Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
File: CzAFeBftL9lZWEYyD9uBTJ_EShM.mft (raw, json)
Hash identifier: VJa/4Arf82Q/TMlf0Fxvk91ji2qNdN985ksP2O99Ck0=
Subject key identifier: 44:5B:17:AB:4E:A7:AB:83:B9:C1:5C:50:3B:83:18:C4:E8:4A:FA:C2
Authority key identifier: 0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
Certificate issuer: /CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Certificate serial: 019FACAD29CC3D090D4DACB4FBB6E02700BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
Manifest number: 0373
Signing time: Wed 29 Jul 2026 07:00:57 +0000
Manifest this update: Wed 29 Jul 2026 07:00:57 +0000
Manifest next update: Thu 30 Jul 2026 07:00:57 +0000
Files and hashes: 1: CzAFeBftL9lZWEYyD9uBTJ_EShM.crl (hash: ty7pTB9wvSdZOwoIaeZWiRtjtUD4TNesqXF7ON7ZYc8=)
2: lEbJm5syICAkDzBdnQFTwrUOmo0.roa (hash: vOTfqhJ4GKJTkXberBptf2018gCEaSZ0ldd8I65tSrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:29:cc:3d:09:0d:4d:ac:b4:fb:b6:e0:27:00:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Validity
Not Before: Jul 29 07:00:57 2026 GMT
Not After : Jul 30 07:00:57 2026 GMT
Subject: CN=445b17ab4ea7ab83b9c15c503b8318c4e84afac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:71:c0:06:37:75:d1:2d:b9:29:3a:38:8e:cc:
fc:5d:f9:55:12:e9:2d:a4:af:88:cd:97:7c:03:ba:
21:22:54:dd:19:bb:5b:1c:f6:8c:3e:a9:3a:67:18:
35:94:83:d3:dd:60:38:b7:66:ba:73:ea:1c:a7:63:
c1:86:03:29:ff:ca:50:b0:99:6f:0e:dd:fd:b8:4f:
2b:8b:03:8b:85:58:8d:0b:a2:24:94:6b:6e:31:22:
5a:c7:a6:e5:11:9e:30:7d:6a:5b:b0:84:88:fc:f1:
09:53:3a:f8:38:4c:e8:c3:71:36:a2:9e:25:00:bb:
23:63:4b:6f:28:c4:77:9c:72:f3:4f:e3:fb:8e:11:
35:63:fd:dc:5d:14:49:87:07:0b:30:64:b3:fb:b2:
63:f6:3d:37:ce:33:1d:14:4d:98:44:ed:69:57:2a:
bb:00:af:a9:36:d8:a3:2d:d1:df:de:3e:fb:6e:4b:
e3:ae:b5:b3:ef:33:cb:3a:85:d2:da:61:c0:e2:5c:
59:d8:11:16:67:b3:ea:26:22:8d:35:b2:9b:bb:4a:
4e:28:88:87:33:ef:f0:81:de:08:ab:d8:b0:95:93:
b2:7a:c0:dc:a1:5a:bc:82:72:73:e4:59:bd:01:84:
c2:d9:3a:b4:1e:31:e4:f5:86:90:86:0c:0e:dc:ba:
b7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5B:17:AB:4E:A7:AB:83:B9:C1:5C:50:3B:83:18:C4:E8:4A:FA:C2
X509v3 Authority Key Identifier:
keyid:0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7e:72:c9:27:26:fe:f1:82:39:3f:fd:bc:73:56:39:c5:86:
a4:63:ca:9b:71:67:78:27:eb:8f:5c:74:4a:b4:2e:f6:90:62:
0c:a3:13:3f:ba:82:69:c6:9a:b7:8e:66:03:c2:ee:c0:d1:82:
18:5f:9a:2a:66:32:1f:02:bb:71:ec:9f:6f:62:ca:d5:ff:84:
36:35:8a:89:f8:70:56:6a:b9:6c:de:63:d8:ad:dd:05:23:79:
a8:60:b0:25:9a:c8:a2:8a:56:9d:04:d8:90:75:91:4b:99:b7:
04:69:44:38:4a:93:36:8c:c5:79:f9:7e:ce:b7:27:23:3e:3e:
a5:96:19:d2:ce:22:cc:62:55:d3:68:55:f0:df:b1:44:d5:6b:
29:63:cb:a3:e1:54:40:c2:92:6d:64:86:8a:3b:d5:64:ca:48:
4a:c6:7f:2e:a2:bb:40:3a:ae:4a:9f:9f:6f:52:d3:16:24:f5:
ff:7f:dd:d4:98:5f:ff:d7:da:be:09:3b:f1:3b:39:d7:14:fd:
29:1d:8f:2e:d4:7e:12:00:fc:62:c1:e9:df:37:ec:9d:03:7c:
84:b8:2b:76:6d:a4:9d:12:a9:97:01:7f:fe:15:01:67:55:04:
59:d6:33:83:2b:e3:c0:52:81:5b:c4:5b:77:a8:80:82:4b:f5:
44:e1:11:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:17:48 2026 by rpki-client