Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
File: czsHKLegVDWEws0LSLdHjEGU7wo.mft (raw, json)
Hash identifier: U3PfdolFAagEBN7rIc+MPhAfdHjQvueTgzYG6VAtiX0=
Subject key identifier: C8:E1:DB:AE:7F:80:2B:C7:F1:ED:FD:72:35:25:7C:E4:CF:A9:C5:C4
Authority key identifier: 73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
Certificate issuer: /CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Certificate serial: 01A0C031C96ED3C27E82AB19E82F0102937B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
Manifest number: 0B9B
Signing time: Sun 20 Sep 2026 19:01:23 +0000
Manifest this update: Sun 20 Sep 2026 19:01:23 +0000
Manifest next update: Mon 21 Sep 2026 19:01:23 +0000
Files and hashes: 1: Oce8w_FStQrxz5-sGyZ5GI_yylQ.roa (hash: /gUG2XD9ZyXjCehDc7TUgIzStA7kApp9jArOXsYwwL4=)
2: ZQWSBrSbVBwfkGrwKFFXvU4ra7w.roa (hash: r+NK3YQEVsT0+KvKCit8WLyB+4wd+LAbIvtambZpbro=)
3: czsHKLegVDWEws0LSLdHjEGU7wo.crl (hash: n7/w0y+NyPGFfy+BqXbD53XMukQW1BEFZdVI9uNZfuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:31:c9:6e:d3:c2:7e:82:ab:19:e8:2f:01:02:93:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Validity
Not Before: Sep 20 19:01:23 2026 GMT
Not After : Sep 21 19:01:23 2026 GMT
Subject: CN=c8e1dbae7f802bc7f1edfd7235257ce4cfa9c5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7b:64:ab:15:74:48:8c:5a:1c:ea:4e:d9:57:
b9:cc:a6:ea:6c:d1:7f:44:ec:8f:bb:4e:8c:a6:03:
2f:5e:2c:58:1d:2e:68:0b:17:6f:67:e5:ee:2b:7f:
b1:ec:ad:af:dc:70:06:bb:fb:25:84:30:cc:ed:b8:
64:49:5d:f3:84:ee:be:c7:3f:6b:ed:7b:87:65:5d:
1b:51:f9:b3:5d:90:e8:3b:c4:8c:a2:fd:03:b5:5e:
08:17:f1:4e:93:8f:5e:57:8d:df:a4:43:0b:72:21:
55:fb:37:5f:76:af:5c:a4:dc:f8:e5:29:93:a6:45:
7b:02:98:85:1f:fb:1d:75:55:3d:71:cb:c1:1a:1f:
9e:81:4a:36:d8:b5:a9:81:22:27:ed:e5:56:72:f9:
52:c3:ae:76:6f:17:ae:53:20:b9:0a:1c:21:30:ca:
a8:50:5e:23:94:c5:be:0e:02:9d:cf:48:57:ef:e4:
ae:e1:ed:8c:39:c3:b1:83:2e:82:d1:4a:99:7b:73:
84:df:f4:8d:0b:4c:81:01:e4:f7:a6:3f:bf:b5:3c:
dc:8f:bb:98:90:ab:bd:e5:c2:7b:c8:44:bb:59:c4:
c6:bc:7f:f0:87:34:60:9a:34:db:eb:4e:17:d1:21:
5e:4c:fc:d6:59:84:c3:d1:21:1a:e5:90:39:fc:8f:
be:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E1:DB:AE:7F:80:2B:C7:F1:ED:FD:72:35:25:7C:E4:CF:A9:C5:C4
X509v3 Authority Key Identifier:
keyid:73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:fb:e8:e0:64:cc:a9:14:3d:80:12:4a:af:6b:74:d5:18:27:
b3:22:b8:27:a8:a2:ee:95:e9:07:c1:7d:14:bf:0b:42:81:8d:
44:72:c1:21:f8:6f:49:a6:29:bc:92:78:6e:13:74:44:0d:8f:
5d:19:1e:a8:4c:e2:9f:b4:f5:12:66:4d:7a:88:fa:aa:83:21:
6e:f6:a9:46:25:05:eb:16:86:d5:16:0a:ba:ca:a7:67:c0:17:
68:0d:1d:b5:c4:32:c0:bb:04:ae:e4:6e:87:ed:63:67:82:10:
4a:ce:29:25:74:b7:36:9e:da:05:a8:59:e2:a2:fe:17:33:bb:
f6:a4:73:9b:27:fc:18:55:65:d3:08:5d:07:08:5d:e8:e5:93:
c1:b2:7e:23:b8:74:17:c6:47:1e:ad:63:da:67:37:00:44:cd:
4f:e7:2c:20:d1:22:92:62:14:cd:4b:a3:08:c9:ac:1b:28:37:
f7:cd:59:94:1f:6e:79:82:5a:cf:78:12:70:7b:b4:98:d2:4f:
4a:59:b8:65:fb:5a:73:93:da:ed:2b:6a:d3:cd:e2:b7:73:71:
81:b4:cb:b3:97:82:01:d6:7a:99:0e:07:9b:70:b0:f5:cd:d7:
98:d8:a7:a1:1e:48:65:1f:a0:db:39:ea:92:ba:84:d7:98:9a:
e5:53:79:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:13:46 2026 by rpki-client