Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
File: CzEv6XRkvA5qHv-i8ciW96igJng.mft (raw, json)
Hash identifier: sAp/kuwtMvQTEocDs1mABSTBTr1dBssADw/wPy6RjrI=
Subject key identifier: 06:1C:11:ED:95:36:70:1F:28:7C:C3:50:AB:5D:B6:81:E6:E6:9D:5B
Authority key identifier: 0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
Certificate issuer: /CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Certificate serial: 019DA30A87F0E8583CD57E1202EBB550FD59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
Manifest number: 1754
Signing time: Sun 19 Apr 2026 00:01:09 +0000
Manifest this update: Sun 19 Apr 2026 00:01:09 +0000
Manifest next update: Mon 20 Apr 2026 00:01:09 +0000
Files and hashes: 1: CzEv6XRkvA5qHv-i8ciW96igJng.crl (hash: d5f9xZZIs2SGlgc7M3JMwTIpPo/1SkxNnHtyZYiy0KI=)
2: O4FogktllEObQ3m4gcGbxOTXFjc.roa (hash: LSEt+DfGeh7UZL23uB93PJ34d8wXBxGJPcCGrkXjZy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:87:f0:e8:58:3c:d5:7e:12:02:eb:b5:50:fd:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Validity
Not Before: Apr 19 00:01:09 2026 GMT
Not After : Apr 20 00:01:09 2026 GMT
Subject: CN=061c11ed9536701f287cc350ab5db681e6e69d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:86:8a:7f:a3:cd:e1:48:5c:54:35:81:88:49:
c1:c0:58:0a:6c:ac:ca:9a:44:67:66:e0:46:09:1d:
d3:d2:b6:53:d6:03:88:89:cb:32:67:a9:89:fe:aa:
e1:fb:ee:8a:4f:41:c3:a3:f3:4b:f2:41:3d:2f:d2:
05:28:4e:7e:70:81:1b:29:20:00:e6:bf:c3:17:32:
28:ad:13:c4:cc:7b:f7:4b:48:2e:aa:1b:35:d6:27:
9a:8c:a5:3b:46:57:0e:ee:8f:89:f5:bd:57:8c:1b:
8e:c0:0a:d5:d8:6e:13:a0:f0:ae:e0:a7:9b:7c:da:
94:61:9a:84:34:ec:11:06:db:03:18:22:71:24:7f:
36:f7:e9:27:42:3c:ba:d3:7e:a5:0d:2a:96:e6:26:
0d:2f:cf:d8:67:da:1c:36:57:48:35:05:49:52:b8:
8a:d2:ba:c4:67:ab:1c:dc:a4:19:ed:11:54:c6:17:
51:a2:ac:fb:89:cc:37:ca:45:95:ab:89:b4:62:5e:
34:ed:2d:c5:95:49:fe:17:8e:4b:36:92:e3:b7:78:
7f:91:9b:49:a9:93:c2:33:30:38:ee:12:63:ec:7c:
98:c9:d6:d6:86:85:0a:56:54:25:22:c5:ae:47:87:
8f:ef:b3:b0:1c:aa:0f:02:01:dd:e1:07:09:57:f3:
59:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1C:11:ED:95:36:70:1F:28:7C:C3:50:AB:5D:B6:81:E6:E6:9D:5B
X509v3 Authority Key Identifier:
keyid:0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8e:0e:d1:7c:44:53:ab:87:d2:a1:01:d2:29:81:57:9f:a2:
33:d5:1d:62:b6:db:92:b0:64:70:e2:4d:a5:f4:c3:d0:ee:ce:
9e:d4:e0:47:f7:4c:23:32:67:00:cf:c9:75:81:d7:f2:67:5d:
5c:b8:21:4e:52:51:a0:ca:b0:82:9d:e3:ee:b4:09:c5:8f:2c:
24:98:6e:1b:64:64:ba:8e:48:97:50:18:9a:6c:2b:47:03:47:
86:6b:5b:43:e2:a5:41:de:83:a4:d6:1c:02:aa:4e:c4:70:7c:
3c:cf:4d:9e:02:8b:ab:62:b3:7a:58:b7:65:4b:bc:f4:e1:db:
1e:47:c8:32:03:c5:4f:90:fd:89:94:d8:5d:ec:d5:5a:3d:02:
4e:53:1a:5a:5d:a0:c7:17:36:b3:75:70:71:8e:27:15:b8:00:
0f:16:e9:c2:96:79:81:5e:73:a2:ad:4d:e9:c7:ab:3d:45:13:
40:57:3d:cf:d4:e9:86:a9:ed:08:df:f5:54:96:94:a4:72:61:
13:b5:97:56:47:f4:1e:2f:07:1a:15:77:fa:98:1c:0a:34:2c:
ec:48:90:a9:b5:d7:3a:a5:02:a1:8c:f1:8f:21:2a:c1:cb:67:
5e:a9:ff:7a:89:08:14:e7:a6:96:a5:18:c5:fe:63:46:90:e6:
92:b9:da:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:52:23 2026 by rpki-client