Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
File: CzHLUw_lL8wCnmSX53ggA5jCnzw.mft (raw, json)
Hash identifier: ab96JnboGF0+UY1ZCKjm86pCWhA7gBlWufH5pvJ6VEo=
Subject key identifier: 48:3F:6E:BC:7A:80:5A:A5:54:C0:7E:40:0E:E9:04:20:3B:96:24:BB
Authority key identifier: 0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
Certificate issuer: /CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Certificate serial: 019DCCAB019AFB663FEE1ADD593707927CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
Manifest number: 18DC
Signing time: Mon 27 Apr 2026 02:00:52 +0000
Manifest this update: Mon 27 Apr 2026 02:00:52 +0000
Manifest next update: Tue 28 Apr 2026 02:00:52 +0000
Files and hashes: 1: CzHLUw_lL8wCnmSX53ggA5jCnzw.crl (hash: nXb2gWXSEiwQ0E/0C2gmiR+9SJPDBYXxOlpwwddKMrQ=)
2: F7SCLIzy92KJ-NREaaVjODfHqik.roa (hash: BwWuIIlFuPQUtjh0Ydgc0I6ELzPNPwQINU9/s1qI1yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:ab:01:9a:fb:66:3f:ee:1a:dd:59:37:07:92:7c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Validity
Not Before: Apr 27 02:00:52 2026 GMT
Not After : Apr 28 02:00:52 2026 GMT
Subject: CN=483f6ebc7a805aa554c07e400ee904203b9624bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:41:59:02:3f:d7:18:9a:b1:48:88:0a:f1:86:
02:0a:55:b7:e7:cd:ae:0d:ce:b7:88:78:d4:40:6c:
05:46:db:5e:80:91:80:af:6c:c3:ae:8f:ed:31:2c:
05:63:71:86:c7:43:17:0e:83:ba:a1:52:7d:90:70:
58:d9:bf:06:3b:f6:2b:e1:21:62:b5:cd:d0:87:02:
1d:e7:6a:a3:77:a0:90:a7:6b:66:2a:6d:5b:b5:a7:
ed:5c:a6:f8:7d:0b:bf:c0:7f:aa:8f:f7:a6:da:6c:
a1:e4:8c:d8:1a:04:7b:2a:b5:fc:48:bd:c6:c0:ae:
1d:19:ea:19:22:ad:dc:23:2e:c7:f2:d4:29:4a:76:
41:a7:48:52:55:0f:f7:6d:64:e4:23:80:4e:bd:28:
25:68:93:87:d9:8f:41:34:99:fd:81:c4:a6:99:0a:
bb:81:70:b7:f1:ec:5a:57:c7:47:7f:bb:c9:a1:29:
24:97:61:83:92:00:7e:44:7e:c5:ef:60:e5:e7:57:
ea:f4:9e:e6:e3:99:19:ec:b0:03:19:a7:60:a3:ca:
dc:1c:5b:8e:b7:f7:bf:6b:97:45:3a:2e:1c:1d:b6:
7d:81:57:a1:7d:72:40:b4:76:9e:df:e9:cf:33:6b:
01:fe:90:22:7c:fe:39:a2:4f:b7:2a:bf:c2:99:01:
7d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3F:6E:BC:7A:80:5A:A5:54:C0:7E:40:0E:E9:04:20:3B:96:24:BB
X509v3 Authority Key Identifier:
keyid:0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c9:20:1d:cb:a4:36:72:30:3c:a1:ac:93:7a:65:18:b1:8d:
be:85:67:95:68:93:77:e6:40:57:bf:34:84:de:54:f8:46:97:
c1:f1:85:6e:63:c6:f9:85:c3:fb:52:da:e4:1a:97:ef:00:ae:
a6:52:8c:7a:7f:09:83:59:e1:5b:0c:9f:fb:c7:4e:33:c9:9e:
35:65:b9:e2:a3:31:e3:18:ca:1e:0e:0d:19:20:fb:71:17:af:
e7:3c:72:62:e5:28:27:dc:e7:a0:96:52:e4:f4:27:d2:ab:04:
3d:3f:fd:76:dc:fe:28:d6:32:28:43:47:a8:af:5d:eb:33:97:
03:17:ab:55:ea:c3:f0:75:18:74:a1:c1:d3:71:ea:a3:3e:95:
91:9b:ea:31:4a:e0:37:54:92:65:68:07:1c:57:e7:f1:4d:2e:
bf:a5:39:e7:3c:2a:b9:ee:fb:89:d5:15:c6:05:89:72:8c:6b:
d5:d4:a8:22:52:cc:36:25:bc:47:64:5c:c7:63:60:2b:ea:4c:
1a:41:20:51:19:44:00:97:30:13:ec:7d:e6:8b:31:2f:5a:a1:
37:66:0e:a1:c5:a5:9a:2b:58:38:c2:91:b6:50:da:4e:94:c9:
6a:63:c2:c2:b5:78:05:17:04:7b:1e:0b:fd:e7:5f:92:db:d1:
5d:84:0c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 04:22:42 2026 by rpki-client