Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
File: czsHKLegVDWEws0LSLdHjEGU7wo.mft (raw, json)
Hash identifier: 97A+DD6JY6vLMnzBP3WPthlPEPVHevtdw6ottKS8HJU=
Subject key identifier: 9D:FD:5D:51:18:88:49:EB:0A:96:FE:D5:8B:26:D8:0C:58:5F:67:F7
Authority key identifier: 73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
Certificate issuer: /CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Certificate serial: 019FAA19B0975220504D2F834F501A876B57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
Manifest number: 0B0B
Signing time: Tue 28 Jul 2026 19:00:38 +0000
Manifest this update: Tue 28 Jul 2026 19:00:38 +0000
Manifest next update: Wed 29 Jul 2026 19:00:38 +0000
Files and hashes: 1: Oce8w_FStQrxz5-sGyZ5GI_yylQ.roa (hash: /gUG2XD9ZyXjCehDc7TUgIzStA7kApp9jArOXsYwwL4=)
2: ZQWSBrSbVBwfkGrwKFFXvU4ra7w.roa (hash: r+NK3YQEVsT0+KvKCit8WLyB+4wd+LAbIvtambZpbro=)
3: czsHKLegVDWEws0LSLdHjEGU7wo.crl (hash: nInRQWrVv6Q0FywiYWP7EDa7nCzwu/GEyq3xW6H8L2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:b0:97:52:20:50:4d:2f:83:4f:50:1a:87:6b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Validity
Not Before: Jul 28 19:00:38 2026 GMT
Not After : Jul 29 19:00:38 2026 GMT
Subject: CN=9dfd5d51188849eb0a96fed58b26d80c585f67f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fa:09:ba:99:cf:88:9f:57:7a:03:c4:a9:af:
8b:a8:f4:fe:07:50:ec:0f:e4:16:fb:7f:a9:5b:25:
30:fe:ea:2b:8a:b1:68:51:b9:c0:0f:2d:b6:02:84:
05:af:aa:8e:7a:0f:8b:8e:da:77:9a:32:48:f2:7e:
af:6f:35:96:bb:ab:af:a4:42:94:94:29:a8:6b:43:
6f:5a:03:cb:ae:be:11:d7:c7:b1:9c:b6:3b:b6:07:
89:2b:b1:3e:be:70:8b:07:58:96:9d:98:a0:93:74:
76:c8:47:95:21:81:0e:a9:e3:39:e8:7c:74:ae:c8:
7f:8e:c4:76:96:7e:ec:26:30:ad:88:cc:dc:c1:95:
0e:7f:b0:64:57:bc:59:bf:69:48:fe:96:8f:37:46:
93:ae:d8:d8:97:28:b4:d8:59:6c:6c:81:10:cb:37:
0b:80:7a:ef:40:95:57:be:f5:bd:ea:68:21:57:44:
60:40:51:e6:c8:9a:92:e1:89:29:8b:95:7a:1d:ac:
2d:d4:25:f1:7a:62:4e:0f:49:99:ce:dd:12:9c:be:
75:fe:b4:1d:57:45:b7:67:04:ec:13:a0:ab:de:f1:
c6:bb:bd:69:18:b3:6d:79:86:37:ec:00:be:f8:19:
9b:57:c7:85:48:3f:ae:ad:f9:1d:e6:fc:f0:34:6f:
7b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FD:5D:51:18:88:49:EB:0A:96:FE:D5:8B:26:D8:0C:58:5F:67:F7
X509v3 Authority Key Identifier:
keyid:73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:22:ee:88:2c:92:24:55:b1:4f:d8:af:e6:89:d7:dd:2f:8e:
6b:c4:60:4a:73:20:32:5e:5b:67:4e:d5:5c:5a:97:04:51:20:
38:df:18:f9:e7:37:0a:e8:b9:9d:e0:ce:c3:3f:4d:cd:7e:61:
fb:56:08:c6:83:a5:ca:96:68:77:82:10:58:a1:83:19:1c:78:
f8:a1:ba:2e:d5:4d:11:55:9e:99:5b:99:74:00:45:e2:4b:14:
70:59:1f:17:2c:8f:a1:1e:3b:05:08:5f:98:49:63:99:7d:b1:
5c:5d:4a:c9:d2:47:c7:c3:ea:9c:2a:10:05:3d:55:dc:5a:a6:
f7:17:71:50:4d:30:7d:9e:33:61:d4:bd:72:ae:8c:3b:9f:75:
4b:38:69:83:38:5e:37:ad:b5:41:62:cd:0c:29:0e:0a:0c:ed:
40:83:2a:a4:31:8e:5d:67:a0:50:1b:a5:6d:7e:ce:f6:51:b1:
81:7c:bb:29:c1:54:6c:29:d9:29:e0:59:b1:83:19:90:b1:c8:
bf:05:c6:8e:df:2d:59:97:ef:51:df:16:ab:9e:b9:36:85:6c:
03:92:03:a0:c9:71:67:82:6d:a3:cc:0f:87:19:10:8b:97:03:
14:88:ee:74:73:b2:34:9c:c0:b9:35:36:9e:b7:d4:da:24:8c:
25:54:a9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:18:33 2026 by rpki-client