Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
File: CZ-qshYRGNsbd8GnTszLc-doHDY.mft (raw, json)
Hash identifier: J/kJzj3VTqxIVJGRnSgXeTepK/D/p0PzmST+5h4ieJw=
Subject key identifier: 2B:18:D4:7D:7E:60:84:6A:E3:5A:59:B7:6C:8C:03:8E:F2:FB:2F:47
Authority key identifier: 09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36
Certificate issuer: /CN=099faab2161118db1b77c1a74ecccb73e7681c36
Certificate serial: 019CABD9B2ED4455C88269C096112E03F89D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
Manifest number: 0269
Signing time: Mon 02 Mar 2026 00:01:36 +0000
Manifest this update: Mon 02 Mar 2026 00:01:36 +0000
Manifest next update: Tue 03 Mar 2026 00:01:36 +0000
Files and hashes: 1: B4ECW0jtt5KyrtkmlUhbFQBxuus.roa (hash: Z8JjmJ/Yv+fCZ4euDC+I0rty80LYQ117ydvucBAt8Uw=)
2: CZ-qshYRGNsbd8GnTszLc-doHDY.crl (hash: OnbfOWu80goHZCvkkGm3onDe4e/XdMos8b7WQtXficw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:b2:ed:44:55:c8:82:69:c0:96:11:2e:03:f8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099faab2161118db1b77c1a74ecccb73e7681c36
Validity
Not Before: Mar 2 00:01:36 2026 GMT
Not After : Mar 3 00:01:36 2026 GMT
Subject: CN=2b18d47d7e60846ae35a59b76c8c038ef2fb2f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9a:ec:f4:e2:7e:ad:aa:eb:f5:4c:13:46:a8:
87:94:90:44:29:4b:95:e7:5c:a5:56:f0:58:d0:52:
26:ea:3e:8e:31:ad:c2:70:4c:02:d8:07:a4:9d:48:
f1:b9:16:15:4e:90:23:6d:4b:e1:9c:b6:01:5d:90:
5f:f3:bc:cc:eb:52:87:2a:61:1a:9e:6a:11:7e:a4:
88:5f:94:f5:96:00:28:0a:e7:69:20:da:20:65:a1:
e0:56:c1:3c:57:23:21:f9:c5:ce:cc:cf:02:04:e6:
19:53:76:46:aa:b6:62:91:d9:d0:28:cc:13:8d:00:
d3:7e:75:69:04:02:3c:5d:d9:a4:aa:a1:a0:3b:d2:
a6:39:52:f5:53:8c:84:b4:24:04:01:6d:06:ed:44:
ed:91:75:83:76:b6:82:95:b0:eb:46:78:79:5e:22:
6f:27:81:b4:4b:79:ec:d4:33:24:c5:d2:94:24:3e:
dc:c7:45:00:ca:77:a3:79:7b:75:b3:3d:57:bf:28:
ea:4b:c3:35:cf:cb:65:11:be:ca:8e:a1:76:67:6f:
e0:d1:85:14:a1:63:29:ff:f9:2c:b2:eb:37:56:b5:
46:de:16:96:f8:ec:4f:22:7c:79:d8:1a:da:a9:7e:
41:f4:0a:6b:04:cc:5f:a5:b0:b4:9a:9f:40:f6:a7:
71:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:18:D4:7D:7E:60:84:6A:E3:5A:59:B7:6C:8C:03:8E:F2:FB:2F:47
X509v3 Authority Key Identifier:
keyid:09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:11:aa:cd:cc:b3:86:e4:c5:a6:f4:82:e7:44:12:71:c1:b1:
a2:30:3b:74:33:18:59:9c:69:15:b7:d9:8e:0b:8c:16:c4:1a:
