Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
File: CzEv6XRkvA5qHv-i8ciW96igJng.mft (raw, json)
Hash identifier: 1eHnwMTynoLy5euIxKo07qDXWXPequMnVPHjf/7l/qo=
Subject key identifier: 0A:EE:5F:EB:98:07:D1:E6:D7:6B:E4:78:58:4A:B4:7C:90:F4:36:F8
Authority key identifier: 0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
Certificate issuer: /CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Certificate serial: 019CABD94103626897AC6B098B4807C62E99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
Manifest number: 16D4
Signing time: Mon 02 Mar 2026 00:01:07 +0000
Manifest this update: Mon 02 Mar 2026 00:01:07 +0000
Manifest next update: Tue 03 Mar 2026 00:01:07 +0000
Files and hashes: 1: CzEv6XRkvA5qHv-i8ciW96igJng.crl (hash: oi3BgqB/UpNjLlEc1jL4/9Lj1dOMWjG+0OauUeqdAok=)
2: O4FogktllEObQ3m4gcGbxOTXFjc.roa (hash: LSEt+DfGeh7UZL23uB93PJ34d8wXBxGJPcCGrkXjZy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:41:03:62:68:97:ac:6b:09:8b:48:07:c6:2e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Validity
Not Before: Mar 2 00:01:07 2026 GMT
Not After : Mar 3 00:01:07 2026 GMT
Subject: CN=0aee5feb9807d1e6d76be478584ab47c90f436f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:16:b3:79:49:c1:37:8d:54:dd:2d:13:e1:35:
7e:e8:8a:28:5f:8b:f5:20:14:de:09:35:7a:cf:c8:
dd:59:58:21:0d:bc:3c:33:ad:9e:db:b6:1e:2f:bd:
f9:97:b5:f7:c5:9c:c6:bf:af:52:0a:de:94:73:5e:
c3:0e:36:cb:63:19:49:23:52:dd:c6:6c:b6:b1:39:
1f:a9:62:97:46:43:eb:58:4b:02:14:2f:7c:21:8d:
5f:20:4b:ca:05:74:f4:57:54:10:f9:35:95:ad:21:
9c:20:e8:fa:5a:b1:b3:22:8a:f4:5b:78:b6:02:0e:
f5:5f:26:4a:da:0a:89:a8:9f:31:91:05:01:fa:7e:
96:be:43:1c:db:86:53:c5:e5:34:c5:7c:c9:95:bf:
a9:85:31:8c:c7:09:55:50:ff:5c:30:29:a4:0b:a9:
aa:3b:9c:3c:31:bc:2a:ff:50:73:ed:1b:66:73:61:
00:a8:c7:68:3e:c2:be:6f:82:1a:d3:b9:60:7b:44:
11:28:52:10:51:7e:75:c8:76:d5:f3:b9:af:f4:76:
3a:8b:76:28:b1:0e:67:77:4c:8e:43:ed:c1:41:be:
6f:7c:d0:9e:33:c1:d4:7f:4e:af:d1:76:d6:df:bd:
6c:fc:0a:58:8b:63:02:44:4b:c1:1c:27:ea:e5:61:
ee:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EE:5F:EB:98:07:D1:E6:D7:6B:E4:78:58:4A:B4:7C:90:F4:36:F8
X509v3 Authority Key Identifier:
keyid:0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c3:b3:e0:f0:98:eb:c1:81:8e:02:71:d7:dd:ed:f2:9e:26:
f3:30:bf:21:48:d5:80:d9:27:60:82:47:d3:35:88:56:0e:c5:
2a:08:42:cc:6f:4a:27:f7:c4:80:37:4c:58:d3:84:d4:15:40:
74:ad:f7:77:51:76:f9:5b:3b:ea:36:8e:7c:4b:18:61:21:3e:
05:ab:44:8e:99:c0:34:90:b1:cf:f2:d2:10:96:da:f4:d4:28:
0d:1e:3e:b5:f5:02:8b:42:fa:e6:d7:b9:70:36:76:fb:04:65:
90:d5:31:87:61:f6:ca:0a:33:53:1a:df:46:1a:36:d7:82:83:
4f:11:59:59:60:0e:74:d2:6f:ed:e7:63:a6:51:a3:db:7b:ea:
00:3e:c3:e4:22:c2:60:d7:a8:4d:fe:3a:44:9a:a0:61:79:46:
f1:a4:b7:54:5d:60:ce:cb:f9:30:4d:df:36:c6:dd:84:a6:46:
74:66:6c:19:2c:0d:9f:83:27:bf:dc:e7:f6:41:0a:e9:ad:21:
68:e6:1b:f1:97:cc:ed:67:84:7c:92:48:1c:56:37:ea:ca:ac:
3b:e6:6a:a0:1d:de:78:66:b6:06:98:54:64:eb:43:e6:3d:1b:
53:5b:40:d0:dc:f1:9d:14:16:5c:dc:59:50:65:9e:40:21:49:
31:8b:67:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:16:10 2026 by rpki-client