Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
File: czsHKLegVDWEws0LSLdHjEGU7wo.mft (raw, json)
Hash identifier: jVYotYBb0GZKduurYzTniA9TCea4EfdFPzUOb/b9Iwc=
Subject key identifier: 27:41:AD:A4:7D:65:F0:75:CC:3F:50:2C:AA:07:00:59:9E:7D:69:6B
Authority key identifier: 73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
Certificate issuer: /CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Certificate serial: 019CAB6B1B90FC165876787CE4BBF9087CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
Manifest number: 097E
Signing time: Sun 01 Mar 2026 22:00:49 +0000
Manifest this update: Sun 01 Mar 2026 22:00:49 +0000
Manifest next update: Mon 02 Mar 2026 22:00:49 +0000
Files and hashes: 1: Oce8w_FStQrxz5-sGyZ5GI_yylQ.roa (hash: /gUG2XD9ZyXjCehDc7TUgIzStA7kApp9jArOXsYwwL4=)
2: ZQWSBrSbVBwfkGrwKFFXvU4ra7w.roa (hash: r+NK3YQEVsT0+KvKCit8WLyB+4wd+LAbIvtambZpbro=)
3: czsHKLegVDWEws0LSLdHjEGU7wo.crl (hash: UT6Dk2fAQnoum8mtdbNFVIaLUWVZZ6daoU8s+Af77Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:1b:90:fc:16:58:76:78:7c:e4:bb:f9:08:7c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Validity
Not Before: Mar 1 22:00:49 2026 GMT
Not After : Mar 2 22:00:49 2026 GMT
Subject: CN=2741ada47d65f075cc3f502caa0700599e7d696b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c4:ae:03:af:ea:62:2e:e4:06:ab:ff:db:c5:
34:25:da:dd:e7:14:8c:7b:b6:5c:48:5e:81:48:d5:
9b:6e:e1:bf:76:a4:6e:52:f5:48:a8:cf:c5:4e:70:
16:f0:64:d6:79:90:93:56:49:34:01:58:99:85:30:
c5:2c:c6:5a:12:b0:1b:87:03:4a:7f:22:cd:85:94:
3f:4a:a2:64:d3:ad:2e:aa:68:c1:d2:87:69:6b:4b:
9a:db:01:e5:30:da:3c:32:0c:e1:0a:9b:58:c6:99:
25:dc:a4:25:38:ec:b9:ed:4c:8f:61:3d:34:9e:03:
74:8c:6a:b0:aa:55:d6:ff:32:94:c7:60:ed:43:3f:
e2:5c:e4:32:0c:34:e5:25:fd:80:5f:2c:36:46:80:
38:bf:74:95:e3:36:f4:0d:a8:c0:c0:63:e9:51:b5:
63:f9:2a:dd:e4:5b:60:9e:28:0e:09:37:37:7b:0b:
14:26:27:32:f3:ee:4e:0d:a5:3c:d5:f0:8d:7b:9b:
c8:55:7a:ad:89:d8:47:79:c8:2f:41:26:6c:0e:97:
14:43:d5:85:20:6a:49:f8:9c:2e:f3:d2:d1:fc:6a:
9e:76:69:08:ea:b6:09:da:d0:d4:4f:23:cf:e1:ef:
4f:7d:de:41:29:98:d8:6f:10:7c:05:71:b7:c0:df:
72:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:41:AD:A4:7D:65:F0:75:CC:3F:50:2C:AA:07:00:59:9E:7D:69:6B
X509v3 Authority Key Identifier:
keyid:73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d6:88:4e:16:bd:53:18:fe:42:92:f8:38:3f:32:b8:22:97:
ad:41:9a:da:3f:b4:12:45:fb:c3:3f:e9:72:64:03:a8:0d:2d:
68:e0:a4:66:57:29:8d:0d:32:c8:67:19:b3:af:37:99:d0:16:
e2:ce:9b:c8:8e:37:91:66:79:2c:d9:6b:da:6c:78:2d:be:7a:
37:70:0d:a4:11:27:90:5e:b4:db:40:7c:2b:cb:1b:8b:b0:cf:
81:ca:9f:6c:37:90:c6:76:a7:f4:44:0f:15:f5:45:9d:73:98:
b2:c5:58:2a:3c:05:8f:a7:52:7b:f7:e5:69:b2:e1:f8:db:29:
d2:49:8b:a6:32:f6:ff:47:62:66:82:61:e9:91:8f:83:ce:95:
6b:7f:b8:f8:9b:8d:e5:cb:31:00:21:45:70:22:30:c9:24:a7:
e3:00:30:28:f5:79:32:07:64:41:41:24:89:53:e9:60:95:2c:
73:f7:84:aa:4a:37:32:64:a2:f6:a5:ca:93:06:79:6c:5d:47:
e3:54:fc:23:a5:36:e6:0a:45:c4:71:64:93:3a:a2:1e:72:51:
5c:d6:a8:22:30:2b:66:f9:9a:b7:c2:9a:5c:27:b4:b4:17:04:
40:a3:9c:f1:16:aa:fe:f1:e0:bc:ba:7e:4d:db:dc:d0:7a:eb:
d3:17:60:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:24 2026 by rpki-client