Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft
File: czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft (raw, json)
Hash identifier: HRs8p51P2AthHeNF6kRm4K3tcNACe9B+pXuQLoGMz8g=
Subject key identifier: 3F:6D:A7:62:9A:5B:8F:EF:B6:FE:7E:CC:51:8E:C3:D9:3B:3A:11:A4
Authority key identifier: 73:3C:01:FC:6B:DF:EB:09:0D:57:32:C8:72:EE:DA:53:CB:42:1A:BE
Certificate issuer: /CN=733c01fc6bdfeb090d5732c872eeda53cb421abe
Certificate serial: 019D371BFE32BC2967F1CD0A963A238F7F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft
Manifest number: 17E4
Signing time: Sun 29 Mar 2026 01:01:14 +0000
Manifest this update: Sun 29 Mar 2026 01:01:14 +0000
Manifest next update: Mon 30 Mar 2026 01:01:14 +0000
Files and hashes: 1: czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl (hash: 3aNMUQNWgqKKMZ5MX134FXoO92pMKG0wUJl26kAHQ4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:fe:32:bc:29:67:f1:cd:0a:96:3a:23:8f:7f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733c01fc6bdfeb090d5732c872eeda53cb421abe
Validity
Not Before: Mar 29 01:01:14 2026 GMT
Not After : Mar 30 01:01:14 2026 GMT
Subject: CN=3f6da7629a5b8fefb6fe7ecc518ec3d93b3a11a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:18:b6:61:c5:b5:94:5f:bf:c9:78:d7:76:7b:
25:e6:4f:54:56:0c:08:dc:ae:d1:81:62:ce:b6:08:
5e:d6:a2:ec:1b:43:8d:34:5f:47:81:bf:e0:c4:12:
6f:69:fd:1e:73:9a:56:16:f4:f9:1e:59:6e:d2:57:
ec:b8:b3:30:58:97:17:ac:eb:e3:84:76:d5:a6:79:
29:90:db:a7:68:21:a1:20:cb:87:84:98:9d:71:43:
fd:69:15:8a:02:b4:e3:42:c9:7e:6f:36:08:1a:71:
ba:4d:37:15:3c:25:4c:9b:73:e7:af:50:c6:61:7f:
ee:f2:53:ce:47:25:8a:34:e6:73:2a:cf:2c:0a:e8:
7d:bf:67:13:87:56:e9:e8:4d:1c:0b:3d:cf:7b:f1:
2b:d8:2a:30:aa:bc:ab:38:c0:25:9d:ee:cb:ff:f1:
82:bb:e6:dc:7a:93:27:cc:2f:7b:2f:6f:74:03:64:
47:24:47:e1:01:f4:7a:bd:3b:9d:e4:5e:a7:18:49:
78:8f:b7:fb:e4:0a:db:d5:b0:8d:1d:c8:b2:3c:37:
63:02:40:dd:4a:d9:41:82:24:8d:52:d1:2f:04:17:
9c:00:22:c9:56:1a:47:77:86:69:b4:ab:a6:fe:0d:
ee:17:26:d7:25:7e:9f:97:c5:19:50:72:f3:50:f9:
f2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6D:A7:62:9A:5B:8F:EF:B6:FE:7E:CC:51:8E:C3:D9:3B:3A:11:A4
X509v3 Authority Key Identifier:
keyid:73:3C:01:FC:6B:DF:EB:09:0D:57:32:C8:72:EE:DA:53:CB:42:1A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:31:aa:53:54:25:8c:81:3b:80:51:f7:a0:d2:9c:24:fd:49:
6e:77:d4:dd:e9:2f:95:3c:14:77:15:a8:96:c8:53:02:89:f5:
98:49:f7:90:4c:44:6e:41:06:b9:79:d7:28:56:8b:2e:b9:d4:
ba:82:2f:f5:f1:04:7e:b0:90:3b:9d:ee:f2:3e:3a:96:24:2e:
a3:b9:19:ee:bb:32:97:8e:d7:75:e1:87:31:73:9d:ff:1e:5a:
df:11:61:9e:a9:b8:16:7d:8b:05:f9:c6:28:93:fc:09:6b:4a:
b7:21:fc:13:ae:41:7d:a9:e4:74:ca:ff:18:01:63:93:b0:b8:
53:ab:4b:df:e6:56:18:e7:1e:d5:0e:a8:c5:82:12:5a:a4:ed:
d5:a1:ad:b3:ab:e4:35:15:e9:14:e8:34:69:49:e2:fd:67:34:
3a:60:be:e0:10:ca:e0:fe:2e:b7:14:48:c9:4b:47:38:c5:4e:
fe:e2:95:fd:f6:f8:d3:9b:4c:a8:e8:7a:41:df:ae:b2:67:60:
59:f0:7d:73:65:6e:36:8e:c6:da:f6:97:eb:52:76:97:ff:f2:
6c:16:31:40:af:c1:50:68:93:7f:f3:7e:b6:17:31:73:a1:20:
f5:55:dc:1a:7a:ed:6d:6d:f9:0f:47:81:05:e3:22:65:62:7e:
2f:e9:7f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:23 2026 by rpki-client