Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
File: CzHLUw_lL8wCnmSX53ggA5jCnzw.mft (raw, json)
Hash identifier: E30eDDS9McUylDJtvIi74MCyferjbVmxKSuAEFUqSJg=
Subject key identifier: 44:07:43:9D:5C:FF:3C:6F:3F:3A:94:BC:35:FA:A1:E0:97:A4:85:FB
Authority key identifier: 0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
Certificate issuer: /CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Certificate serial: 01A08B9FAF77699862F031B0FD51B220635A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 14:01:33 +0000
Manifest this update: Thu 10 Sep 2026 14:01:33 +0000
Manifest next update: Fri 11 Sep 2026 14:01:33 +0000
Files and hashes: 1: CzHLUw_lL8wCnmSX53ggA5jCnzw.crl (hash: PA0ZM9tMBJFzfQ4dmapL2e6p0za1xkZca/pQzuhzkag=)
2: F7SCLIzy92KJ-NREaaVjODfHqik.roa (hash: BwWuIIlFuPQUtjh0Ydgc0I6ELzPNPwQINU9/s1qI1yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:af:77:69:98:62:f0:31:b0:fd:51:b2:20:63:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Validity
Not Before: Sep 10 14:01:33 2026 GMT
Not After : Sep 11 14:01:33 2026 GMT
Subject: CN=4407439d5cff3c6f3f3a94bc35faa1e097a485fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:30:db:c9:dd:d5:92:b5:d4:41:94:6d:d1:
a0:f2:7e:83:0d:96:46:62:72:c7:99:7f:8f:89:d7:
e7:14:03:5d:c0:8a:ba:3e:4a:3c:36:bf:75:c0:8d:
bb:c0:c2:00:74:f4:7d:68:0f:64:8a:2e:bb:63:1b:
65:1d:ec:03:0d:8e:dc:e6:d7:8c:1e:24:0b:10:72:
c1:ea:f5:dd:89:99:18:69:14:0e:bb:5f:61:74:20:
69:fa:36:8e:05:fc:3b:40:e8:64:7d:82:05:39:2f:
35:e6:b3:7d:25:d3:10:83:77:c0:d3:7b:13:9d:93:
ad:a3:7d:d6:b1:18:5e:85:ec:f6:53:ba:a5:b8:06:
ea:54:bd:65:85:4b:4a:d6:9d:8f:d5:c2:5b:fe:3a:
20:f6:2d:46:1b:8f:3f:70:0f:87:9e:f1:d7:1d:34:
0c:6f:38:34:5b:e5:09:07:ba:85:c1:d3:99:8b:f0:
19:5b:51:7e:12:f7:7f:38:01:b0:4d:56:a2:e2:6c:
f8:96:41:dc:42:58:68:52:7c:54:d2:ff:0d:18:c7:
a3:45:5c:d4:a0:14:e0:4e:4a:df:af:58:4b:76:78:
b9:2b:f9:fb:0c:8e:75:7c:2b:d5:9e:4e:95:56:65:
c0:85:53:ad:e2:34:00:8b:58:52:0c:06:1b:54:80:
f1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:07:43:9D:5C:FF:3C:6F:3F:3A:94:BC:35:FA:A1:E0:97:A4:85:FB
X509v3 Authority Key Identifier:
keyid:0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:55:d5:08:bb:a6:1f:04:4e:14:e6:55:5c:e8:00:58:b1:52:
a7:80:05:c9:ff:20:68:e2:6e:14:22:57:14:eb:e7:4e:17:0c:
87:50:78:1b:73:d0:31:2e:34:7d:94:c5:09:bd:7f:f8:01:ff:
12:ff:dd:fd:83:3f:a0:a7:54:37:08:2d:ab:4c:99:e6:6c:16:
e0:dd:b4:69:37:24:35:81:7b:27:1e:94:e2:c6:67:ed:e0:9c:
dc:d4:d0:56:68:bd:0d:2e:83:30:31:8f:eb:30:e3:3f:f4:e3:
05:49:69:5e:57:44:7f:95:8c:4c:dc:5e:de:79:19:cd:a7:e5:
71:bf:2e:53:3b:a2:11:16:38:e0:83:33:cc:ed:f2:d1:83:57:
6d:96:21:2c:db:a5:8a:85:53:8e:b7:9d:4f:a5:ac:85:3d:a6:
3d:b8:8a:2f:ca:84:75:f5:5e:93:f3:99:2b:8c:91:31:bb:45:
94:18:56:6e:ad:fc:a2:5e:46:c3:5c:6d:e2:51:33:4f:64:49:
5b:5a:52:57:04:17:8d:1c:e8:83:a5:7d:3a:25:93:0c:d8:79:
ec:de:bf:13:82:54:72:99:64:f1:f2:19:b6:ad:9b:a8:06:19:
ba:98:e2:55:d4:a4:fe:2f:89:21:a4:2f:10:e9:ca:02:8f:de:
ab:35:a9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:03:23 2026 by rpki-client