41:3b:48:77:41:f3:84:a7:ef:c7:4c:dc:a8:bf:67:fa:20:04:
97:09:70:7f:e3:63:fa:74:de:9d:51:19:cb:0b:5c:93:c4:ae:
46:ad:7e:c7:21:5a:16:7a:14:36:64:19:45:29:c3:68:f6:b2:
53:de:e7:4c:e8:97:73:cb:28:dc:25:b6:21:43:6c:82:44:28:
c3:ea:4c:12:dd:7a:a9:be:4b:67:10:61:74:4e:0b:dd:d2:a1:
c8:ea:4f:59:44:94:37:4c:ae:a4:bb:76:fa:a9:ea:71:5b:36:
4f:22:9d:16:a4:e3:1c:3e:50:ba:85:13:16:e8:23:d0:f0:26:
6b:2d:b7:74:a6:5d:71:86:6a:ae:bd:ac:6b:87:6f:41:a8:d5:
c8:c0:f2:bb:c8:cf:1d:74:1f:0f:dc:6a:08:31:51:af:c0:f4:
09:09:31:19:48:fb:d8:b7:c3:79:19:f0:12:61:c5:d0:b5:88:
c6:39:2d:e6:2d:29:62:61:61:c2:96:98:c5:46:64:a2:5f:39:
fa:0a:9e:61:b4:74:95:b1:82:9b:d7:81:9e:6c:d0:d1:87:91:
1d:6d:0b:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2bLtRFXIgmnAlhEuA/idMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OWZhYWIyMTYxMTE4ZGIxYjc3YzFhNzRlY2NjYjczZTc2
ODFjMzYwHhcNMjYwMzAyMDAwMTM2WhcNMjYwMzAzMDAwMTM2WjAzMTEwLwYDVQQD
EygyYjE4ZDQ3ZDdlNjA4NDZhZTM1YTU5Yjc2YzhjMDM4ZWYyZmIyZjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZrs9OJ+rarr9UwTRqiHlJBEKUuV
51ylVvBY0FIm6j6OMa3CcEwC2AeknUjxuRYVTpAjbUvhnLYBXZBf87zM61KHKmEa
nmoRfqSIX5T1lgAoCudpINogZaHgVsE8VyMh+cXOzM8CBOYZU3ZGqrZikdnQKMwT
jQDTfnVpBAI8XdmkqqGgO9KmOVL1U4yEtCQEAW0G7UTtkXWDdraClbDrRnh5XiJv
J4G0S3ns1DMkxdKUJD7cx0UAynejeXt1sz1XvyjqS8M1z8tlEb7KjqF2Z2/g0YUU
oWMp//kssus3VrVG3haW+OxPInx52BraqX5B9AprBMxfpbC0mp9A9qdxcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsY1H1+YIRq41pZt2yMA47y+y9HMB8GA1UdIwQY
MBaAFAmfqrIWERjbG3fBp07My3PnaBw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1otcXNoWVJHTnNiZDhHblRzekxjLWRvSERZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84OGI2Y2MtMmI0Mi00MWUyLTk5YTkt
NGUyNGIxMTljMTQ3LzEvQ1otcXNoWVJHTnNiZDhHblRzekxjLWRvSERZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi84OGI2Y2MtMmI0Mi00MWUyLTk5YTktNGUyNGIxMTljMTQ3
LzEvQ1otcXNoWVJHTnNiZDhHblRzekxjLWRvSERZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBGqzcyz
huTFpvSC50QSccGxojA7dDMYWZxpFbfZjguMFsQaQTtId0HzhKfvx0zcqL9n+iAE
lwlwf+Nj+nTenVEZywtck8SuRq1+xyFaFnoUNmQZRSnDaPayU97nTOiXc8so3CW2
IUNsgkQow+pMEt16qb5LZxBhdE4L3dKhyOpPWUSUN0yupLt2+qnqcVs2TyKdFqTj
HD5QuoUTFugj0PAmay23dKZdcYZqrr2sa4dvQajVyMDyu8jPHXQfD9xqCDFRr8D0
CQkxGUj72LfDeRnwEmHF0LWIxjkt5i0pYmFhwpaYxUZkol85+gqeYbR0lbGCm9eB
nmzQ0YeRHW0LDg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:00 2026 by rpki-client