Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
File: cz2mpsToscTOPyBLtL_Z2GoPVh4.mft (raw, json)
Hash identifier: IsXd8UxLKzsHw/r2Y7VxAz5T6sZaLEjoJ3MxkIsC/G4=
Subject key identifier: 64:E3:DB:EC:56:D7:BC:9F:2C:CD:90:AB:ED:2E:F8:14:4F:A0:72:D7
Authority key identifier: 73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
Certificate issuer: /CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Certificate serial: 019CAB6B83AA171E679597BFB4177084F8FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
Manifest number: 1495
Signing time: Sun 01 Mar 2026 22:01:15 +0000
Manifest this update: Sun 01 Mar 2026 22:01:15 +0000
Manifest next update: Mon 02 Mar 2026 22:01:15 +0000
Files and hashes: 1: cz2mpsToscTOPyBLtL_Z2GoPVh4.crl (hash: YoFNIJJ9Mp2gJHsro/PTfJLxC8zkwVYAwRaCZQd4tS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:83:aa:17:1e:67:95:97:bf:b4:17:70:84:f8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Validity
Not Before: Mar 1 22:01:15 2026 GMT
Not After : Mar 2 22:01:15 2026 GMT
Subject: CN=64e3dbec56d7bc9f2ccd90abed2ef8144fa072d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7c:3f:91:38:5d:a4:50:f7:1d:c0:f3:ae:a3:
a7:42:0e:4e:a5:31:f3:b0:7d:6d:c6:de:ea:2b:7f:
26:32:26:65:13:71:78:69:64:d7:77:1f:e0:c6:5d:
45:62:56:8d:07:4c:c8:ea:cb:e1:3d:da:59:32:11:
16:ab:0f:f5:43:40:ed:ea:84:df:7b:7d:63:5d:f4:
4e:ec:12:c6:95:7e:9a:a6:01:e1:67:18:e5:1f:eb:
90:9e:bf:c6:d2:11:ad:27:a9:65:61:98:02:96:a6:
81:1d:be:fd:44:26:d4:31:f6:8c:c3:94:9e:2d:14:
d2:5f:35:e2:6d:1b:c4:1b:1c:11:40:3c:8d:91:8e:
41:96:74:82:32:86:40:9f:b3:d4:c6:b1:2e:20:fd:
ea:74:81:4b:72:ae:5a:3f:19:00:39:91:e5:45:d4:
f6:a7:4a:c6:18:e1:9e:56:b5:55:c2:92:12:22:f2:
6e:d3:ef:e8:99:31:70:c7:70:48:aa:5e:a7:df:1c:
13:b2:33:20:cb:a2:d0:59:5c:1a:6c:4c:d2:47:3c:
2d:08:18:d2:c4:80:36:9a:c1:bf:a8:d0:db:b6:37:
54:79:a8:c6:44:8b:f4:57:5b:88:b9:3a:49:b5:1f:
f6:d3:92:e4:92:56:2c:da:91:ff:ea:7c:a0:e0:6a:
8a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E3:DB:EC:56:D7:BC:9F:2C:CD:90:AB:ED:2E:F8:14:4F:A0:72:D7
X509v3 Authority Key Identifier:
keyid:73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:38:6a:32:3c:51:e1:74:4e:c3:22:31:21:17:5d:5f:d4:4a:
35:7b:9d:0c:75:91:3b:82:c9:36:85:9f:84:c7:3e:36:91:27:
03:55:4f:9a:8e:18:ed:8c:c0:62:75:c5:43:69:3b:b3:c3:41:
2d:e0:20:8d:71:9e:0f:44:3c:27:fe:d5:85:33:bc:91:7e:b5:
a4:37:b7:29:d2:12:04:1e:20:f7:90:5d:98:42:f0:47:f6:4e:
ed:b5:8e:29:ef:fe:d7:6e:9d:2b:b1:aa:ff:01:e8:77:e6:16:
90:37:08:ee:d3:4e:4b:50:20:81:ec:4d:2c:39:38:07:8d:09:
45:9d:71:17:f0:5f:1e:82:d3:bf:ff:0b:9e:79:49:c8:33:e0:
34:9f:85:ef:78:cd:3e:6e:d5:83:3b:51:ec:58:e8:f4:da:1b:
52:98:fc:20:9e:29:4d:88:2c:90:0a:16:92:21:9f:78:5d:c8:
c9:61:1d:fe:1d:dc:85:f7:16:18:f5:d1:aa:43:84:2a:eb:0d:
c8:b6:b4:5c:d9:05:3c:f0:2b:9d:25:81:60:a5:fe:79:36:6d:
37:7b:dc:16:7e:b9:31:85:f6:c5:ef:cf:21:e4:6e:c8:52:85:
55:61:a8:78:b8:63:fa:e1:b4:b4:f5:e8:59:bb:6f:04:8f:f8:
b2:8d:03:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:48:24 2026 by rpki-client