Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
File: CzHLUw_lL8wCnmSX53ggA5jCnzw.mft (raw, json)
Hash identifier: CzYr7nfZ1t1uCPjV1w7VInOd6m/GziXNxZHizsTZBhA=
Subject key identifier: 5E:AC:66:75:6E:EF:74:11:73:9A:9B:E4:7F:5B:58:2A:71:FF:99:99
Authority key identifier: 0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
Certificate issuer: /CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Certificate serial: 019CE2FE149FAF841DA3EAF891D2E491F91B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
Manifest number: 1863
Signing time: Thu 12 Mar 2026 17:00:28 +0000
Manifest this update: Thu 12 Mar 2026 17:00:28 +0000
Manifest next update: Fri 13 Mar 2026 17:00:28 +0000
Files and hashes: 1: CzHLUw_lL8wCnmSX53ggA5jCnzw.crl (hash: CgoetfmQTP3NgyIq2YiXAh7cbBZBBMjtEjCigEaw57k=)
2: F7SCLIzy92KJ-NREaaVjODfHqik.roa (hash: BwWuIIlFuPQUtjh0Ydgc0I6ELzPNPwQINU9/s1qI1yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:fe:14:9f:af:84:1d:a3:ea:f8:91:d2:e4:91:f9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Validity
Not Before: Mar 12 17:00:28 2026 GMT
Not After : Mar 13 17:00:28 2026 GMT
Subject: CN=5eac66756eef7411739a9be47f5b582a71ff9999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:89:37:e2:9c:c8:91:15:ab:54:96:a6:0f:f1:
e9:d3:73:b2:d5:99:cc:7c:b5:ce:b9:c8:97:e9:4c:
e7:57:02:e6:de:c0:60:b4:44:f6:85:e7:bc:2d:b5:
7b:7a:db:33:82:84:48:6a:ee:2f:ab:82:12:4d:82:
46:89:3c:63:0c:5f:58:c8:27:75:ab:14:e9:b2:86:
0a:3a:ae:17:20:8c:72:ad:9c:9e:4b:40:96:73:89:
ee:a7:ea:3f:b9:a3:96:3d:11:e2:7b:eb:a2:d4:e7:
e3:1f:18:c0:b1:66:98:4d:17:ee:90:f3:cc:33:56:
56:3c:a7:96:64:66:5c:cc:4c:ba:bc:73:e0:5f:12:
64:a9:cc:69:4c:53:1e:f5:80:03:08:91:7e:d3:27:
98:aa:71:61:e9:5f:4d:46:45:35:73:06:09:d6:0a:
e4:97:94:4a:ac:6b:b1:9d:5e:a4:8a:4b:94:be:8a:
3f:f7:fd:00:6d:4e:17:59:dd:6e:1c:30:d5:17:61:
1a:c0:44:c9:c0:72:bd:60:d2:36:56:91:45:1d:f4:
01:f7:a3:86:72:1b:12:b5:26:43:ef:fb:bb:fb:6f:
d1:99:3b:e5:e4:32:d0:ec:c7:13:72:9c:39:11:79:
5a:08:20:f3:70:31:8f:54:f9:7f:50:da:c7:b1:f8:
4e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AC:66:75:6E:EF:74:11:73:9A:9B:E4:7F:5B:58:2A:71:FF:99:99
X509v3 Authority Key Identifier:
keyid:0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:27:b3:24:6e:92:49:e9:19:5e:d0:2d:1f:36:ab:97:ef:b1:
ee:6c:5b:6d:d4:95:e0:5b:6d:e7:1b:60:8c:d7:18:41:49:3a:
0a:ae:e9:eb:5b:41:e5:35:0c:f8:28:92:d6:f4:86:45:15:25:
e2:2c:08:73:4e:8f:8b:d4:3b:7f:a9:03:9e:df:45:b4:9f:d2:
f8:a9:9a:9f:ce:98:91:61:ab:9e:52:d8:bb:0f:b7:9a:da:36:
49:b2:2f:c8:b9:e2:be:08:f0:5c:ec:7d:dd:d6:c5:27:37:25:
59:6d:4a:d7:76:b1:d9:f4:7f:5f:e4:f8:69:a8:ee:24:83:98:
26:ab:fc:a5:d5:94:fa:63:1d:66:bc:1d:4d:57:60:18:57:38:
e5:33:fe:5b:b8:5d:82:2e:ea:ea:ef:23:98:d2:42:6b:7d:df:
9a:2e:c5:50:33:ae:42:64:1f:00:54:95:30:db:91:46:2a:68:
dc:f4:c8:02:a5:45:5b:86:9d:8d:0c:1a:d3:57:a2:cf:6a:00:
0b:ef:11:a8:1a:86:0f:07:5f:b0:44:49:2a:29:f4:28:13:5a:
c0:24:8f:7b:bc:50:b9:ef:8e:6b:26:c9:e5:69:e5:31:4f:5c:
9c:14:3b:f7:9f:16:55:de:f2:ab:4f:1f:84:25:7a:7a:12:3e:
e8:31:2a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 23:13:37 2026 by rpki-client