Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
File: CzAFeBftL9lZWEYyD9uBTJ_EShM.mft (raw, json)
Hash identifier: NOdQiMkKxcCFEqEMFZmj/JToOMfEXG1Tl6FT3AonChY=
Subject key identifier: 13:EA:35:A7:E7:71:66:A5:00:F8:B9:03:B8:56:11:58:0B:19:92:50
Authority key identifier: 0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
Certificate issuer: /CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Certificate serial: 019DA52F7DBA015FB7073C893418D9A71753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
Manifest number: 0266
Signing time: Sun 19 Apr 2026 10:00:46 +0000
Manifest this update: Sun 19 Apr 2026 10:00:46 +0000
Manifest next update: Mon 20 Apr 2026 10:00:46 +0000
Files and hashes: 1: CzAFeBftL9lZWEYyD9uBTJ_EShM.crl (hash: bbmkW6Gvao8rZxtlwYNaA+wmhLblOk/eNa0XuALUJHo=)
2: lEbJm5syICAkDzBdnQFTwrUOmo0.roa (hash: vOTfqhJ4GKJTkXberBptf2018gCEaSZ0ldd8I65tSrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:7d:ba:01:5f:b7:07:3c:89:34:18:d9:a7:17:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Validity
Not Before: Apr 19 10:00:46 2026 GMT
Not After : Apr 20 10:00:46 2026 GMT
Subject: CN=13ea35a7e77166a500f8b903b85611580b199250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a5:10:41:77:18:6c:a7:5a:80:0e:d6:02:c2:
25:21:20:fd:ef:a1:6e:1c:a6:13:4d:88:54:04:6a:
da:fe:d1:55:92:ca:c6:05:71:3d:f6:da:6a:f6:3e:
bc:4b:25:64:61:ea:f1:40:20:69:99:fb:fa:51:9a:
46:67:07:87:9b:2a:45:0d:13:db:76:96:f2:11:9b:
30:d9:86:30:7b:87:b5:b7:6b:fa:4b:2e:0f:3a:ac:
58:bc:c6:24:dd:06:b9:4b:ac:0c:56:2f:78:f1:b2:
6a:85:1c:ea:08:b5:6f:61:0a:87:84:a1:49:78:05:
f5:da:66:31:37:d4:14:48:3f:c0:00:7a:42:cf:f9:
36:8f:06:fe:e6:ee:45:71:ab:67:4a:56:e2:1d:50:
ae:25:bf:e3:28:39:9a:36:b1:ba:22:d1:dc:74:ff:
aa:04:e7:ce:42:8e:3d:57:f1:bc:9a:fb:b6:bc:a7:
7e:29:35:f1:02:81:11:69:26:46:9e:d8:f9:82:dd:
f7:e2:29:32:2d:bf:86:01:bf:71:c2:cb:7e:9f:ed:
c8:8d:56:0f:a3:40:f5:9f:a7:e8:93:db:01:19:55:
ec:c7:25:16:03:85:ac:a4:f6:a1:f4:b4:65:84:f3:
47:8a:1c:e9:5b:ac:54:d3:8b:a5:5f:59:62:7b:42:
01:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EA:35:A7:E7:71:66:A5:00:F8:B9:03:B8:56:11:58:0B:19:92:50
X509v3 Authority Key Identifier:
keyid:0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:31:36:5a:94:32:96:97:57:6c:3f:56:d0:24:dc:28:5d:21:
08:e1:33:10:fd:81:90:a2:6d:2d:5c:11:32:7a:15:f1:46:c5:
34:5d:3d:38:03:6c:51:51:3f:1b:c7:a2:d0:f5:63:5b:44:7c:
8a:a9:a9:24:5b:04:fe:66:23:18:a5:4e:ea:a7:ec:17:9a:8c:
fb:5d:14:4f:72:1d:92:ca:f5:cb:ef:be:22:7a:90:da:2c:29:
31:f9:f5:4b:84:ee:e9:70:7d:e3:e6:c0:0f:c0:26:21:ab:6a:
77:28:f5:cc:c3:81:82:ad:e8:88:ec:cb:06:3e:5b:a5:ab:d7:
8a:fb:63:98:66:2f:ad:52:e4:6f:b0:b2:91:b0:d6:ab:b9:06:
e1:cf:9c:5e:60:43:64:38:c2:02:ac:75:5b:0a:65:0b:ab:04:
6b:a4:96:9c:d7:0a:7c:95:87:97:8d:6c:bc:bd:de:cf:0c:1f:
48:6e:ab:a1:90:f9:56:ee:1d:b7:00:57:79:39:4d:83:aa:68:
89:9e:2c:59:2e:a0:a3:84:9f:c8:56:e5:89:a1:33:8f:ca:66:
84:09:dd:13:09:24:f0:76:0c:3a:54:99:de:a6:1a:40:23:a2:
9a:1d:3b:4a:6f:f8:9a:3b:d2:f3:45:6b:26:8b:bb:a5:14:1e:
44:5f:43:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 17:41:37 2026 by rpki-client