Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
File: CzAFeBftL9lZWEYyD9uBTJ_EShM.mft (raw, json)
Hash identifier: ziVu7la2xMBNqPdyVG5bUwPyb6NB553R/l2DysSn7sg=
Subject key identifier: 3F:88:F7:A0:1C:8E:0D:1D:30:8B:1D:79:7C:09:0B:82:4C:03:03:37
Authority key identifier: 0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
Certificate issuer: /CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Certificate serial: 019E1CEB70236D6A88B2F44D602B721338CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
Manifest number: 02A4
Signing time: Tue 12 May 2026 16:00:52 +0000
Manifest this update: Tue 12 May 2026 16:00:52 +0000
Manifest next update: Wed 13 May 2026 16:00:52 +0000
Files and hashes: 1: CzAFeBftL9lZWEYyD9uBTJ_EShM.crl (hash: leJvSFrNy/CAHwi69TxcMD2JG3TgK8zo0YVOMaV2x+s=)
2: lEbJm5syICAkDzBdnQFTwrUOmo0.roa (hash: vOTfqhJ4GKJTkXberBptf2018gCEaSZ0ldd8I65tSrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:70:23:6d:6a:88:b2:f4:4d:60:2b:72:13:38:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Validity
Not Before: May 12 16:00:52 2026 GMT
Not After : May 13 16:00:52 2026 GMT
Subject: CN=3f88f7a01c8e0d1d308b1d797c090b824c030337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fb:49:0b:12:3e:1c:c4:c7:58:b5:79:3e:de:
9c:54:de:c5:9c:c1:fc:38:76:ba:92:67:27:49:20:
9c:72:77:97:2e:6d:61:02:86:2c:13:8f:49:6f:63:
34:da:0c:fc:db:5d:03:31:e3:ea:59:91:c4:ee:ec:
51:10:f0:40:92:ee:41:54:fa:91:1a:7d:30:48:c1:
9e:ef:1e:ea:4a:d0:31:c6:70:2e:16:a2:27:96:2f:
bb:2b:b7:d4:9c:e9:df:23:3e:6a:29:0e:08:3e:57:
23:3e:2d:7b:04:79:86:fc:32:36:e2:0a:04:44:72:
b3:bf:42:1a:1f:23:4c:74:5e:b5:9b:b6:65:9b:a3:
57:19:b5:c5:9e:30:45:8e:82:e7:85:50:17:8a:d5:
70:08:75:b8:18:7c:de:10:1a:80:93:82:79:f1:cb:
8c:7a:39:b2:b6:31:8f:35:fc:84:9e:58:e2:e0:b7:
c9:fa:b1:e2:68:83:92:0d:ed:37:59:07:3e:91:e7:
f1:a3:52:a7:ef:d4:87:45:90:00:ad:2f:3b:dc:ba:
fb:d6:db:10:b7:94:54:e7:6d:b7:ac:10:2a:ee:85:
12:75:b2:b1:7e:e5:59:43:42:80:73:3e:c7:75:71:
59:3d:f1:a7:91:b2:fc:f1:26:eb:e5:eb:ef:07:af:
7e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:88:F7:A0:1C:8E:0D:1D:30:8B:1D:79:7C:09:0B:82:4C:03:03:37
X509v3 Authority Key Identifier:
keyid:0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:4e:97:cf:73:6a:42:a1:d9:1a:91:15:ba:58:d0:01:44:5d:
f0:7e:00:87:38:f2:fe:e0:b7:ea:04:17:dd:b1:17:73:fe:33:
89:27:33:4e:f1:a3:45:7f:0d:77:db:97:0d:ae:23:c6:5f:64:
82:2b:28:3b:14:9d:da:bb:c7:a4:65:9f:f7:17:bc:6d:99:50:
92:77:d9:bc:7b:60:77:aa:e9:82:61:b6:81:8b:72:2a:77:e3:
f7:5c:ab:31:40:45:40:60:6b:bf:fe:a9:6d:78:1b:60:d1:70:
4e:10:45:ee:35:14:71:d0:74:29:a7:50:62:a9:e6:fc:ac:e1:
98:5f:f8:7e:54:87:16:5b:ec:b9:73:c3:66:7a:c6:80:35:43:
c2:98:c9:f1:61:1a:8c:ce:b3:23:fa:44:8b:22:17:a8:8c:81:
33:21:93:4c:cd:55:58:02:b1:d6:68:d4:f6:ad:fa:f5:5a:d3:
b4:3c:c6:b7:e1:e1:e0:24:1f:b3:ec:5a:5d:ea:07:96:19:b5:
57:c3:4c:e7:b9:22:48:e1:35:d2:4f:e7:7f:8b:d9:88:34:ba:
47:eb:39:cd:c5:6c:4d:a4:92:a7:a1:bf:32:39:85:d9:d1:b9:
46:57:b3:12:54:39:85:95:1a:82:fd:9b:b6:7b:00:dd:b9:80:
ca:85:e6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:42 2026 by rpki-client