Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
File: czsHKLegVDWEws0LSLdHjEGU7wo.mft (raw, json)
Hash identifier: +ooiXEPQET0UOpKiLU4lOnZhdmcoAnuPSeVnXa6ZnsQ=
Subject key identifier: 30:7B:D7:74:B6:45:B6:DA:45:E2:9E:B8:51:D4:58:3F:82:5C:A2:36
Authority key identifier: 73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
Certificate issuer: /CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Certificate serial: 019D98F52DE3F203CC8BB2B54E3DA6BECD44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
Manifest number: 09F9
Signing time: Fri 17 Apr 2026 01:01:37 +0000
Manifest this update: Fri 17 Apr 2026 01:01:37 +0000
Manifest next update: Sat 18 Apr 2026 01:01:37 +0000
Files and hashes: 1: Oce8w_FStQrxz5-sGyZ5GI_yylQ.roa (hash: /gUG2XD9ZyXjCehDc7TUgIzStA7kApp9jArOXsYwwL4=)
2: ZQWSBrSbVBwfkGrwKFFXvU4ra7w.roa (hash: r+NK3YQEVsT0+KvKCit8WLyB+4wd+LAbIvtambZpbro=)
3: czsHKLegVDWEws0LSLdHjEGU7wo.crl (hash: ljFBtrbbEhSQsLhuvoLeLFv7V12n83LFOo809GgYfoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:2d:e3:f2:03:cc:8b:b2:b5:4e:3d:a6:be:cd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Validity
Not Before: Apr 17 01:01:37 2026 GMT
Not After : Apr 18 01:01:37 2026 GMT
Subject: CN=307bd774b645b6da45e29eb851d4583f825ca236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b0:d3:7b:12:e7:94:bb:c1:67:22:f2:64:24:
a2:a8:fd:9c:52:c7:ad:2a:ab:64:59:c5:76:c6:d6:
32:29:68:d7:8c:a9:dd:d6:96:cd:fa:53:7b:94:2c:
68:5b:62:1f:c2:98:54:fe:74:c6:f2:cb:53:3a:1d:
6f:80:f8:54:e6:d5:20:d0:45:93:5b:0c:17:ba:dd:
9c:64:4e:b2:b7:53:7a:ee:fa:12:74:a7:73:fc:6a:
44:a4:35:c1:4d:7b:dc:8b:e8:f8:d4:52:22:8f:e0:
85:7c:61:0d:b4:f1:9c:9c:42:1e:a6:54:5f:67:67:
c5:96:04:39:2e:50:a9:fd:f0:1d:4a:0c:40:06:48:
5f:36:b1:03:22:83:cf:17:08:88:7d:bf:8b:cd:fb:
4a:b6:06:ad:16:b9:dd:13:94:a6:6a:29:4a:27:d5:
d3:7c:1b:fd:4d:01:10:32:4f:56:7d:e3:a5:84:be:
83:8b:66:fe:a2:ee:c9:22:00:6d:6a:4a:5a:eb:f6:
fb:54:82:a0:65:70:5d:17:ee:c6:4c:46:91:0b:bd:
ba:a0:25:16:0c:dc:7d:2e:d8:6f:75:8a:40:52:24:
40:28:b5:d7:99:ed:cc:6f:3b:74:25:97:36:5a:39:
e2:1f:f6:50:c9:16:1c:d6:ad:64:d1:27:85:fb:f6:
85:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7B:D7:74:B6:45:B6:DA:45:E2:9E:B8:51:D4:58:3F:82:5C:A2:36
X509v3 Authority Key Identifier:
keyid:73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e2:31:f1:84:7e:45:85:b0:7c:ef:dc:3d:08:64:9f:83:3f:
dc:11:a3:75:ad:ca:cf:06:33:a7:4d:97:56:98:ee:d5:b5:b7:
57:d6:6e:1c:12:43:68:61:ef:82:89:b3:3a:60:f1:4d:79:c4:
85:e4:de:53:ec:0d:09:bb:01:30:fc:e9:7c:4f:31:72:f6:ef:
ba:49:5d:0a:6d:af:dd:78:e3:0d:5b:43:30:94:36:50:ad:3d:
b2:41:36:82:32:1e:53:61:c7:99:e6:db:de:77:3e:6e:7e:4d:
18:45:2d:cb:3b:24:6f:e4:6b:68:9a:7a:d4:c0:a9:26:38:6d:
30:ac:e3:c0:26:d0:0f:6d:4d:5c:f2:76:7b:21:fb:17:eb:c4:
0d:7a:70:90:79:dd:03:f6:58:a8:4f:d8:92:e7:34:df:89:37:
e5:b3:2d:b2:f1:b7:77:ca:22:b3:b1:54:be:23:19:23:d1:a4:
c3:e6:03:04:b6:fc:ec:7d:78:07:de:f1:ee:23:78:6e:6c:2d:
b9:82:b1:8a:48:bb:41:08:8e:af:10:5e:b5:54:9d:bc:ac:63:
ed:c7:5d:af:2d:d7:e7:c6:d2:67:89:7b:c7:93:ee:d8:83:87:
ec:9e:17:32:48:c2:21:a5:50:5d:1a:31:41:6d:4b:1c:65:5d:
94:9a:d9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:27:29 2026 by rpki-client