Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
File: czsHKLegVDWEws0LSLdHjEGU7wo.mft (raw, json)
Hash identifier: SFUHNRQbSA/xxsEK87EHvTpCRt0eyh+oPTP8ly4WmMA=
Subject key identifier: BE:90:FC:2C:F6:64:71:AF:F1:E3:3F:2A:E2:E6:05:5C:AE:00:E3:D0
Authority key identifier: 73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
Certificate issuer: /CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Certificate serial: 019DA48B68F0C13726C1BEEE672E58871EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
Manifest number: 09FF
Signing time: Sun 19 Apr 2026 07:01:32 +0000
Manifest this update: Sun 19 Apr 2026 07:01:32 +0000
Manifest next update: Mon 20 Apr 2026 07:01:32 +0000
Files and hashes: 1: Oce8w_FStQrxz5-sGyZ5GI_yylQ.roa (hash: /gUG2XD9ZyXjCehDc7TUgIzStA7kApp9jArOXsYwwL4=)
2: ZQWSBrSbVBwfkGrwKFFXvU4ra7w.roa (hash: r+NK3YQEVsT0+KvKCit8WLyB+4wd+LAbIvtambZpbro=)
3: czsHKLegVDWEws0LSLdHjEGU7wo.crl (hash: wg51Lf51fp5yG1fqjLAn2kRyOX2Zt4GEe5gpQNw/Z/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:68:f0:c1:37:26:c1:be:ee:67:2e:58:87:1e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Validity
Not Before: Apr 19 07:01:32 2026 GMT
Not After : Apr 20 07:01:32 2026 GMT
Subject: CN=be90fc2cf66471aff1e33f2ae2e6055cae00e3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:54:2a:f9:e7:dc:b2:aa:d0:65:5d:32:f4:23:
e5:61:8c:ed:36:6e:8c:85:b2:1c:04:29:2f:3a:b5:
4f:aa:ff:11:e6:10:b9:90:04:02:c2:7e:85:a3:bc:
a5:73:c7:7e:7d:67:80:1e:fd:af:82:99:a2:36:28:
dd:ea:62:8b:43:85:d8:8b:36:51:9e:b3:bd:9c:4e:
ad:3c:66:ad:2e:af:a3:a3:8d:ab:65:3f:03:ac:aa:
16:e7:28:e0:f3:68:b8:86:1c:49:00:fa:95:6f:49:
96:c4:e0:9e:6b:81:2d:37:40:5e:86:52:bb:97:71:
f7:b7:ba:86:f6:ad:43:87:1a:84:63:7f:46:c0:ed:
cd:e4:53:5d:a8:c1:95:36:c3:3e:63:77:1d:ac:8c:
86:cd:bc:a2:8e:3c:9a:c0:de:7c:69:39:22:7e:e9:
97:50:3c:9f:3f:f1:db:99:9e:46:3b:b4:90:ff:2d:
91:ff:b6:bb:35:55:36:42:ba:7d:51:8e:1e:35:6e:
1c:6c:0e:7f:69:ad:33:9a:bc:23:7c:eb:da:05:d5:
34:d6:3e:b7:18:73:2b:eb:2b:ef:04:9f:bf:5b:b5:
68:04:35:b9:24:53:46:1e:61:31:7b:9f:c3:13:41:
c2:90:36:0e:1a:cc:a3:52:64:0e:a1:ea:17:f3:3e:
90:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:90:FC:2C:F6:64:71:AF:F1:E3:3F:2A:E2:E6:05:5C:AE:00:E3:D0
X509v3 Authority Key Identifier:
keyid:73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d7:84:e5:a1:b6:c6:6c:65:cc:20:b5:6e:c0:f8:ee:73:96:
