Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
File: CzHLUw_lL8wCnmSX53ggA5jCnzw.mft (raw, json)
Hash identifier: ioeqbAJkMUzAtfqNzaZMG4snfu5HPkZx6z0l46wv03A=
Subject key identifier: A0:A7:31:EF:69:56:D1:13:D0:0C:59:6F:B4:A5:3E:F9:D0:96:13:AC
Authority key identifier: 0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
Certificate issuer: /CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Certificate serial: 019D9C634FB6B9957880EC8AF7E4C9CF047B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 17:00:47 +0000
Manifest this update: Fri 17 Apr 2026 17:00:47 +0000
Manifest next update: Sat 18 Apr 2026 17:00:47 +0000
Files and hashes: 1: CzHLUw_lL8wCnmSX53ggA5jCnzw.crl (hash: zGhLslQpwey9K5oCxp+TASv1qpJYsAgEOSkJegLb+gk=)
2: F7SCLIzy92KJ-NREaaVjODfHqik.roa (hash: BwWuIIlFuPQUtjh0Ydgc0I6ELzPNPwQINU9/s1qI1yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:4f:b6:b9:95:78:80:ec:8a:f7:e4:c9:cf:04:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Validity
Not Before: Apr 17 17:00:47 2026 GMT
Not After : Apr 18 17:00:47 2026 GMT
Subject: CN=a0a731ef6956d113d00c596fb4a53ef9d09613ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8b:55:00:59:06:cd:f9:e3:f8:3a:79:2a:35:
d6:2f:4a:ff:b9:b9:89:59:1d:06:79:dc:39:82:04:
77:32:71:24:d5:72:fd:2e:a8:0c:9a:54:45:c0:37:
7f:e0:10:ac:a7:71:0f:67:c1:cd:3a:db:32:f5:1c:
e4:f4:fb:74:20:cd:0d:e1:62:ca:2e:05:4e:3d:04:
f5:76:0c:74:f0:d6:71:f8:17:73:7e:08:3e:8a:85:
f0:1c:e4:cf:25:fd:d4:5f:58:bc:9d:62:cc:01:41:
78:28:a7:e6:98:91:7d:d2:e7:fa:53:75:fb:42:e9:
2e:33:47:80:8d:db:7c:20:bb:98:9c:ed:7b:7c:e6:
97:5d:ed:ef:6f:ef:0e:aa:83:01:bb:28:87:d9:25:
74:b0:fe:1b:83:da:cf:38:e8:05:83:3c:f7:20:31:
d0:f6:b3:8e:67:3f:16:b1:3c:89:d2:37:0d:04:7d:
ba:e0:6e:77:4c:89:3e:c0:46:6d:62:fa:73:2c:89:
96:f8:93:19:4d:ec:4b:b5:c3:6a:5a:fa:6d:9f:44:
8f:61:99:d7:f0:8d:de:42:03:46:2a:2a:95:3c:18:
57:39:69:e9:64:72:63:28:79:68:04:de:03:06:94:
0c:4f:0a:25:2b:8b:f8:49:8f:13:23:dd:ed:c3:c4:
fb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A7:31:EF:69:56:D1:13:D0:0C:59:6F:B4:A5:3E:F9:D0:96:13:AC
X509v3 Authority Key Identifier:
keyid:0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:07:08:87:ee:95:ab:85:5a:d2:ab:03:b8:77:3c:4c:22:66:
57:b9:0e:83:ab:63:a9:ee:7f:08:64:0e:99:d3:fe:65:cd:8b:
35:aa:9e:b4:9f:dc:0f:52:d5:75:06:82:52:5a:b0:58:ba:df:
90:2d:86:51:ef:95:0b:76:2d:70:4e:14:70:20:ec:ad:47:d9:
78:58:9f:03:03:81:d5:6e:c5:0a:30:7c:b4:47:96:86:fe:e9:
f2:e0:06:4a:2c:35:44:23:d8:d3:53:86:33:5e:d0:cc:7d:7e:
3a:96:32:79:d4:b1:83:f7:50:1e:d0:5c:a5:86:da:51:f7:e0:
da:03:f2:ce:48:c8:e9:54:ab:c2:59:00:0d:7f:07:de:4e:6a:
6d:71:f3:a8:5e:a4:12:6a:57:83:c5:85:0a:c8:11:d3:a3:c8:
94:f6:69:52:b5:77:35:fd:1b:a2:c1:f9:7f:a5:ad:a7:97:5f:
80:ff:8f:f0:ce:07:4c:26:f9:dd:14:80:8c:8c:39:5c:f8:dc:
ea:1f:a0:dc:35:42:b2:89:9e:aa:85:28:3b:b3:d2:64:72:c5:
f4:41:a5:fd:14:90:e1:5c:f6:da:19:3f:c9:44:f6:79:b0:6d:
6c:c6:7a:b6:de:9a:bc:0e:52:04:93:c6:dc:c7:a9:17:9a:6b:
b6:05:19:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:30:10 2026 by rpki-client