Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft
File: CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft (raw, json)
Hash identifier: LKcYUKjUuGh8SEl9UnhW/ianiXAGK1G9W3a7a5wt3X8=
Subject key identifier: 3A:9C:85:A2:32:24:D2:B7:F1:0E:64:E6:90:4B:B8:FE:94:72:00:13
Authority key identifier: 0B:35:AC:BF:30:55:96:68:EA:18:EA:3F:10:B2:97:EE:64:C8:E4:93
Certificate issuer: /CN=0b35acbf30559668ea18ea3f10b297ee64c8e493
Certificate serial: 019CED82AD6BA4325FB94C6E9C89F931D37D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft
Manifest number: 1869
Signing time: Sat 14 Mar 2026 18:01:30 +0000
Manifest this update: Sat 14 Mar 2026 18:01:30 +0000
Manifest next update: Sun 15 Mar 2026 18:01:30 +0000
Files and hashes: 1: CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl (hash: dlE5f9Z8rOvJ04LSbb1hKGpNptClQUANTbA4mU8XG5I=)
2: qrwmnr0OEc9nAnaMZvs0-umIs9w.roa (hash: PZB6TM1PU5xxv8QQowAJ7WYR8h3/v/M9wazTIxePSNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 18:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ed:82:ad:6b:a4:32:5f:b9:4c:6e:9c:89:f9:31:d3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b35acbf30559668ea18ea3f10b297ee64c8e493
Validity
Not Before: Mar 14 18:01:30 2026 GMT
Not After : Mar 15 18:01:30 2026 GMT
Subject: CN=3a9c85a23224d2b7f10e64e6904bb8fe94720013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:05:26:3c:ed:f6:7e:40:6f:b9:6e:14:b9:32:
76:ad:ab:b4:03:26:ba:9a:94:fe:73:49:10:84:fb:
81:a4:93:5e:04:c1:50:f1:0f:33:38:ae:3b:c0:07:
63:1c:07:55:12:ce:26:5d:23:ce:0e:b3:ad:f1:13:
3a:e4:c4:67:fc:4c:5d:88:c9:99:48:92:1d:46:c0:
42:7c:75:3d:31:75:55:43:80:9d:61:05:5d:da:c3:
77:b9:5c:c0:53:c4:ee:fe:7b:ff:71:6b:21:c0:81:
d7:47:3c:41:94:3a:c8:3f:ce:3a:22:4f:22:de:de:
ce:30:44:41:9a:92:11:d2:4a:4a:ca:38:5b:52:1a:
8a:ea:39:e3:2b:4d:f1:7c:f4:15:d7:27:3a:08:ed:
32:54:18:63:ce:ff:64:af:e8:48:c6:4b:33:4f:3a:
63:3b:47:9f:5f:b2:14:4b:5b:31:ac:22:b5:5b:b0:
7c:e3:e9:dd:72:7b:38:5f:cc:ae:c9:33:11:67:0d:
d7:42:6f:11:d2:c1:1e:d6:09:8d:32:4e:e0:35:5d:
19:2f:55:8c:58:be:95:f0:d1:39:b5:94:89:cf:1d:
16:7b:0d:a6:08:5f:43:c3:51:be:54:af:46:9b:ef:
50:71:34:83:fe:b7:e3:dd:f8:13:c7:18:16:ae:70:
9e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9C:85:A2:32:24:D2:B7:F1:0E:64:E6:90:4B:B8:FE:94:72:00:13
X509v3 Authority Key Identifier:
keyid:0B:35:AC:BF:30:55:96:68:EA:18:EA:3F:10:B2:97:EE:64:C8:E4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:af:f0:ac:08:cd:55:75:05:ef:70:af:a4:aa:52:ef:a8:1b:
56:d6:98:04:45:f7:de:1c:2f:f7:0b:52:8a:d2:e3:74:c1:12:
b0:a0:59:70:7e:a0:e5:14:9e:8a:aa:b2:bc:dd:7e:ff:01:5d:
14:b5:39:d1:0e:00:83:03:bc:2f:93:f0:78:1c:0f:2b:b4:ea:
ef:ef:cb:79:54:d0:21:04:bf:e9:d6:c2:7d:3a:de:f5:21:ba:
5c:5f:4d:fb:3c:76:d6:a7:20:f6:af:17:a8:3a:77:fe:4b:f3:
62:b1:98:4b:c2:c8:67:60:2e:c7:8d:de:7e:24:43:ae:84:08:
7a:04:3d:5e:b1:85:9c:7f:52:96:88:62:9c:99:4c:dc:de:2e:
97:e8:49:b7:e7:08:dc:ba:c0:20:b1:44:00:de:b4:fd:cd:91:
1b:ae:fa:e4:60:61:6f:90:f4:e5:69:f3:f2:dd:e9:10:40:da:
ea:25:40:36:1b:1b:eb:f0:28:2c:38:93:60:8f:de:37:7b:95:
bd:94:64:1b:0c:0c:72:35:27:8d:82:db:f8:07:f5:9c:3e:68:
59:12:b1:44:49:98:77:36:42:14:c3:47:81:23:5d:19:3e:30:
81:88:a1:62:74:0f:0c:9b:e2:c1:fa:3f:29:2d:3e:d1:39:ce:
7a:04:3f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 00:59:05 2026 by rpki-client