Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
File: CzHLUw_lL8wCnmSX53ggA5jCnzw.mft (raw, json)
Hash identifier: OQoq/POzoztBGN81NFQJv2R47xjhpb9xyUMZ+qkoifg=
Subject key identifier: F4:A5:CA:E9:2C:86:9E:19:EC:51:A3:C2:20:E0:08:A9:59:98:25:CA
Authority key identifier: 0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
Certificate issuer: /CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Certificate serial: 019EC1ED9BCC6E48F85E44A7F65F9CDAABE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 17:00:35 +0000
Manifest this update: Sat 13 Jun 2026 17:00:35 +0000
Manifest next update: Sun 14 Jun 2026 17:00:35 +0000
Files and hashes: 1: CzHLUw_lL8wCnmSX53ggA5jCnzw.crl (hash: KW4OnkRQKG7qMrOxCwY0vhDs1LordyfCA447Q+Ed7L0=)
2: F7SCLIzy92KJ-NREaaVjODfHqik.roa (hash: BwWuIIlFuPQUtjh0Ydgc0I6ELzPNPwQINU9/s1qI1yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:9b:cc:6e:48:f8:5e:44:a7:f6:5f:9c:da:ab:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Validity
Not Before: Jun 13 17:00:35 2026 GMT
Not After : Jun 14 17:00:35 2026 GMT
Subject: CN=f4a5cae92c869e19ec51a3c220e008a9599825ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ad:82:f6:3a:8f:c6:27:a9:1c:35:43:99:e7:
08:9f:93:7b:cc:54:96:39:0d:bb:fc:51:77:d0:d9:
c5:07:9c:65:15:ee:e3:41:80:16:24:89:ca:6b:b2:
8c:a7:80:08:5d:c9:d3:9c:07:17:f2:94:61:67:6c:
ea:ec:ec:63:12:26:7d:c5:1d:3f:94:02:99:63:06:
74:29:e2:ca:20:09:0a:44:e1:1a:1a:87:82:3a:9a:
0c:e2:bd:8f:86:08:16:e7:73:8d:77:8e:50:e2:c5:
d9:45:6f:8a:f9:06:48:9d:82:10:4b:a9:bf:5f:50:
bb:3b:17:b9:4f:de:ac:42:37:de:ea:43:fe:76:7a:
50:bd:1b:66:6e:e2:18:a6:10:2f:1f:a5:62:a2:ff:
a9:f5:15:8a:6a:12:62:d2:46:b5:16:ad:4d:cc:19:
5c:2f:a9:b8:3c:86:2a:ae:4c:ff:3e:ed:c4:02:7d:
b0:11:02:86:a6:35:3f:ab:b5:9c:2a:02:fb:19:8c:
ba:64:90:70:72:8e:31:b5:4e:29:6c:e3:0e:6f:f1:
54:ae:5c:33:0f:be:0b:0f:57:fe:43:03:c8:0d:6e:
4f:d1:a0:70:94:1f:b1:f4:ad:96:94:64:cb:ec:f9:
b5:5b:21:41:49:d3:b5:98:58:e9:91:54:11:f4:ec:
a3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A5:CA:E9:2C:86:9E:19:EC:51:A3:C2:20:E0:08:A9:59:98:25:CA
X509v3 Authority Key Identifier:
keyid:0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:30:9c:4f:b9:1e:8d:87:4d:50:1a:7e:5f:e8:6a:53:ef:3e:
66:f5:be:11:74:67:3b:03:9e:20:29:1f:22:4a:e0:32:58:ef:
82:0c:2a:4b:81:9a:96:39:e5:22:93:6e:ea:6a:a6:40:df:b9:
