Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
File: CZ-qshYRGNsbd8GnTszLc-doHDY.mft (raw, json)
Hash identifier: 9xjf27nawr048iHXPHR0M/hTFjsJkbxridccuu9R5II=
Subject key identifier: CB:9D:FA:21:6D:B9:E3:7F:AF:09:04:28:A8:A1:69:9D:9A:6C:D4:C8
Authority key identifier: 09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36
Certificate issuer: /CN=099faab2161118db1b77c1a74ecccb73e7681c36
Certificate serial: 019DA4F8CF4B32CBAA3C3DFAF819D1C028D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
Manifest number: 02EA
Signing time: Sun 19 Apr 2026 09:01:02 +0000
Manifest this update: Sun 19 Apr 2026 09:01:02 +0000
Manifest next update: Mon 20 Apr 2026 09:01:02 +0000
Files and hashes: 1: B4ECW0jtt5KyrtkmlUhbFQBxuus.roa (hash: Z8JjmJ/Yv+fCZ4euDC+I0rty80LYQ117ydvucBAt8Uw=)
2: CZ-qshYRGNsbd8GnTszLc-doHDY.crl (hash: OOjPcisWItGlSrPlXf2XrD/GykNRKviuel8B1ZGEblg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:cf:4b:32:cb:aa:3c:3d:fa:f8:19:d1:c0:28:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099faab2161118db1b77c1a74ecccb73e7681c36
Validity
Not Before: Apr 19 09:01:02 2026 GMT
Not After : Apr 20 09:01:02 2026 GMT
Subject: CN=cb9dfa216db9e37faf090428a8a1699d9a6cd4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7b:76:a2:29:df:1c:89:f2:e5:6f:4e:d7:46:
88:31:96:72:5a:0f:b3:2f:3d:00:b6:a1:fb:f5:5d:
11:51:d8:45:1a:00:92:b0:cf:a5:44:ba:4a:28:76:
e1:c4:53:24:d4:b1:8f:07:37:ef:33:39:11:c2:7b:
2e:17:62:58:e3:49:e3:97:87:bc:c4:56:ac:ce:03:
b0:36:46:2a:9e:be:f3:46:4c:f6:6f:27:33:7d:19:
50:35:32:1b:b6:b9:e5:7f:07:fd:62:55:ee:26:6c:
fe:18:3f:3e:dc:ee:da:e6:b0:a1:42:03:3d:fb:11:
7f:e6:fb:63:c4:fb:0e:45:50:8c:33:69:38:fe:59:
88:6c:cc:e8:48:26:f0:90:ca:6d:b8:6d:84:9c:20:
6c:be:6e:9d:3a:89:70:7c:f1:76:2a:0b:e3:43:c4:
c6:7d:d5:26:be:f5:46:49:95:84:9d:4f:ef:62:f5:
4c:25:84:e8:23:1d:c9:41:d5:ac:d1:3b:e4:b0:8b:
79:93:5f:0e:f8:a5:92:b2:7c:04:b4:ca:ed:8d:8a:
01:ab:49:91:9d:d4:4a:4d:95:ba:c3:5d:76:dc:14:
69:9a:db:76:93:25:8e:a7:73:34:e6:f2:20:85:5f:
4a:0a:06:24:6f:b6:29:37:fc:19:de:ee:de:d0:a1:
d4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9D:FA:21:6D:B9:E3:7F:AF:09:04:28:A8:A1:69:9D:9A:6C:D4:C8
X509v3 Authority Key Identifier:
keyid:09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f1:b9:b8:06:9e:83:a0:89:c9:8b:4e:c6:27:6d:d1:3f:37:
e2:33:64:82:13:c1:bd:7d:3b:c5:26:ef:59:22:a5:54:9d:81:
22:8e:d4:ed:80:ce:21:94:00:67:cf:96:f1:38:f7:57:1b:59:
53:3e:3a:5c:26:05:00:ea:44:13:5a:2f:b9:f8:43:2f:7a:83:
ed:11:4f:2d:15:03:92:75:82:78:63:56:80:5f:b1:dc:ef:ce:
2f:db:1b:c4:16:80:f8:79:a3:84:fb:41:6c:9a:06:a6:ed:d3:
d4:5e:29:d4:ca:46:79:6e:75:79:96:08:12:9e:cb:5e:3c:21:
16:e6:eb:01:e7:0f:75:bf:6e:e4:b4:8e:af:aa:6d:5b:84:09:
b5:9a:24:d6:e9:9e:41:fd:43:4a:d2:ef:f0:0e:5c:69:ff:85:
9c:c0:34:5e:13:19:65:a4:21:04:6e:8d:88:51:17:6d:85:a9:
fd:02:07:3d:aa:eb:4a:5c:07:5c:a8:9e:33:18:2a:d8:e6:33:
de:d9:49:3f:33:4a:da:91:f6:09:82:39:06:53:e5:93:a9:59:
a8:9c:88:32:3f:c2:49:ba:18:04:48:7a:e6:29:58:66:d9:cf:
e7:17:fe:71:01:6f:d8:05:9d:db:17:70:10:70:bf:71:d4:e4:
ce:51:97:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:18:05 2026 by rpki-client