de:89:be:b3:df:18:53:9b:07:7a:d3:ac:03:30:97:1e:6b:9d:
cf:e5:de:42:db:88:8d:7a:6a:26:19:22:da:29:53:0e:1c:a4:
53:d9:02:19:c9:98:a0:81:1e:f9:82:57:03:70:ea:e8:3b:07:
5a:39:0e:a3:97:a3:e0:b9:f2:cd:87:c0:42:92:f5:1b:ad:08:
10:fe:19:6d:4e:8f:ef:96:68:7c:83:24:50:ec:56:75:11:54:
70:c9:b7:89:dc:04:eb:f4:6c:3c:fc:b5:8b:f2:16:a3:b6:be:
fc:f7:ed:f1:26:ef:21:3b:30:2e:96:f0:96:88:01:da:a4:5f:
3f:1a:c9:49:c9:7f:2d:13:5c:5c:33:62:20:57:48:a2:85:16:
10:35:6d:f3:5f:92:90:95:47:24:a6:20:df:33:58:07:2b:e7:
b9:c6:b5:a1:2c:8e:fe:1e:4c:1b:e3:f5:96:42:14:7d:e0:80:
c6:b6:f0:b0:d4:15:1a:24:0b:3a:61:d3:1c:27:20:f8:5f:43:
bd:1b:0b:ed:e3:a8:30:f2:4a:f8:c5:b4:26:0a:e1:c2:50:37:
7e:72:63:ce:e5:d3:f1:92:16:19:5d:85:9d:a1:5a:15:57:7d:
ec:31:66:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ki2jwwTcmwb7uZy5Yhx7lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczM2IwNzI4YjdhMDU0MzU4NGMyY2QwYjQ4Yjc0NzhjNDE5
NGVmMGEwHhcNMjYwNDE5MDcwMTMyWhcNMjYwNDIwMDcwMTMyWjAzMTEwLwYDVQQD
EyhiZTkwZmMyY2Y2NjQ3MWFmZjFlMzNmMmFlMmU2MDU1Y2FlMDBlM2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVQq+efcsqrQZV0y9CPlYYztNm6M
hbIcBCkvOrVPqv8R5hC5kAQCwn6Fo7ylc8d+fWeAHv2vgpmiNijd6mKLQ4XYizZR
nrO9nE6tPGatLq+jo42rZT8DrKoW5yjg82i4hhxJAPqVb0mWxOCea4EtN0BehlK7
l3H3t7qG9q1DhxqEY39GwO3N5FNdqMGVNsM+Y3cdrIyGzbyijjyawN58aTkifumX
UDyfP/HbmZ5GO7SQ/y2R/7a7NVU2Qrp9UY4eNW4cbA5/aa0zmrwjfOvaBdU01j63
GHMr6yvvBJ+/W7VoBDW5JFNGHmExe5/DE0HCkDYOGsyjUmQOoeoX8z6QYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6Q/Cz2ZHGv8eM/KuLmBVyuAOPQMB8GA1UdIwQY
MBaAFHM7Byi3oFQ1hMLNC0i3R4xBlO8KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3pzSEtMZWdWRFdFd3MwTFNMZEhqRUdVN3dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hODM0ZGEtMWNjYS00MDE3LTkwYjgt
ZGFlZTBhZWFmYjJiLzEvY3pzSEtMZWdWRFdFd3MwTFNMZEhqRUdVN3dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hODM0ZGEtMWNjYS00MDE3LTkwYjgtZGFlZTBhZWFmYjJi
LzEvY3pzSEtMZWdWRFdFd3MwTFNMZEhqRUdVN3dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApteE5aG2
xmxlzCC1bsD47nOW3om+s98YU5sHetOsAzCXHmudz+XeQtuIjXpqJhki2ilTDhyk
U9kCGcmYoIEe+YJXA3Dq6DsHWjkOo5ej4LnyzYfAQpL1G60IEP4ZbU6P75ZofIMk
UOxWdRFUcMm3idwE6/RsPPy1i/IWo7a+/Pft8SbvITswLpbwlogB2qRfPxrJScl/
LRNcXDNiIFdIooUWEDVt81+SkJVHJKYg3zNYByvnuca1oSyO/h5MG+P1lkIUfeCA
xrbwsNQVGiQLOmHTHCcg+F9DvRsL7eOoMPJK+MW0JgrhwlA3fnJjzuXT8ZIWGV2F
naFaFVd97DFmTg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:16:28 2026 by rpki-client