Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
File: CZ-qshYRGNsbd8GnTszLc-doHDY.mft (raw, json)
Hash identifier: G1QlyxeXnCQl6Npr/QOARTsRzwixixQZdiZr1NW/w+o=
Subject key identifier: F9:E5:A0:C5:7F:CE:1C:0C:50:82:4E:1D:11:6B:3F:81:45:DB:EB:74
Authority key identifier: 09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36
Certificate issuer: /CN=099faab2161118db1b77c1a74ecccb73e7681c36
Certificate serial: 019FAA87762895A98890BCD148D2EED228F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
Manifest number: 03F6
Signing time: Tue 28 Jul 2026 21:00:32 +0000
Manifest this update: Tue 28 Jul 2026 21:00:32 +0000
Manifest next update: Wed 29 Jul 2026 21:00:32 +0000
Files and hashes: 1: B4ECW0jtt5KyrtkmlUhbFQBxuus.roa (hash: Z8JjmJ/Yv+fCZ4euDC+I0rty80LYQ117ydvucBAt8Uw=)
2: CZ-qshYRGNsbd8GnTszLc-doHDY.crl (hash: myTWPVVtR7i2x3Nu9S3Nxt+G4AnDaP2ZeIDAVPMT3gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:76:28:95:a9:88:90:bc:d1:48:d2:ee:d2:28:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099faab2161118db1b77c1a74ecccb73e7681c36
Validity
Not Before: Jul 28 21:00:32 2026 GMT
Not After : Jul 29 21:00:32 2026 GMT
Subject: CN=f9e5a0c57fce1c0c50824e1d116b3f8145dbeb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:f4:65:14:d1:df:9a:73:fa:5f:d5:52:e2:
57:d1:3c:54:23:84:81:be:09:87:05:b9:40:b6:e1:
ed:7c:fd:58:63:b4:4d:c4:03:17:0b:d4:b5:c5:ab:
6d:6a:2c:7a:3b:01:77:27:b1:09:e1:ef:94:a6:e0:
f9:9b:7e:cd:e4:dc:1c:57:64:4e:a4:25:20:e3:83:
42:eb:29:c0:5e:6c:6d:53:f8:db:89:21:57:a3:dd:
43:16:aa:22:7d:0c:ee:d2:fb:0f:2b:b3:06:9f:65:
3c:7e:c4:af:ff:47:f0:35:79:8d:87:dd:7c:ee:4c:
4f:27:c4:2b:c6:2d:9e:78:d4:c0:96:08:62:c7:46:
d1:b9:5e:cb:6a:c7:ba:cc:eb:fb:5e:8e:d0:92:85:
f1:d2:27:4e:56:0c:03:4d:bc:46:95:16:dc:64:f8:
1a:c4:39:55:10:48:70:f4:71:2f:cb:f5:09:e9:9d:
d2:c2:2e:06:15:e2:45:8b:0e:30:b5:1a:09:6e:e6:
94:36:4c:3b:aa:93:ac:50:fd:d8:88:22:ee:2b:36:
5c:2e:67:77:05:9a:cf:3b:26:64:c3:f9:36:16:b6:
22:a7:a0:07:29:48:57:71:f6:46:7a:b1:9e:69:54:
ba:e3:17:ce:35:5f:ce:33:e8:f1:4b:7d:02:6f:4d:
d2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E5:A0:C5:7F:CE:1C:0C:50:82:4E:1D:11:6B:3F:81:45:DB:EB:74
X509v3 Authority Key Identifier:
keyid:09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ef:04:f4:ba:8d:e2:a3:77:dc:47:8d:6e:f3:f3:32:09:c9:
38:18:5d:d7:b6:1e:f3:06:f3:42:dc:bf:89:2c:ad:47:ba:ad:
5d:4f:41:21:8e:c4:36:c5:21:0b:0a:3a:de:24:08:4f:79:a4:
96:64:a8:e0:b0:86:7a:3b:46:b4:15:65:ac:c3:38:9d:9a:45:
e0:5a:7a:0c:51:ee:ad:6d:2b:b4:71:76:ac:55:04:7a:f5:ee:
16:80:24:3b:ae:52:76:95:14:bc:8d:b5:ef:36:9e:6b:07:9e:
db:88:13:85:ed:3d:35:c4:1a:41:d4:cc:e9:24:22:f3:ba:83:
ec:eb:c7:24:52:cc:da:20:68:b4:c2:02:ce:f3:bf:66:fb:20:
3f:b7:be:6a:94:c4:b4:b3:1e:88:73:1a:ba:77:eb:e9:b3:2d:
09:f9:a2:a3:3a:0a:82:a3:9f:d1:2d:d9:6e:7f:66:f9:a8:04:
27:91:a6:fa:38:ae:c5:10:ea:2a:56:22:98:4b:95:2b:28:a1:
4b:44:13:58:18:76:1f:f4:49:58:7b:02:14:ca:6e:a0:41:fc:
80:73:52:82:dc:70:a9:42:0a:3b:2f:71:e4:e4:3b:01:2a:87:
76:c6:30:17:4a:4c:6c:5b:35:41:7c:f8:19:04:4f:25:23:b3:
20:95:a8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:11:27 2026 by rpki-client