Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
File: czsHKLegVDWEws0LSLdHjEGU7wo.mft (raw, json)
Hash identifier: otxieZUD6gwN8RNJ3trm6ja1B5m9Kw8WfiwHjrXO1Iw=
Subject key identifier: B5:4F:19:B4:CD:0F:3F:7E:D5:A1:74:EC:21:F6:04:1C:95:66:3D:07
Authority key identifier: 73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
Certificate issuer: /CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Certificate serial: 019F90FEA7A71411EC04EA105C47A14BD116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
Manifest number: 0AFE
Signing time: Thu 23 Jul 2026 22:00:35 +0000
Manifest this update: Thu 23 Jul 2026 22:00:35 +0000
Manifest next update: Fri 24 Jul 2026 22:00:35 +0000
Files and hashes: 1: Oce8w_FStQrxz5-sGyZ5GI_yylQ.roa (hash: /gUG2XD9ZyXjCehDc7TUgIzStA7kApp9jArOXsYwwL4=)
2: ZQWSBrSbVBwfkGrwKFFXvU4ra7w.roa (hash: r+NK3YQEVsT0+KvKCit8WLyB+4wd+LAbIvtambZpbro=)
3: czsHKLegVDWEws0LSLdHjEGU7wo.crl (hash: 2MFvagIOhl7pl7Dafq0XUT/ty4kLVJBzbwYCZ9M1ASI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:a7:a7:14:11:ec:04:ea:10:5c:47:a1:4b:d1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Validity
Not Before: Jul 23 22:00:35 2026 GMT
Not After : Jul 24 22:00:35 2026 GMT
Subject: CN=b54f19b4cd0f3f7ed5a174ec21f6041c95663d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a4:61:60:52:86:c3:e4:2e:7c:af:ef:85:78:
42:fa:81:5e:59:6b:ef:76:ed:39:5e:5d:53:1e:df:
25:59:10:17:95:82:b8:ae:ef:5f:f9:d8:6c:57:1f:
f3:e2:43:9d:e7:43:f0:a1:c3:34:86:03:2b:fa:d7:
cd:30:fa:1f:b3:95:3a:5c:ea:57:2c:e3:59:07:99:
93:ba:c8:b5:18:df:73:4d:69:37:65:dc:a0:cc:c5:
c1:58:10:02:9b:10:74:57:85:97:8b:c8:96:cc:83:
f1:59:ab:c6:88:af:6f:d5:18:fd:23:55:21:ce:80:
a1:53:22:be:93:88:c6:4c:2f:ee:15:14:e0:3d:e6:
79:a0:87:2e:00:be:90:ab:e5:dc:bf:a8:83:0d:17:
c3:2f:f2:10:80:ff:24:ff:11:e6:5d:46:a1:ae:c6:
f7:dd:bc:2c:0c:e2:fc:9f:62:b9:54:fe:ab:83:39:
98:96:a5:c3:6f:e1:d0:a2:5e:9f:f3:c4:cd:d6:38:
de:37:24:94:93:8e:ce:fd:7c:d4:b3:08:50:5a:6b:
e4:b3:d7:5f:f0:3f:02:ee:33:11:48:4c:1e:c8:39:
18:68:15:13:76:8c:a2:ed:a1:65:09:cf:f4:64:81:
a2:f9:c3:c8:12:b0:08:15:20:5f:da:db:08:c5:b7:
de:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4F:19:B4:CD:0F:3F:7E:D5:A1:74:EC:21:F6:04:1C:95:66:3D:07
X509v3 Authority Key Identifier:
keyid:73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:1a:e8:ea:ee:ec:65:d1:cb:bf:5e:c9:9a:0f:73:5b:47:c4:
e0:35:ba:8c:70:dc:cc:57:7c:ab:88:b5:a6:e6:e7:28:cb:72:
24:df:51:bd:de:6b:38:fa:54:07:17:7d:e5:b8:ce:32:bd:78:
58:00:c1:67:d6:fb:17:90:62:58:95:5d:d2:68:9c:67:90:68:
dd:a1:f8:44:9e:c3:51:86:99:98:4d:ee:95:7b:07:4d:c0:31:
33:2c:94:8b:df:56:1c:f2:20:c7:e4:d5:30:14:38:25:3a:67:
5a:ff:38:4e:99:dd:3e:95:d7:cc:8c:fc:7f:a6:8c:04:15:3c:
ca:6e:6a:b9:c0:7e:54:d7:90:fd:43:44:0a:01:7b:70:c3:97:
c3:00:73:89:0a:b3:7a:84:84:35:1f:6c:4f:61:76:68:8f:59:
79:4b:29:4f:06:33:41:89:58:1c:63:6c:03:e0:fa:24:30:f6:
8c:06:79:67:79:01:f1:22:36:60:f9:7b:30:4c:71:ee:57:55:
7c:4e:70:33:cf:96:57:01:1a:63:32:52:a3:e8:21:9d:0c:75:
ff:fd:9b:6d:c5:40:10:31:1e:de:92:95:03:c5:09:08:66:f6:
a8:ae:67:24:1b:0b:38:ad:61:48:bd:c6:e8:ca:91:a6:c2:f9:
a1:9d:32:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:14 2026 by rpki-client