Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
File: czsHKLegVDWEws0LSLdHjEGU7wo.mft (raw, json)
Hash identifier: 7BzugzXN5qh+XLoqAW9cywzF7Q7Osc6a4QDpxc8UFMI=
Subject key identifier: E2:80:2B:39:59:26:17:91:B1:71:E7:E9:C5:B6:3E:03:CF:F8:42:62
Authority key identifier: 73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
Certificate issuer: /CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Certificate serial: 019EC06D1F68489F045055614D4C7A5EC2F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
Manifest number: 0A92
Signing time: Sat 13 Jun 2026 10:00:37 +0000
Manifest this update: Sat 13 Jun 2026 10:00:37 +0000
Manifest next update: Sun 14 Jun 2026 10:00:37 +0000
Files and hashes: 1: Oce8w_FStQrxz5-sGyZ5GI_yylQ.roa (hash: /gUG2XD9ZyXjCehDc7TUgIzStA7kApp9jArOXsYwwL4=)
2: ZQWSBrSbVBwfkGrwKFFXvU4ra7w.roa (hash: r+NK3YQEVsT0+KvKCit8WLyB+4wd+LAbIvtambZpbro=)
3: czsHKLegVDWEws0LSLdHjEGU7wo.crl (hash: 6OIKQVBv+StWqf9GZBUWUhECdWVayaO5udjyN/WnNqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:1f:68:48:9f:04:50:55:61:4d:4c:7a:5e:c2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Validity
Not Before: Jun 13 10:00:37 2026 GMT
Not After : Jun 14 10:00:37 2026 GMT
Subject: CN=e2802b3959261791b171e7e9c5b63e03cff84262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4e:83:d4:7e:c4:85:c3:34:30:28:c0:e2:1e:
84:9b:6b:f1:6d:ce:ef:b3:cd:89:ef:cf:e2:9b:54:
fe:79:05:06:ba:ff:62:f0:70:4c:43:80:06:b6:b1:
60:e2:5e:82:73:28:d8:21:32:e3:2f:56:86:0b:cf:
7e:51:3d:9e:dd:98:10:03:d3:16:e6:b6:6a:ea:5c:
d3:f5:f8:a8:d3:39:c0:db:16:e1:76:2c:07:bc:77:
00:3b:19:01:5f:b8:95:1e:59:d1:69:1c:d4:4b:29:
90:71:b0:a0:bf:de:58:16:36:09:1c:f1:40:56:06:
eb:02:50:9b:69:1b:32:a6:5d:e1:c9:93:07:d5:58:
70:b4:b2:bf:ac:39:34:13:b0:e0:e6:f7:8e:ff:64:
69:4d:ec:f6:33:2d:02:38:cd:ee:1f:36:99:56:82:
8c:7b:b6:6f:01:80:42:12:9e:b3:9b:6f:17:91:c0:
13:ba:93:88:7e:85:da:ec:ca:14:39:4e:61:59:7b:
23:80:e7:d6:ef:4e:12:c7:e3:1f:81:01:1a:35:29:
3e:0d:d6:43:a6:55:a6:30:78:91:96:a6:45:1b:19:
5b:f0:d2:aa:28:ec:88:4c:0b:b3:c4:70:ea:f3:87:
0b:3b:7c:61:bc:99:ff:82:c0:93:ff:13:45:2f:35:
6c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:80:2B:39:59:26:17:91:B1:71:E7:E9:C5:B6:3E:03:CF:F8:42:62
X509v3 Authority Key Identifier:
keyid:73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:35:07:9c:ac:28:65:c3:bd:e5:3d:d8:66:6c:e6:3a:ed:46:
b7:6f:2d:04:ef:f0:5a:c5:ee:ee:a9:47:99:5d:7c:b2:3e:c8:
ca:c3:dc:3f:1f:18:79:8d:f6:dc:a8:a6:b0:26:24:87:44:8e:
e0:ad:8a:46:f2:ea:76:bf:6c:82:5a:8d:85:9e:01:2e:8e:e4:
33:f2:27:bb:74:cb:ec:53:85:be:8f:3d:7b:5b:86:da:3f:f2:
06:dd:fb:ba:79:64:00:97:5c:57:58:5f:cb:9e:43:e5:2d:8e:
6d:f7:c4:e0:16:d8:73:8e:ea:15:77:c2:d3:53:3e:0e:9b:5a:
75:d4:be:4e:e1:42:b5:2f:df:67:e6:2f:6b:f9:5b:ff:48:a7:
00:83:df:27:ad:8f:22:44:10:ce:fd:38:d1:3e:61:0f:17:e3:
92:48:5e:e3:91:dc:25:3d:97:0b:56:9b:90:63:de:01:51:35:
c1:aa:a5:ee:ee:85:4a:39:e6:8d:c6:76:e6:b5:a0:45:bc:50:
e8:1f:9d:d0:91:35:2a:e0:23:38:6d:e4:dc:86:64:fe:dc:53:
9e:83:11:f9:ad:99:e8:95:39:cc:17:22:3f:7d:a6:bb:34:ab:
52:24:fa:94:d8:a0:05:37:67:49:19:8b:4e:63:ed:78:12:83:
98:09:a0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:54:35 2026 by rpki-client