Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
File: CzAFeBftL9lZWEYyD9uBTJ_EShM.mft (raw, json)
Hash identifier: 4rBlycd6Xbb4tVnnvYui5mJqigl264jCxjiRfqHMBY8=
Subject key identifier: 2C:BC:F1:A2:49:2F:FC:B1:58:D7:DB:90:DB:EE:E1:9B:78:25:2F:BA
Authority key identifier: 0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
Certificate issuer: /CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Certificate serial: 01A0CA7E3985DFA903D4C02B6F03BDFF4A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
Manifest number: 0407
Signing time: Tue 22 Sep 2026 19:01:04 +0000
Manifest this update: Tue 22 Sep 2026 19:01:04 +0000
Manifest next update: Wed 23 Sep 2026 19:01:04 +0000
Files and hashes: 1: CzAFeBftL9lZWEYyD9uBTJ_EShM.crl (hash: w0LiQJGxMGA7bineDCbsTkTARJ1co7jIAg7iQ/mhG/k=)
2: lEbJm5syICAkDzBdnQFTwrUOmo0.roa (hash: vOTfqhJ4GKJTkXberBptf2018gCEaSZ0ldd8I65tSrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7e:39:85:df:a9:03:d4:c0:2b:6f:03:bd:ff:4a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Validity
Not Before: Sep 22 19:01:04 2026 GMT
Not After : Sep 23 19:01:04 2026 GMT
Subject: CN=2cbcf1a2492ffcb158d7db90dbeee19b78252fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:87:72:69:44:c9:3e:fd:0d:54:c9:e8:5a:
be:a1:2e:ea:cc:43:27:7c:0e:67:4c:96:26:1b:0a:
79:91:a7:81:03:78:e9:de:97:09:d4:16:7e:18:d3:
d6:77:4d:e0:c1:53:5a:70:8b:b3:32:9f:90:ce:47:
56:6a:a4:3f:6e:a4:75:37:b5:4c:bf:98:c1:1d:da:
7c:33:ae:6d:aa:33:ad:06:e3:3c:6f:d8:24:74:b5:
28:9c:8a:2e:40:c1:d4:41:9f:7a:91:4a:4f:06:3e:
b3:b7:41:f2:7f:3f:3b:9a:79:1f:5d:c1:2c:c4:7f:
a2:b9:87:98:0d:f7:db:23:c2:08:f8:43:af:ce:9c:
7a:57:6c:6a:54:a9:ff:b0:8b:61:87:6e:a2:f1:ff:
f3:8e:e9:96:de:3c:0f:31:0d:ed:a5:41:b7:ad:b0:
ff:72:9c:bc:4b:f6:e1:fb:f8:31:b2:49:c2:6f:7b:
73:99:dc:41:9c:09:c1:f3:9c:28:10:21:83:5d:99:
2c:8c:f1:a3:b9:e1:a3:52:50:d7:86:ea:4b:96:f7:
3e:eb:31:b4:b3:a7:c0:ee:83:30:5a:7d:19:c5:c3:
0a:c5:ea:94:cc:9e:83:5d:81:43:35:5d:7d:e2:59:
26:30:80:78:64:cc:7f:29:a2:cc:35:f6:c7:f4:05:
53:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BC:F1:A2:49:2F:FC:B1:58:D7:DB:90:DB:EE:E1:9B:78:25:2F:BA
X509v3 Authority Key Identifier:
keyid:0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:cd:3e:0d:d5:32:e5:1d:35:f4:69:56:f4:53:3f:b9:59:dd:
26:cb:04:b1:53:85:84:9a:49:61:00:59:a3:f8:f7:cb:cf:ab:
95:5c:ca:28:f4:a5:2d:e5:b7:da:dd:95:a6:44:ab:2c:24:ac:
ff:f3:91:89:6d:dc:8c:9b:63:07:0d:e6:10:2a:de:2d:32:60:
d8:4e:1e:81:d3:ac:21:3e:0d:58:97:8a:86:c7:42:96:b3:32:
a8:7c:99:cd:bd:ed:6c:06:fd:5b:fe:83:4b:5b:b5:fc:c3:81:
6b:3f:2e:64:68:b2:2b:58:f4:5b:1a:41:18:df:f2:6b:83:b2:
c8:55:0f:a8:e0:f8:3a:12:b3:28:5d:cf:99:3a:e4:34:3b:2d:
c5:15:a4:36:5a:d0:f3:7d:26:1a:c8:d1:79:56:63:a9:53:9f:
0c:ca:06:db:b8:18:dd:62:46:3f:87:73:3a:99:7c:7a:29:8f:
33:6b:02:a3:79:71:bb:7c:3c:fc:03:c4:22:d6:67:3e:0b:b8:
e5:fa:41:98:40:16:0b:2a:0b:4c:82:e6:1d:8e:6e:8c:60:dd:
9b:d6:e2:80:30:27:83:8f:7d:b7:46:90:a4:b5:34:25:13:89:
df:71:f6:e9:97:6f:61:16:d0:eb:1a:fa:4f:4c:71:0b:79:69:
34:7d:48:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:59:48 2026 by rpki-client