Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
File: CzHLUw_lL8wCnmSX53ggA5jCnzw.mft (raw, json)
Hash identifier: txfcC8qBzs6egaljT5LdqhJcHnOxR11aVSk1MNKlgW4=
Subject key identifier: 08:23:F1:45:E9:97:E3:A6:CA:DE:02:E8:D4:CD:C2:D8:50:02:92:D4
Authority key identifier: 0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
Certificate issuer: /CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Certificate serial: 019FAB9AAA717284821F8ABFB8B97986BB5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 02:01:07 +0000
Manifest this update: Wed 29 Jul 2026 02:01:07 +0000
Manifest next update: Thu 30 Jul 2026 02:01:07 +0000
Files and hashes: 1: CzHLUw_lL8wCnmSX53ggA5jCnzw.crl (hash: TAsIJYqK5iwmccCf6Mr/DuDYiZORT02bLjEUTagVZx8=)
2: F7SCLIzy92KJ-NREaaVjODfHqik.roa (hash: BwWuIIlFuPQUtjh0Ydgc0I6ELzPNPwQINU9/s1qI1yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:aa:71:72:84:82:1f:8a:bf:b8:b9:79:86:bb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Validity
Not Before: Jul 29 02:01:07 2026 GMT
Not After : Jul 30 02:01:07 2026 GMT
Subject: CN=0823f145e997e3a6cade02e8d4cdc2d8500292d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cb:72:ed:25:b3:47:71:d2:e4:8f:c6:9c:3c:
b5:c9:ae:a3:5c:03:05:42:79:54:eb:34:4b:7d:98:
82:c4:bc:9e:03:9b:96:1e:6e:f0:c4:df:77:51:0e:
4f:14:b1:21:2e:86:e0:e7:20:7f:4f:02:82:9a:89:
86:13:e5:77:e5:dd:3b:42:65:d3:4f:b1:65:ca:64:
8e:88:35:2d:cf:fc:12:b4:58:c7:b5:e7:ec:c3:d7:
a3:e7:68:2e:ea:9b:33:aa:16:1f:7a:d2:f9:f3:63:
86:6e:3b:f4:2a:00:62:c7:d5:4b:a8:0f:1b:47:ca:
39:cf:e7:88:84:38:aa:6a:74:6f:ae:75:11:d8:44:
40:25:25:af:1c:4b:fa:8c:bb:8a:d2:8a:5d:f6:46:
07:83:58:50:c7:52:f3:c1:97:ed:30:3a:ad:3c:60:
35:b7:85:89:62:ae:c4:62:87:6d:35:06:b7:91:ca:
5e:8b:ea:c4:82:91:e3:1a:0f:03:69:b1:cd:85:43:
cd:f3:86:44:ac:a4:af:a6:1c:9a:61:c6:5b:99:1f:
17:3f:1b:25:3d:49:63:da:76:d7:b7:74:6c:ec:2b:
10:ec:e2:78:5e:95:aa:b7:5d:22:2e:64:98:0f:2f:
86:65:6d:55:2d:e4:a5:a9:8c:b0:17:b5:11:19:61:
1e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:23:F1:45:E9:97:E3:A6:CA:DE:02:E8:D4:CD:C2:D8:50:02:92:D4
X509v3 Authority Key Identifier:
keyid:0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:00:30:a6:e4:f7:31:88:7c:c7:21:37:3d:84:d2:9c:5e:83:
40:5f:d0:a2:ad:fc:78:5d:25:f5:64:52:28:51:b1:8b:44:73:
7f:df:41:28:47:a3:16:06:0d:95:a1:8d:d6:5f:cd:65:e2:60:
a1:a6:40:b9:e1:ca:e9:f4:c9:f4:c0:b8:67:bc:aa:ca:85:77:
90:08:6f:8e:4a:ee:a4:fc:f6:4e:24:01:6d:5a:06:84:bb:61:
18:77:cb:12:2f:59:58:5f:b5:9c:9a:4d:bb:6d:6c:1c:0f:34:
1c:02:8e:69:b5:06:05:21:14:19:ea:5b:49:9f:ef:5c:55:b9:
89:a0:53:a1:7e:93:ca:0e:d0:f6:77:66:48:8d:db:bb:fd:8e:
64:ca:ab:36:a7:a2:74:0b:4e:a0:50:21:ec:3a:95:c4:81:81:
63:f5:9d:02:40:40:8c:03:15:1e:e3:ee:b2:d1:bd:50:66:48:
79:80:da:b0:f6:6d:bf:16:c7:81:ca:a6:0f:26:ee:d3:33:7d:
19:00:41:26:1c:6b:26:0b:0f:a2:51:14:86:56:43:22:a2:7a:
b2:28:d8:0b:b5:51:0b:e0:2a:9d:c5:ad:9d:69:b2:b3:97:21:
90:6b:4c:9b:6f:4a:85:36:8f:0c:31:2b:f1:e3:49:7e:cb:73:
9a:af:d0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:50:07 2026 by rpki-client