Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
File: CzEv6XRkvA5qHv-i8ciW96igJng.mft (raw, json)
Hash identifier: 5UUWtcG+pINmJdzwYyfVYv54e5jKVFMBmop3VFAp0MQ=
Subject key identifier: 2D:79:5B:8D:30:32:DA:19:10:30:AA:56:66:4C:2C:5A:50:28:63:4F
Authority key identifier: 0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
Certificate issuer: /CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Certificate serial: 01A0D5DE914A9AD29F7871582ED1528B58E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
Manifest number: 18FC
Signing time: Fri 25 Sep 2026 00:02:08 +0000
Manifest this update: Fri 25 Sep 2026 00:02:08 +0000
Manifest next update: Sat 26 Sep 2026 00:02:08 +0000
Files and hashes: 1: CzEv6XRkvA5qHv-i8ciW96igJng.crl (hash: dakYrSgIAaSGbZC/+OikHxLN2q2sbQkwKdetxm8TNBc=)
2: O4FogktllEObQ3m4gcGbxOTXFjc.roa (hash: LSEt+DfGeh7UZL23uB93PJ34d8wXBxGJPcCGrkXjZy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:91:4a:9a:d2:9f:78:71:58:2e:d1:52:8b:58:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Validity
Not Before: Sep 25 00:02:08 2026 GMT
Not After : Sep 26 00:02:08 2026 GMT
Subject: CN=2d795b8d3032da191030aa56664c2c5a5028634f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:e1:6b:a1:c4:a8:e6:2c:37:c0:c3:5e:ab:
3a:bb:61:1a:7f:a1:de:92:40:0a:41:bf:78:2b:dd:
84:52:71:00:1b:66:03:f6:20:84:5b:bb:c3:1e:9b:
d6:5d:cd:02:1f:29:a2:65:71:e1:7d:17:40:49:87:
6a:0b:1b:6e:71:ac:37:54:fa:40:d2:77:1a:96:46:
0c:c8:7c:a1:29:02:92:72:80:5b:c2:a8:62:f4:44:
2e:22:3c:a6:ae:e1:f0:be:d3:49:15:45:28:1b:31:
e1:bb:a3:a6:d8:5a:90:5d:f7:09:00:e8:73:dc:aa:
d2:2e:19:fe:fa:3a:dd:ff:f2:c1:56:bd:94:a6:84:
72:0a:69:0f:e2:f1:42:b8:4d:ce:3a:68:2e:71:da:
56:06:cb:30:cf:6d:dc:9f:8d:fb:50:0f:49:8d:ad:
9d:d3:66:74:c6:d6:86:42:a9:f7:46:ca:86:0b:8a:
db:04:7b:ea:09:da:e8:43:4f:f7:0a:93:c6:94:1b:
d9:22:0d:c8:5c:5c:1f:46:1b:4d:d0:34:ed:e4:da:
4a:dc:e7:31:d9:e4:09:1e:4f:67:a8:eb:79:97:83:
21:25:ef:f4:8d:61:33:5e:8c:42:e1:0e:62:bd:0c:
32:6f:37:53:7c:c0:72:59:6e:e3:db:ff:02:4f:f3:
b7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:79:5B:8D:30:32:DA:19:10:30:AA:56:66:4C:2C:5A:50:28:63:4F
X509v3 Authority Key Identifier:
keyid:0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:06:09:21:bd:a6:7a:eb:3b:4f:bb:11:c8:cc:70:27:69:98:
88:fd:67:06:74:a0:33:2c:f0:61:e7:9d:8a:f1:d5:a6:cd:fc:
77:84:ac:1f:66:86:f2:c4:41:4f:b5:cd:9b:86:59:2c:0c:76:
48:34:55:21:f6:26:55:23:59:dd:9e:46:9e:c5:e0:06:20:f7:
5f:b8:cf:f5:bd:7d:58:c7:49:52:66:f5:39:c1:e8:08:d0:72:
db:f5:e9:86:ea:ea:59:81:92:55:26:d2:95:bf:97:11:be:cc:
e0:cb:0a:4a:23:81:7f:1d:ae:96:73:28:78:42:db:0e:e1:b3:
c0:7d:65:41:8e:57:70:ce:ca:2f:57:ba:ce:d6:2b:65:ba:ff:
c0:f4:0c:fc:77:25:5c:8f:12:0e:82:0e:ce:89:94:9b:bc:6a:
ed:bc:62:2f:8c:3a:ae:f8:01:a6:dd:51:58:92:ae:d4:54:ec:
65:2b:76:74:eb:8c:00:db:ed:dc:24:bc:30:31:bd:de:2b:9d:
89:f8:14:c6:b2:84:9a:ac:99:70:47:f5:d6:98:2b:e7:8a:a0:
0d:a5:5b:03:7c:60:02:8a:54:bd:9a:dd:02:6f:0f:96:1a:e5:
88:d4:3a:8c:90:f8:b1:25:b2:00:84:31:7b:2d:7e:78:20:e3:
e3:17:f3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:32:00 2026 by rpki-client