22:61:40:b2:8e:5b:87:17:da:14:fd:d5:55:c6:52:72:21:78:
0f:dc:cf:ec:c0:f7:ef:de:15:ed:f2:96:c1:24:f3:db:4a:da:
75:de:83:8c:80:1c:25:bc:18:e1:ec:57:c3:2b:57:3f:e4:2c:
36:b5:10:19:76:cf:b4:35:ff:84:47:60:4c:bd:d1:a4:84:24:
58:7b:dc:fb:0e:3b:79:28:9d:2e:31:61:e4:2e:a5:20:c2:47:
0d:62:2c:b9:1f:1e:68:23:6b:56:b0:14:1d:ec:e9:0e:b9:ee:
08:e1:99:30:34:db:2e:4f:3d:cd:f1:dc:67:f8:ee:7d:b0:d7:
07:d0:3c:d5:15:01:78:d5:16:b7:41:76:93:59:74:4d:87:c2:
fe:a8:9e:32:e5:0e:55:8a:6a:50:ae:b8:00:a8:a8:4d:7c:31:
68:42:10:8b:3d:52:c4:31:ef:4b:02:c8:03:59:65:c4:a8:a2:
03:3a:6f:cf:4f:3e:d2:83:d9:dc:95:4d:54:b9:86:5e:18:04:
dd:45:68:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7B7ZvMbkj4XkSn9l+c2qvgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMzFjYjUzMGZlNTJmY2MwMjllNjQ5N2U3NzgyMDAzOThj
MjlmM2MwHhcNMjYwNjEzMTcwMDM1WhcNMjYwNjE0MTcwMDM1WjAzMTEwLwYDVQQD
EyhmNGE1Y2FlOTJjODY5ZTE5ZWM1MWEzYzIyMGUwMDhhOTU5OTgyNWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3a2C9jqPxiepHDVDmecIn5N7zFSW
OQ27/FF30NnFB5xlFe7jQYAWJInKa7KMp4AIXcnTnAcX8pRhZ2zq7OxjEiZ9xR0/
lAKZYwZ0KeLKIAkKROEaGoeCOpoM4r2PhggW53ONd45Q4sXZRW+K+QZInYIQS6m/
X1C7Oxe5T96sQjfe6kP+dnpQvRtmbuIYphAvH6Viov+p9RWKahJi0ka1Fq1NzBlc
L6m4PIYqrkz/Pu3EAn2wEQKGpjU/q7WcKgL7GYy6ZJBwco4xtU4pbOMOb/FUrlwz
D74LD1f+QwPIDW5P0aBwlB+x9K2WlGTL7Pm1WyFBSdO1mFjpkVQR9OyjYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSlyukshp4Z7FGjwiDgCKlZmCXKMB8GA1UdIwQY
MBaAFAsxy1MP5S/MAp5kl+d4IAOYwp88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3pITFV3X2xMOHdDbm1TWDUzZ2dBNWpDbnp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hNjg5OWItM2JiMi00ZGRjLTljOTEt
YTFlM2MzOTRlZTgwLzEvQ3pITFV3X2xMOHdDbm1TWDUzZ2dBNWpDbnp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9hNjg5OWItM2JiMi00ZGRjLTljOTEtYTFlM2MzOTRlZTgw
LzEvQ3pITFV3X2xMOHdDbm1TWDUzZ2dBNWpDbnp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzCcT7ke
jYdNUBp+X+hqU+8+ZvW+EXRnOwOeICkfIkrgMljvggwqS4GaljnlIpNu6mqmQN+5
ImFAso5bhxfaFP3VVcZSciF4D9zP7MD3794V7fKWwSTz20radd6DjIAcJbwY4exX
wytXP+QsNrUQGXbPtDX/hEdgTL3RpIQkWHvc+w47eSidLjFh5C6lIMJHDWIsuR8e
aCNrVrAUHezpDrnuCOGZMDTbLk89zfHcZ/jufbDXB9A81RUBeNUWt0F2k1l0TYfC
/qieMuUOVYpqUK64AKioTXwxaEIQiz1SxDHvSwLIA1llxKiiAzpvz08+0oPZ3JVN
VLmGXhgE3UVoOQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:08:59 2026 by rpki-client