Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
File: CZ-qshYRGNsbd8GnTszLc-doHDY.mft (raw, json)
Hash identifier: +du3YnOEobWeW/zH3z+QZWIP0Ve9DWOjWfklxE07Cog=
Subject key identifier: 9E:B5:62:BC:0B:70:85:59:09:D9:C6:7E:E9:43:0A:8F:59:4C:AF:23
Authority key identifier: 09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36
Certificate issuer: /CN=099faab2161118db1b77c1a74ecccb73e7681c36
Certificate serial: 01A06D94CD154857D2FA7534E4CAFFCD3C04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
Manifest number: 045B
Signing time: Fri 04 Sep 2026 18:01:03 +0000
Manifest this update: Fri 04 Sep 2026 18:01:03 +0000
Manifest next update: Sat 05 Sep 2026 18:01:03 +0000
Files and hashes: 1: B4ECW0jtt5KyrtkmlUhbFQBxuus.roa (hash: Z8JjmJ/Yv+fCZ4euDC+I0rty80LYQ117ydvucBAt8Uw=)
2: CZ-qshYRGNsbd8GnTszLc-doHDY.crl (hash: aPacwJrJyyUa4h98u1dqCpoHboiS9443/X1oJ2KN8ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:94:cd:15:48:57:d2:fa:75:34:e4:ca:ff:cd:3c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099faab2161118db1b77c1a74ecccb73e7681c36
Validity
Not Before: Sep 4 18:01:03 2026 GMT
Not After : Sep 5 18:01:03 2026 GMT
Subject: CN=9eb562bc0b70855909d9c67ee9430a8f594caf23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3c:54:4c:24:3b:f1:dc:ee:91:e3:52:90:f2:
e1:58:a1:9c:33:f4:e1:24:e2:05:b7:70:9e:8b:3e:
90:6b:0d:16:d0:b3:56:2b:a7:41:69:f8:a9:a1:4f:
04:c7:b6:61:11:1a:15:32:fd:f9:81:25:2f:8a:1a:
60:01:f6:24:b8:87:70:ee:7b:09:8a:2e:81:21:b2:
60:fe:a5:9e:2c:2d:31:2c:7f:ce:57:e8:e4:8d:a3:
03:82:4a:d4:1d:98:07:37:f4:d5:11:41:28:04:5d:
a0:f7:0e:2f:34:7c:7f:37:f2:bc:5c:4e:5c:74:78:
bc:69:89:98:1f:09:69:cd:72:6d:33:d1:0b:fc:e7:
01:08:a7:e7:8c:3e:b6:94:b1:0b:33:51:87:02:b2:
5f:a9:82:ee:27:fe:b0:cd:f3:40:68:8b:32:7c:f5:
62:8d:4f:ed:1b:65:29:94:9e:c7:27:07:f6:b7:6b:
93:a2:de:af:69:f3:45:24:c9:cf:65:3d:a9:d5:03:
36:bd:c4:1a:0e:f5:58:85:a7:26:52:ce:a6:38:b1:
6e:41:ad:12:d8:49:fd:ae:02:60:4d:0e:58:6b:4e:
a1:1c:37:9b:48:2b:fd:e2:ef:3b:9e:89:97:e3:3c:
cb:68:7d:e7:56:5b:32:7d:77:5d:34:d8:ae:f1:b4:
6e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B5:62:BC:0B:70:85:59:09:D9:C6:7E:E9:43:0A:8F:59:4C:AF:23
X509v3 Authority Key Identifier:
keyid:09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:33:e0:0b:f9:e4:d4:73:46:8e:9e:25:e4:63:ef:3b:2a:ac:
7c:d4:74:a5:fb:5f:89:5d:96:34:e8:b0:46:09:90:09:37:06:
42:f7:84:f9:87:6f:de:ed:50:91:56:8a:85:bc:37:d2:15:46:
99:59:fe:cf:2c:38:f2:c8:89:f6:22:f9:d3:62:f9:af:74:cf:
78:74:a0:1f:7f:83:5a:97:03:2f:da:94:ea:60:a9:1a:f8:fb:
3a:28:e9:66:0f:08:3e:30:66:78:0e:7f:a0:da:b6:fc:86:e0:
64:88:42:70:91:96:13:1f:4a:53:00:a6:e8:ce:2d:e7:9e:f0:
17:59:c8:42:f6:d6:11:4e:59:ba:18:ff:e8:e5:1f:36:1c:a7:
bf:7a:ea:e3:3c:5b:2d:fc:66:9c:8e:36:42:54:a0:0e:e0:0d:
25:e7:0c:f3:17:25:f8:2a:e0:75:85:64:20:76:65:b1:29:a6:
64:a2:11:7d:f9:70:c5:d5:82:07:8a:a4:52:db:7c:c1:ad:36:
90:65:21:c9:96:d2:8a:7e:30:6e:3c:e4:a0:5f:88:c9:ce:ab:
d0:8e:0c:de:32:e9:e4:61:e2:e1:83:22:46:95:d5:cf:cf:ec:
93:c3:9b:ea:0c:ce:d6:ae:1d:69:4b:56:8a:2c:55:b5:2e:71:
d8:c9:92:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:18:11 2026 by rpki-client