2: qrwmnr0OEc9nAnaMZvs0-umIs9w.roa (hash: PZB6TM1PU5xxv8QQowAJ7WYR8h3/v/M9wazTIxePSNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:d1:2f:a7:d7:c4:4c:6b:86:b9:51:ad:83:15:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b35acbf30559668ea18ea3f10b297ee64c8e493
Validity
Not Before: Sep 23 21:01:29 2026 GMT
Not After : Sep 24 21:01:29 2026 GMT
Subject: CN=4313f465ca690c9e1484977b06398278628cc935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0e:0c:8d:c1:f0:b0:f4:f5:66:38:90:33:55:
3c:98:cb:35:54:98:51:99:36:d3:d8:2d:16:4e:7e:
b1:fd:f0:d7:16:80:9a:ba:db:fe:31:90:24:1a:fa:
b0:a5:75:62:ba:0f:12:1b:70:b3:fa:20:29:f3:2d:
84:c4:26:55:95:88:e8:28:5e:c0:ef:fc:a9:29:b2:
3e:c9:8f:69:6e:f0:03:b1:b8:2c:ec:d5:f7:54:77:
98:34:17:ac:d9:97:b1:9a:43:ea:5f:e5:f6:a3:0b:
41:ff:f4:39:e9:fa:d7:71:44:8c:19:5e:7c:0c:d6:
15:15:0d:2d:84:ce:5e:b8:ee:fd:75:cf:a3:36:7b:
69:40:03:83:7c:df:42:0f:91:e7:d3:a1:87:3f:a1:
6f:58:55:65:68:2f:0b:48:c3:15:70:84:75:74:a5:
2a:39:73:9b:1d:4d:d1:70:c7:ec:e8:99:17:8f:c8:
37:63:11:12:12:ab:bc:96:1f:b5:d2:c5:8e:66:33:
00:8d:d9:09:f3:8d:1e:be:aa:75:6b:36:6f:ac:65:
a7:68:d7:a5:a4:b7:b8:7c:2f:81:14:db:a8:a5:aa:
fe:76:93:83:4c:b7:de:a3:40:55:bb:14:7a:f8:27:
57:00:36:9d:32:30:fa:22:6c:d8:a8:22:1f:a2:88:
2c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:13:F4:65:CA:69:0C:9E:14:84:97:7B:06:39:82:78:62:8C:C9:35
X509v3 Authority Key Identifier:
keyid:0B:35:AC:BF:30:55:96:68:EA:18:EA:3F:10:B2:97:EE:64:C8:E4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:00:91:74:45:f0:5b:8c:3c:8e:f4:ca:74:4f:8d:d7:d1:38:
c8:87:b0:14:33:8c:39:dd:72:ee:4d:5d:84:c2:50:81:0c:61:
0b:a6:65:93:e4:6e:db:01:6e:02:81:a5:52:a5:bb:b5:b8:aa:
fa:30:ed:4e:da:50:6d:9b:4b:44:9b:88:5c:1a:e9:61:65:05:
b0:81:37:e1:b9:01:ed:ca:e3:d1:fc:7d:3d:c3:81:07:47:a1:
d3:8e:20:eb:e9:59:76:43:ec:3e:21:9d:68:c3:9a:98:22:57:
be:a0:be:bd:21:1f:7f:a4:6a:73:9c:d7:81:a3:dc:5e:24:e7:
57:18:43:f5:4d:1b:47:02:f0:32:a7:89:8f:34:95:73:e5:36:
86:c6:ee:2d:7c:ef:3a:8a:d6:a7:bd:76:12:a7:3d:44:5b:db:
72:6d:06:c8:4c:cc:cb:ef:ae:2f:b0:51:2b:d5:f6:92:6e:97:
f9:c0:0b:66:3e:dd:ae:b6:f8:8f:1b:20:6e:9e:30:8b:2e:c8:
80:c3:de:94:2d:cf:14:9d:be:e6:04:df:e6:ce:04:ca:11:57:
1d:1b:e3:d9:a7:f2:d0:5b:7a:94:87:a6:cd:a3:4a:65:8e:a8:
79:c2:9c:15:7b:d2:c1:37:58:0c:2f:cf:15:dc:5a:d6:09:3c:
06:6d:23:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:02:39 2026 by rpki-client