Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
File: CzAFeBftL9lZWEYyD9uBTJ_EShM.mft (raw, json)
Hash identifier: MPnfNZkub0GqcREZ04AVOgAKv8eBq/D99Yby0gdh6rM=
Subject key identifier: 63:F4:E2:D6:24:F8:71:EB:4E:90:FB:B9:37:97:E6:FC:88:30:61:59
Authority key identifier: 0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
Certificate issuer: /CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Certificate serial: 01A0D237ADAB8A7ACD83AAD1F25C42442DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
Manifest number: 040B
Signing time: Thu 24 Sep 2026 07:00:59 +0000
Manifest this update: Thu 24 Sep 2026 07:00:59 +0000
Manifest next update: Fri 25 Sep 2026 07:00:59 +0000
Files and hashes: 1: CzAFeBftL9lZWEYyD9uBTJ_EShM.crl (hash: 97aZNbgyL3BcoWdDCs2oCmAV+aS6Ou16d5J3yNANkhI=)
2: lEbJm5syICAkDzBdnQFTwrUOmo0.roa (hash: vOTfqhJ4GKJTkXberBptf2018gCEaSZ0ldd8I65tSrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:ad:ab:8a:7a:cd:83:aa:d1:f2:5c:42:44:2d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Validity
Not Before: Sep 24 07:00:59 2026 GMT
Not After : Sep 25 07:00:59 2026 GMT
Subject: CN=63f4e2d624f871eb4e90fbb93797e6fc88306159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8b:63:f4:d3:20:b7:d3:18:44:42:5c:83:a3:
68:a6:20:6a:e9:04:ee:34:4d:3d:8b:5e:4c:c1:0e:
1a:1b:1e:dc:76:13:52:4c:50:5c:40:97:2f:2f:ab:
ff:95:50:2a:4b:34:21:2f:65:a2:17:5d:96:19:35:
18:ac:f2:4c:da:7c:d0:77:10:d4:ae:cc:ac:75:c4:
18:fc:f4:8e:fb:23:d4:4b:8a:91:81:5b:99:4c:af:
74:0c:96:59:a2:73:62:11:4e:65:47:56:39:6a:f8:
fd:71:4f:71:fc:6c:16:c3:75:d9:e9:87:0c:36:01:
ce:09:40:ff:05:89:d2:22:86:a0:f5:56:42:b8:73:
96:2c:80:c9:61:68:c1:f0:81:bb:d5:31:b3:58:f4:
1a:f6:5d:dc:f2:6f:b1:02:fa:5e:6d:03:67:82:7c:
80:ac:19:68:1e:63:87:dc:34:b2:54:2b:db:f0:3d:
6b:98:da:0f:28:f0:61:a1:ce:2a:96:47:ee:ab:fe:
43:e4:be:3c:e3:9b:38:3b:ef:50:32:7f:aa:05:7c:
d1:3a:4d:d8:08:3d:3b:b6:c6:55:23:ee:61:2c:cd:
5f:f2:af:54:bc:93:93:93:51:93:48:31:42:6f:18:
e1:d5:d8:68:d8:93:c8:6f:4c:16:ca:7b:b3:17:d1:
aa:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F4:E2:D6:24:F8:71:EB:4E:90:FB:B9:37:97:E6:FC:88:30:61:59
X509v3 Authority Key Identifier:
keyid:0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:83:20:a3:51:11:d9:48:31:eb:69:ea:fd:2f:d2:95:df:d8:
10:6b:57:f6:77:3d:f8:90:92:6c:38:bc:c6:63:ca:46:d9:a3:
0c:49:08:4d:96:c8:40:45:3e:f1:fb:cd:91:50:54:93:3a:34:
88:a5:bf:2b:f8:7d:41:71:a8:b8:64:3f:07:4f:1a:6f:79:af:
55:cb:cf:51:11:87:64:6f:66:80:a8:89:e9:e6:53:fe:73:b7:
99:db:0a:58:39:18:16:72:f2:6d:3b:fb:9d:d8:09:8a:12:1f:
0c:a2:a8:ec:72:ed:eb:65:75:38:1b:57:7b:00:ac:55:3b:3a:
96:85:ae:76:76:97:1b:8e:8a:57:36:2e:da:8f:58:e0:4a:85:
a6:f7:1f:89:a1:2d:ce:6b:eb:7c:e9:f8:80:8c:41:57:bc:e3:
c3:d3:a9:a6:22:0c:98:17:17:01:0d:72:8f:8a:e2:b6:4f:84:
b4:a8:64:1e:2f:e6:3c:49:58:0d:6f:d4:dc:ca:f4:36:2a:1b:
79:6e:5e:29:32:86:e6:5b:5d:37:c7:12:54:6e:02:b5:be:a6:
4c:b3:45:1a:98:18:72:0c:52:1c:82:43:14:e4:15:34:df:44:
2d:c3:e5:60:47:d0:10:d9:3a:1d:31:dc:d1:1b:d6:0b:18:d9:
50:68:a9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:16:04 2026 by rpki-client