Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
File: CzHLUw_lL8wCnmSX53ggA5jCnzw.mft (raw, json)
Hash identifier: USHgWmO53CZXQC392OFihiguYHMVSMwDMt3kiYTnS6A=
Subject key identifier: 2A:A4:10:CA:A6:51:57:87:7E:57:9B:A4:0A:87:94:9C:21:1C:78:7F
Authority key identifier: 0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
Certificate issuer: /CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Certificate serial: 019FA003D1D2DF5752C64B0DBD8A72696AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
Manifest number: 19CE
Signing time: Sun 26 Jul 2026 20:00:32 +0000
Manifest this update: Sun 26 Jul 2026 20:00:32 +0000
Manifest next update: Mon 27 Jul 2026 20:00:32 +0000
Files and hashes: 1: CzHLUw_lL8wCnmSX53ggA5jCnzw.crl (hash: RCcci812Ad8KUggRxaRI2aM2y/jg1iYYyhW8M6dScJc=)
2: F7SCLIzy92KJ-NREaaVjODfHqik.roa (hash: BwWuIIlFuPQUtjh0Ydgc0I6ELzPNPwQINU9/s1qI1yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:03:d1:d2:df:57:52:c6:4b:0d:bd:8a:72:69:6a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Validity
Not Before: Jul 26 20:00:32 2026 GMT
Not After : Jul 27 20:00:32 2026 GMT
Subject: CN=2aa410caa65157877e579ba40a87949c211c787f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:eb:41:31:fa:f4:f5:24:58:70:c4:fd:8c:03:
3d:fc:06:b1:46:3c:ef:72:84:20:d5:27:6d:a9:87:
0c:5f:e0:59:e3:a0:94:4c:2c:d2:e0:87:bc:38:38:
ab:9c:eb:f7:d0:60:4d:9b:df:8b:99:e6:43:97:eb:
3c:6f:53:2c:c6:68:d6:54:12:35:25:d0:2c:82:2b:
86:21:7f:f2:7e:c9:4b:85:e0:52:a7:73:04:4b:87:
69:dd:41:8f:64:fb:de:b0:8a:d7:bd:02:5b:bb:bf:
be:e3:00:e6:e8:56:d6:6d:ac:fb:07:7f:e9:3d:1a:
c3:8f:c5:cf:8c:f8:b4:ab:81:41:c4:08:83:32:94:
99:68:e9:79:4b:1c:6e:97:77:5d:b3:62:f4:72:7e:
08:e4:14:8d:7e:93:20:3c:64:c2:29:b8:03:cd:57:
4a:1e:88:fb:46:9b:76:0c:a3:76:a6:a1:08:e4:78:
c8:c9:1a:98:29:36:92:23:84:df:a4:67:3d:a1:94:
2d:0d:c6:46:08:e5:89:73:fb:83:f9:69:ed:b7:36:
7d:f1:41:82:91:9e:5b:b9:f9:97:ba:14:48:3a:49:
a4:4a:c5:1b:5d:b8:d8:4d:56:f9:f9:39:95:fb:08:
36:a7:f1:c6:87:11:a9:59:c0:b6:8c:ba:eb:fe:87:
6e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A4:10:CA:A6:51:57:87:7E:57:9B:A4:0A:87:94:9C:21:1C:78:7F
X509v3 Authority Key Identifier:
keyid:0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:7a:2a:7a:86:a8:d1:7f:2f:27:cb:db:f9:8e:7d:5a:0b:fe:
63:07:c8:22:1e:46:05:d4:0e:8d:1f:85:f1:25:a0:6d:3a:f3:
32:8c:f6:8a:55:59:f4:fe:9a:24:1d:49:b5:b3:8c:b1:28:5d:
2f:80:83:bb:71:25:0c:87:00:6c:23:74:70:a8:af:8e:e1:22:
33:c3:20:61:7c:61:7b:4b:6e:cd:4b:0a:8c:37:1f:8d:54:7b:
a8:41:bb:d8:82:91:ab:99:8a:8d:fe:98:b9:6b:2f:c0:3a:c1:
7a:31:b7:c4:9b:47:25:93:ae:9b:5f:cc:95:d1:25:05:9f:d7:
d3:54:6f:6c:27:72:a8:6a:fa:39:76:6b:1a:77:27:71:f5:63:
b7:7d:e8:d6:28:61:fe:ba:13:88:e7:f9:c8:e5:d6:ec:c3:cb:
22:05:4e:69:42:6a:d3:98:7a:a2:38:ec:69:84:e5:7b:b0:8a:
eb:77:0e:23:23:17:45:d6:7b:02:98:54:35:d1:27:22:a6:fa:
7e:35:31:eb:f0:3a:f2:ec:54:9f:08:21:90:33:7f:8b:8a:5c:
07:32:5d:9e:73:f1:05:ad:d4:09:1d:b5:99:d7:9a:1f:d7:53:
2c:94:09:85:3f:07:dd:d6:29:11:75:c1:54:00:28:d3:a5:ee:
38:08:84:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:03:45 2026 by rpki-client