Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
File: CzHLUw_lL8wCnmSX53ggA5jCnzw.mft (raw, json)
Hash identifier: NsGdaM5FDyVVsga362qiYvEHtpeSVsqjmQms0sCj/i0=
Subject key identifier: F6:0C:35:3F:2F:BB:38:A3:EB:22:8E:39:C2:53:45:A0:98:75:21:08
Authority key identifier: 0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
Certificate issuer: /CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Certificate serial: 019CACEB7F78A1B6BE592191CF9311C02F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 05:00:40 +0000
Manifest this update: Mon 02 Mar 2026 05:00:40 +0000
Manifest next update: Tue 03 Mar 2026 05:00:40 +0000
Files and hashes: 1: CzHLUw_lL8wCnmSX53ggA5jCnzw.crl (hash: iTK4sPZd1NqUbb9DQ0MiE7a6JYdBW1Hmv3p2WzOahu4=)
2: F7SCLIzy92KJ-NREaaVjODfHqik.roa (hash: BwWuIIlFuPQUtjh0Ydgc0I6ELzPNPwQINU9/s1qI1yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:7f:78:a1:b6:be:59:21:91:cf:93:11:c0:2f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Validity
Not Before: Mar 2 05:00:40 2026 GMT
Not After : Mar 3 05:00:40 2026 GMT
Subject: CN=f60c353f2fbb38a3eb228e39c25345a098752108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5a:48:ee:c4:69:93:aa:e9:61:ad:3a:3e:ec:
26:7a:5a:57:14:cb:8a:1b:8e:57:0c:4c:43:04:73:
57:69:1e:03:16:3a:84:21:a7:e8:c1:a0:92:e4:a0:
05:2b:d2:26:f0:ae:f0:39:57:20:5a:d5:4c:86:bd:
16:08:4b:e2:0e:ae:42:cf:af:9b:2c:b3:fc:cb:d8:
b0:13:1b:2e:f9:a9:68:da:c5:d4:c6:29:65:e7:0a:
c5:17:4d:a1:31:7d:3a:e5:c1:09:b6:bc:9c:69:bf:
05:28:03:ac:48:0d:c6:0b:30:fe:f2:e5:66:5b:4e:
39:c2:d0:1c:c7:b9:35:eb:04:46:94:2c:9a:55:0d:
a2:d9:46:df:6f:07:3b:69:12:53:36:7d:58:11:9d:
59:ab:39:5f:a8:53:85:cd:af:67:c5:ac:3a:bf:b5:
e0:15:81:18:d7:86:11:4b:e6:74:5a:c3:12:6d:d7:
0d:de:40:7b:6a:4f:84:a1:72:97:62:cf:65:85:cf:
54:7e:ab:44:de:64:6d:93:fa:26:56:61:f0:07:8f:
28:d9:d4:9f:71:82:1f:a6:d6:c1:82:9c:3b:8e:0f:
86:f0:ea:95:61:ab:56:a8:01:4c:c2:09:62:b6:37:
e1:33:cf:b2:90:39:01:ec:c3:b8:42:a6:b1:4e:eb:
9e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0C:35:3F:2F:BB:38:A3:EB:22:8E:39:C2:53:45:A0:98:75:21:08
X509v3 Authority Key Identifier:
keyid:0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4a:d9:e9:51:50:06:a6:52:60:6f:e4:55:be:10:5e:08:31:
0a:1b:5d:ff:cf:91:fa:fb:11:9c:d5:3c:b6:14:f5:6e:c3:e9:
18:f9:52:64:10:b2:56:59:f9:c9:26:7c:08:c2:42:9d:38:c6:
04:93:82:4f:56:b3:da:05:5f:08:9a:66:e6:6d:13:3d:4c:6c:
48:d2:ee:64:21:cc:19:9d:0e:3c:cd:62:a9:24:54:fc:46:61:
8a:6a:8d:2b:da:b0:f2:60:33:fe:85:fc:1a:69:9f:f9:61:03:
b8:bc:6e:5e:93:8a:49:82:43:fe:ca:ce:40:7c:af:a8:21:a0:
1a:7e:1a:8b:df:c4:93:7c:7b:b2:98:ac:3a:4d:e5:c6:f3:2f:
30:27:cf:57:39:9a:e5:0f:b9:fe:b2:9a:cc:55:3a:5a:ad:6c:
2a:19:a7:23:20:cc:8d:73:31:0d:fb:d0:7c:ee:11:24:cc:b7:
50:51:13:6d:d9:9b:70:c8:d8:9e:a6:bd:99:a7:34:d3:51:a3:
15:ba:6e:1f:d4:62:b3:73:0e:dd:ec:d3:3e:4b:8a:ab:31:e6:
7a:45:dc:aa:38:a8:3c:01:22:3c:c8:a6:85:f8:8c:0d:78:8b:
f8:82:42:66:dc:90:d2:68:b3:8e:f3:e0:e5:d5:e6:f6:5c:88:
ec:d1:dd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:34:59 2026 by rpki-client