Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
File: czsHKLegVDWEws0LSLdHjEGU7wo.mft (raw, json)
Hash identifier: vjqAj5Ty4xOWAinp0xWi9/QHyxQCex73HzEsjZWbS2Y=
Subject key identifier: E4:13:CF:F4:23:E4:F4:27:39:73:8E:70:55:E4:A4:39:70:37:E4:87
Authority key identifier: 73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
Certificate issuer: /CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Certificate serial: 01A0DD2A5EA8E1620256EA5FBBE6742C9CF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
Manifest number: 0BAA
Signing time: Sat 26 Sep 2026 10:02:16 +0000
Manifest this update: Sat 26 Sep 2026 10:02:16 +0000
Manifest next update: Sun 27 Sep 2026 10:02:16 +0000
Files and hashes: 1: Oce8w_FStQrxz5-sGyZ5GI_yylQ.roa (hash: /gUG2XD9ZyXjCehDc7TUgIzStA7kApp9jArOXsYwwL4=)
2: ZQWSBrSbVBwfkGrwKFFXvU4ra7w.roa (hash: r+NK3YQEVsT0+KvKCit8WLyB+4wd+LAbIvtambZpbro=)
3: czsHKLegVDWEws0LSLdHjEGU7wo.crl (hash: gLBgwMSykKtpmNg5BYk2KFjWuZ31eS0MApgEazzBAvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:2a:5e:a8:e1:62:02:56:ea:5f:bb:e6:74:2c:9c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Validity
Not Before: Sep 26 10:02:16 2026 GMT
Not After : Sep 27 10:02:16 2026 GMT
Subject: CN=e413cff423e4f42739738e7055e4a4397037e487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:64:50:23:ad:7c:e7:83:46:62:b6:a8:b9:6c:
d6:95:e2:cd:8a:96:28:69:db:44:83:cf:e7:c6:8b:
1f:e2:60:2c:2c:4c:bf:14:7b:e6:97:e2:f8:04:bb:
62:12:6c:53:8b:f3:e2:5b:7a:9a:19:1f:62:31:90:
03:21:49:67:07:7e:96:a6:a3:7f:74:5e:30:9d:e5:
7f:3f:d8:43:ae:3d:fc:6e:04:9c:85:6d:5c:39:86:
5f:72:27:42:0c:57:f5:5b:06:7e:30:8f:32:25:90:
e3:d0:b9:db:0b:34:f2:45:c7:0e:db:74:67:32:da:
79:c3:62:76:86:3d:7d:37:5e:cf:5e:b5:3d:25:93:
8b:cb:52:41:89:a4:ae:c7:4c:90:bf:56:4a:96:ec:
ef:71:d6:be:f7:75:ea:df:3b:99:37:72:61:e4:1f:
c1:04:10:30:46:09:17:4a:e4:bc:75:7d:9f:16:53:
93:e9:92:ea:97:10:2b:66:79:f6:7c:85:bb:13:97:
18:a4:b4:a6:c7:01:ba:87:59:18:a2:87:23:f3:8a:
20:2a:6c:ed:4d:60:28:8a:84:36:03:59:6b:1b:df:
e1:51:b5:40:b7:08:c7:63:59:5a:80:c5:16:d4:65:
02:ec:57:ff:45:ee:0a:4f:53:65:02:9c:6f:2b:d7:
f0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:13:CF:F4:23:E4:F4:27:39:73:8E:70:55:E4:A4:39:70:37:E4:87
X509v3 Authority Key Identifier:
keyid:73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d3:df:b2:1b:c1:fd:e7:66:cd:91:44:db:70:38:8a:59:9f:
f0:2e:9e:c1:0d:79:c2:a8:32:35:bc:6b:f5:3f:c2:a0:33:f8:
60:54:c7:1a:2c:38:fd:56:1b:33:91:b9:be:23:49:4f:85:a6:
75:1b:aa:34:96:65:4f:46:9a:24:c3:3c:17:28:49:97:8b:1f:
6d:fd:19:01:de:69:11:6a:a6:94:64:ef:79:d6:43:7e:0c:e9:
b1:ac:47:f1:46:b3:3c:88:e4:5a:ac:21:73:98:72:6d:42:45:
27:ca:fe:4f:16:1a:b5:c4:46:de:48:1c:a4:62:d7:c7:9d:ae:
32:38:87:6d:95:83:79:21:d5:6e:dd:56:30:d6:af:42:e6:d3:
08:b8:62:eb:fb:47:65:86:29:0b:18:c0:21:71:57:6d:4f:52:
c6:c1:47:54:b7:57:1e:3f:49:ab:50:14:01:b8:96:e3:c6:bc:
86:0d:1f:d0:bd:a8:b2:60:65:60:ff:b1:11:c6:ad:ba:0d:5b:
de:3b:6f:c0:32:e7:7c:c3:ec:e4:f5:da:46:6e:a8:75:70:b3:
5d:ca:8e:f8:f7:30:80:cc:59:68:b6:24:ac:b0:92:1c:4b:26:
4d:a4:0a:52:d8:a3:20:67:fb:d1:a7:a5:cd:a0:a1:54:dd:91:
57:d1:ff:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:45:59 2026 by rpki-client