Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
File: CzEv6XRkvA5qHv-i8ciW96igJng.mft (raw, json)
Hash identifier: ojaSdwQ+D2Ad3b0Vw2zu+FSjnJ1wN0tjoOQFbzbCxdY=
Subject key identifier: 7D:34:DB:84:45:51:19:F3:DE:71:C6:B3:BF:BA:E0:84:19:B9:39:B5
Authority key identifier: 0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
Certificate issuer: /CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Certificate serial: 019FAC76252878C75E40A1CD756D97069711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
Manifest number: 1862
Signing time: Wed 29 Jul 2026 06:00:51 +0000
Manifest this update: Wed 29 Jul 2026 06:00:51 +0000
Manifest next update: Thu 30 Jul 2026 06:00:51 +0000
Files and hashes: 1: CzEv6XRkvA5qHv-i8ciW96igJng.crl (hash: 4KxROdl5KZ2r1RQz5G9iBu3Kvy+i7CJgJGzW040u3vY=)
2: O4FogktllEObQ3m4gcGbxOTXFjc.roa (hash: LSEt+DfGeh7UZL23uB93PJ34d8wXBxGJPcCGrkXjZy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:25:28:78:c7:5e:40:a1:cd:75:6d:97:06:97:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Validity
Not Before: Jul 29 06:00:51 2026 GMT
Not After : Jul 30 06:00:51 2026 GMT
Subject: CN=7d34db84455119f3de71c6b3bfbae08419b939b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9c:4b:3e:85:dd:d8:6c:95:30:30:3e:86:db:
82:10:b6:3b:5e:73:8c:00:19:88:0f:f9:9a:6d:50:
e8:42:f4:0f:0a:bc:e3:97:af:a2:0b:1d:1e:12:61:
0a:5d:26:ef:f4:62:b6:23:68:c9:9c:5f:e7:c3:22:
ba:63:fe:56:7c:1e:53:64:d0:63:06:eb:ff:a1:49:
ff:3a:9e:48:54:96:06:b9:a1:c8:e1:87:0a:8f:c4:
00:23:fb:50:17:3d:6e:a4:fc:2b:ca:8c:e8:24:92:
c7:a3:08:9f:2c:01:2a:26:4c:9c:cd:94:f2:3b:2c:
e6:78:6b:ed:2c:77:27:39:b4:0d:82:61:b1:ff:0d:
b7:1c:51:70:eb:4b:a9:1e:9e:f9:13:6a:4d:17:69:
ca:80:3e:2b:dd:35:90:75:41:1a:67:31:9b:13:a4:
b6:94:98:89:b6:be:89:56:ea:25:f3:71:e1:ce:2c:
82:d8:e5:2b:1b:61:f5:44:6a:dd:a1:5a:37:ed:00:
0f:2d:29:fa:b8:d4:e0:ee:d1:6e:df:39:79:ad:f2:
00:0d:ad:f1:79:d0:1e:06:fd:e2:84:3f:67:6a:b4:
a2:c1:c0:f3:09:5a:1f:a3:57:71:db:a5:42:0b:99:
85:ce:44:c7:82:e1:dc:99:e6:d9:18:1e:bc:aa:33:
93:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:34:DB:84:45:51:19:F3:DE:71:C6:B3:BF:BA:E0:84:19:B9:39:B5
X509v3 Authority Key Identifier:
keyid:0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6d:2d:ff:fa:35:e1:d8:9d:1d:68:51:8e:ca:a9:7f:4e:cb:
f4:ef:aa:42:92:38:6e:08:65:26:4b:ef:35:90:da:77:36:49:
3d:73:1f:ee:17:a6:43:23:f8:ff:a3:82:b7:04:71:d5:e9:f5:
e1:ab:c2:ad:b8:16:04:ee:17:5d:4f:2c:68:70:4c:55:f3:41:
54:26:5b:55:60:dc:07:d6:97:c3:ff:4c:37:35:c9:9e:b5:4d:
c9:2e:81:a0:01:17:ab:dd:d3:9e:d1:98:30:14:93:c9:0b:19:
3d:88:3a:24:cc:19:e6:e1:5c:7d:3e:6a:75:65:5e:27:44:8b:
12:a3:7e:3b:78:70:2a:ce:53:b5:5f:c1:eb:8e:0b:d1:6d:a3:
dc:d0:40:f3:e7:7e:c9:e7:18:99:94:ad:5f:e1:6f:63:2a:5e:
ba:92:d6:57:36:3d:47:a1:32:7b:f9:db:3f:62:81:06:52:e8:
f2:69:d3:5e:8c:32:f9:43:4c:0d:b3:a7:58:0e:d4:94:74:9c:
e7:78:f0:b1:36:e0:72:fb:5a:21:0e:f7:c0:2a:c6:70:c9:aa:
71:82:e2:4a:8f:f3:19:2b:39:45:64:10:12:23:7e:9c:84:1a:
5e:d9:cb:3d:a2:1e:09:58:f6:2e:21:cc:71:2e:c5:9b:46:8b:
46:2f:af:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:03:29 2026 by rpki-client