Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
File: CZ-qshYRGNsbd8GnTszLc-doHDY.mft (raw, json)
Hash identifier: NQtIRfTFcEhYPoUYF3ERBVXqu02f1Imip8pkecJS4NQ=
Subject key identifier: EC:05:DE:48:99:75:E8:CB:CF:36:B2:74:0B:50:D6:18:59:D9:90:14
Authority key identifier: 09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36
Certificate issuer: /CN=099faab2161118db1b77c1a74ecccb73e7681c36
Certificate serial: 01A173CB80A5AF5DB2FDF756E31ED0BD70C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
Manifest number: 04E3
Signing time: Sun 25 Oct 2026 16:01:18 +0000
Manifest this update: Sun 25 Oct 2026 16:01:18 +0000
Manifest next update: Mon 26 Oct 2026 16:01:18 +0000
Files and hashes: 1: CZ-qshYRGNsbd8GnTszLc-doHDY.crl (hash: pfQTA6yl6HK/3jRWltcEU2QM+OHPda2Pj188LLwTK+I=)
2: NRr2UI5e4wiswqTD1lGv01pJ4xk.roa (hash: 4mb2TEhQ6KvVYtVWs2U8Cn19nMjJqwA+tVusB1WoNvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 16:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:cb:80:a5:af:5d:b2:fd:f7:56:e3:1e:d0:bd:70:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099faab2161118db1b77c1a74ecccb73e7681c36
Validity
Not Before: Oct 25 16:01:18 2026 GMT
Not After : Oct 26 16:01:18 2026 GMT
Subject: CN=ec05de489975e8cbcf36b2740b50d61859d99014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c0:f9:0c:f5:20:d8:f3:e8:95:f6:ec:0e:c2:
b7:82:fb:0c:08:66:74:32:99:5d:85:40:9e:66:cf:
0f:af:3f:1e:0d:11:36:d0:91:f3:34:31:62:61:aa:
f2:50:cf:89:c3:8b:d8:bd:fd:9b:e8:74:c5:59:55:
3a:72:34:2c:48:3a:c1:bb:6d:94:90:aa:7b:41:42:
6f:69:6a:f7:c3:e7:44:ea:3f:17:88:a5:db:95:3d:
e2:29:4c:99:06:07:a6:98:2c:ad:85:2a:55:99:3b:
a6:c9:e2:cc:44:bc:1a:65:ec:a4:2f:c7:ff:58:cb:
78:49:2c:04:a6:ab:15:99:f9:68:b4:f0:82:1c:4e:
e4:e1:17:e7:10:4c:0b:c3:db:2a:45:c7:45:1c:04:
d3:62:4a:09:a2:b1:e1:c3:51:69:f7:be:26:ff:47:
70:c0:21:6b:ca:dc:c3:5d:6b:aa:d0:9e:e3:5a:38:
1a:7e:93:8f:87:25:49:e3:3d:39:aa:5f:4a:65:bb:
6d:c7:53:27:10:b0:af:b7:90:15:cf:4d:7b:49:7f:
31:15:78:36:b0:d3:19:94:6e:61:43:bf:10:ec:b6:
23:40:e3:00:6e:1d:4b:94:46:e8:63:05:6a:6b:f6:
09:6e:9f:0a:6b:62:d9:9b:65:1a:6d:4d:28:56:9a:
83:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:05:DE:48:99:75:E8:CB:CF:36:B2:74:0B:50:D6:18:59:D9:90:14
X509v3 Authority Key Identifier:
keyid:09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:73:27:43:6a:bf:a8:eb:70:3d:54:f2:a6:b5:6b:88:3b:c4:
66:fd:e7:4b:91:42:7b:d7:77:3c:dc:e1:77:10:3f:79:e7:da:
c7:6a:3d:93:51:6d:05:ae:93:a6:b8:ec:8f:a8:1a:22:21:ec:
93:35:19:a4:84:75:27:71:d5:7d:52:ac:a9:4e:c5:1f:99:98:
dc:42:27:5d:84:3a:a0:33:b8:ec:d4:68:f3:d3:fb:34:c3:c8:
e1:74:0e:1f:87:d1:0e:b4:9b:f7:de:ec:16:19:be:7e:21:ad:
33:04:5a:08:08:9c:4f:99:53:04:f2:b6:85:88:67:2e:0b:13:
7e:61:20:9c:33:fe:98:46:6f:b0:54:bd:d1:97:74:5e:fb:8b:
0e:de:af:e6:dd:be:20:fa:0d:44:9a:2c:38:69:3e:d6:77:d8:
a0:68:af:49:e0:ad:4d:b6:38:b2:17:b4:94:18:a0:7d:63:dc:
25:c1:c4:22:7e:45:5a:37:28:13:cc:14:76:bd:d3:57:4e:48:
37:ad:2f:c2:00:51:2e:5c:d6:c9:16:25:57:30:c8:2d:be:25:
38:a8:0f:8f:6e:bf:ad:d1:af:72:4f:03:5e:48:47:57:2b:2f:
9d:4a:19:cb:59:16:b6:0b:bf:78:f2:c9:9e:81:69:1b:6a:20:
d9:39:d7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:18:31 2026 by rpki-client