Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
File: CzAFeBftL9lZWEYyD9uBTJ_EShM.mft (raw, json)
Hash identifier: M5jka0GFIL4//0Kh+DTEBvTb3UJ8H/DyQquR1PfG79w=
Subject key identifier: D9:5F:78:8E:D5:70:99:ED:FB:78:43:C6:04:F8:2A:20:17:C8:A2:7C
Authority key identifier: 0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
Certificate issuer: /CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Certificate serial: 019F91A3F4206C7E392E29C8AF8CEB9C47D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
Manifest number: 0365
Signing time: Fri 24 Jul 2026 01:01:08 +0000
Manifest this update: Fri 24 Jul 2026 01:01:08 +0000
Manifest next update: Sat 25 Jul 2026 01:01:08 +0000
Files and hashes: 1: CzAFeBftL9lZWEYyD9uBTJ_EShM.crl (hash: sWjXx64T8c/Z2gCA5hKDyVMX3SuJlDlU9HBWHTdU0mk=)
2: lEbJm5syICAkDzBdnQFTwrUOmo0.roa (hash: vOTfqhJ4GKJTkXberBptf2018gCEaSZ0ldd8I65tSrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:f4:20:6c:7e:39:2e:29:c8:af:8c:eb:9c:47:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Validity
Not Before: Jul 24 01:01:08 2026 GMT
Not After : Jul 25 01:01:08 2026 GMT
Subject: CN=d95f788ed57099edfb7843c604f82a2017c8a27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a9:ad:11:95:30:11:f4:44:09:10:d6:dc:7e:
e0:84:8d:85:49:93:3c:c4:b3:87:0a:62:1b:17:56:
61:56:4b:3e:37:f8:5e:d4:c6:f4:ae:44:a5:ba:24:
c4:a4:9c:03:c4:85:d2:9f:13:0d:c9:f2:ae:76:5c:
4a:cb:72:ae:ab:78:b4:8b:5a:21:8d:45:44:66:3d:
9a:b9:af:61:2a:04:b7:64:8e:30:d3:c6:e3:04:ff:
34:52:a5:b0:b1:c3:2c:67:ae:30:30:a5:ad:5f:20:
74:c8:08:28:d5:4a:12:a1:43:88:d4:a7:d9:92:5b:
8c:c3:7a:9f:a4:41:9d:f1:aa:06:1e:c0:67:77:2d:
60:67:a0:6f:5f:0b:10:87:4e:c2:08:89:6f:3b:65:
5a:ba:51:fe:e1:03:eb:bb:38:0d:d0:6e:cb:66:45:
3f:56:bb:63:35:b2:03:5d:b5:dc:48:64:ae:d0:22:
0c:39:76:d3:2c:a7:cc:6c:01:78:c7:7d:75:37:1d:
5e:c1:87:db:7b:4d:40:69:d1:13:e3:97:50:0b:8a:
d6:db:d9:52:d0:f0:fb:d8:82:3f:d5:2c:83:86:f1:
7a:67:2a:fc:3b:f4:2f:96:1a:e8:47:dd:18:d9:b9:
9d:cb:2b:5b:9e:d2:c7:df:41:a0:2f:24:3c:21:6c:
e5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5F:78:8E:D5:70:99:ED:FB:78:43:C6:04:F8:2A:20:17:C8:A2:7C
X509v3 Authority Key Identifier:
keyid:0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ff:c1:19:8c:59:a0:a9:08:de:04:22:31:2d:32:97:91:44:
1f:29:66:63:3b:3d:31:5a:d1:c2:9f:86:a6:5a:6c:e0:ca:41:
83:34:17:b7:b8:9e:d5:0d:55:87:24:af:98:6b:04:7e:a0:fc:
bf:f5:13:5d:63:7b:10:48:6e:78:69:4a:b3:d1:8d:19:a0:09:
75:dc:e6:d2:d6:46:a2:53:68:29:36:43:b5:3f:41:83:56:2a:
79:fe:38:5a:9e:f8:cd:a9:ab:61:7f:74:d7:08:7d:72:0e:c2:
af:45:f8:52:7f:8d:ce:91:c1:f4:b4:5c:87:61:a0:64:1d:de:
e7:20:4b:2a:e2:0a:56:39:53:eb:c8:4d:18:71:78:c0:8c:3f:
4b:55:a1:e5:56:e8:4b:cf:2f:13:fa:be:08:11:29:14:57:03:
b0:de:fd:6f:cc:59:e1:c1:e6:60:fd:34:bb:b3:3d:d0:8c:de:
30:22:33:94:d3:7e:30:76:08:d7:1e:25:2b:7c:82:19:40:3b:
e1:0a:60:6b:6b:39:4b:cb:52:5a:77:45:91:8c:79:3b:21:b1:
18:bc:90:85:f0:4a:b8:cd:8d:0d:b0:44:65:d0:89:69:68:5c:
47:ee:63:51:36:d6:29:7d:27:3c:39:d2:bf:75:19:8d:78:6c:
25:0b:09:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:25:52 2026 by rpki-client