Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
File: czsHKLegVDWEws0LSLdHjEGU7wo.mft (raw, json)
Hash identifier: FNMPrBk+NSzKJMGNgzkBY3TLHO38mqQ28bUeUDwgIo8=
Subject key identifier: DE:B9:3E:A2:86:64:73:C2:33:DD:9E:7B:B8:4C:5F:14:49:63:C6:35
Authority key identifier: 73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
Certificate issuer: /CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Certificate serial: 019DA29CEC4558910CBAB6C45380FCAD3029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
Manifest number: 09FE
Signing time: Sat 18 Apr 2026 22:01:26 +0000
Manifest this update: Sat 18 Apr 2026 22:01:26 +0000
Manifest next update: Sun 19 Apr 2026 22:01:26 +0000
Files and hashes: 1: Oce8w_FStQrxz5-sGyZ5GI_yylQ.roa (hash: /gUG2XD9ZyXjCehDc7TUgIzStA7kApp9jArOXsYwwL4=)
2: ZQWSBrSbVBwfkGrwKFFXvU4ra7w.roa (hash: r+NK3YQEVsT0+KvKCit8WLyB+4wd+LAbIvtambZpbro=)
3: czsHKLegVDWEws0LSLdHjEGU7wo.crl (hash: oqZDNVrvxcr6V7Z61699u52efE15s+rTnbw68sL7avc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 17:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:ec:45:58:91:0c:ba:b6:c4:53:80:fc:ad:30:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Validity
Not Before: Apr 18 22:01:26 2026 GMT
Not After : Apr 19 22:01:26 2026 GMT
Subject: CN=deb93ea2866473c233dd9e7bb84c5f144963c635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6f:c5:e7:0c:ab:0f:30:ce:23:6f:0d:73:51:
a4:74:6f:7a:a0:3b:32:6a:10:bd:f1:f8:0b:a3:45:
36:51:d4:0d:49:ef:5c:88:c4:44:22:67:90:68:5a:
98:ef:81:b3:d6:5e:8b:dc:91:f5:8c:20:c6:fa:63:
0b:b0:f3:a4:fb:63:32:87:11:91:95:b5:92:3a:7c:
67:06:9a:19:d7:4e:8b:47:be:49:54:2e:71:79:3f:
da:c6:40:00:bc:ff:b3:e9:17:3e:e2:ce:dc:54:e7:
c3:da:25:11:8a:b2:a0:00:c8:a7:9f:1f:53:2f:d4:
60:7d:c3:43:93:af:5e:ba:86:3f:09:1c:92:59:04:
c0:d2:63:b8:5f:f9:24:0f:00:41:cb:1c:4e:ea:9e:
8d:df:ed:88:15:3b:d1:9f:86:6c:40:f5:d8:e8:c1:
05:ce:ed:a2:e8:2e:80:8a:4a:09:64:af:dd:97:7d:
ba:b0:62:0e:e9:6c:5b:ba:57:7c:a1:93:d5:ca:c0:
71:df:df:41:d0:76:14:35:36:84:f5:4d:c7:db:00:
73:e8:bc:d9:e6:35:88:6d:4a:7b:2c:bc:ae:a5:4b:
7f:f3:37:df:61:bf:6d:f1:63:96:35:00:cb:0a:88:
e9:71:ab:8b:f5:7a:22:7d:6a:e6:bb:01:d8:41:3e:
ec:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B9:3E:A2:86:64:73:C2:33:DD:9E:7B:B8:4C:5F:14:49:63:C6:35
X509v3 Authority Key Identifier:
keyid:73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c2:e5:2c:b3:e1:18:cd:18:bc:b1:01:f0:55:df:7d:f2:c2:
d9:30:81:4b:e0:42:b8:fd:4e:13:54:a7:1b:dd:11:c1:6a:fc:
af:0c:32:ff:5b:12:67:98:16:b8:c1:bc:91:51:c0:4d:1e:95:
38:14:fd:3e:53:a8:91:3f:e9:1f:ba:ac:21:6a:49:ba:72:32:
5e:aa:cd:17:5e:12:ec:b4:06:7b:a2:89:23:91:0d:e4:dd:4f:
52:84:98:e2:a2:4f:34:27:81:2b:9f:62:27:76:ea:2f:62:c3:
e1:ea:20:33:43:f6:59:cb:c2:f5:3a:28:7f:c7:eb:e4:29:96:
99:41:aa:8b:76:b7:75:04:4c:04:6e:c7:84:e0:85:b9:20:31:
2b:5e:7a:d1:63:87:76:b2:1e:f1:85:ff:22:3d:c2:99:7b:21:
6b:12:15:bd:a1:f9:e9:e9:bb:bd:72:5c:4f:21:95:39:a5:f6:
56:65:53:c6:3c:c8:af:a2:10:bb:8c:e7:b4:76:02:c9:b8:bc:
de:28:fa:3b:88:10:e0:d1:19:42:72:54:30:6b:5c:96:59:92:
42:a1:22:32:f6:96:48:1f:a4:26:cb:1e:75:ac:b6:a8:95:88:
33:b3:dc:16:4a:46:3a:bb:ae:28:47:2d:0b:7f:90:6a:16:6a:
91:ab:44:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2inOxFWJEMurbEU4D8rTApMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczM2IwNzI4YjdhMDU0MzU4NGMyY2QwYjQ4Yjc0NzhjNDE5
NGVmMGEwHhcNMjYwNDE4MjIwMTI2WhcNMjYwNDE5MjIwMTI2WjAzMTEwLwYDVQQD
EyhkZWI5M2VhMjg2NjQ3M2MyMzNkZDllN2JiODRjNWYxNDQ5NjNjNjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6W/F5wyrDzDOI28Nc1GkdG96oDsy
ahC98fgLo0U2UdQNSe9ciMREImeQaFqY74Gz1l6L3JH1jCDG+mMLsPOk+2MyhxGR
lbWSOnxnBpoZ106LR75JVC5xeT/axkAAvP+z6Rc+4s7cVOfD2iURirKgAMinnx9T
L9RgfcNDk69euoY/CRySWQTA0mO4X/kkDwBByxxO6p6N3+2IFTvRn4ZsQPXY6MEF
zu2i6C6AikoJZK/dl326sGIO6Wxbuld8oZPVysBx399B0HYUNTaE9U3H2wBz6LzZ
5jWIbUp7LLyupUt/8zffYb9t8WOWNQDLCojpcauL9XoifWrmuwHYQT7shwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN65PqKGZHPCM92ee7hMXxRJY8Y1MB8GA1UdIwQY
MBaAFHM7Byi3oFQ1hMLNC0i3R4xBlO8KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3pzSEtMZWdWRFdFd3MwTFNMZEhqRUdVN3dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hODM0ZGEtMWNjYS00MDE3LTkwYjgt
ZGFlZTBhZWFmYjJiLzEvY3pzSEtMZWdWRFdFd3MwTFNMZEhqRUdVN3dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hODM0ZGEtMWNjYS00MDE3LTkwYjgtZGFlZTBhZWFmYjJi
LzEvY3pzSEtMZWdWRFdFd3MwTFNMZEhqRUdVN3dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUMLlLLPh
GM0YvLEB8FXfffLC2TCBS+BCuP1OE1SnG90RwWr8rwwy/1sSZ5gWuMG8kVHATR6V
OBT9PlOokT/pH7qsIWpJunIyXqrNF14S7LQGe6KJI5EN5N1PUoSY4qJPNCeBK59i
J3bqL2LD4eogM0P2WcvC9Toof8fr5CmWmUGqi3a3dQRMBG7HhOCFuSAxK1560WOH
drIe8YX/Ij3CmXshaxIVvaH56em7vXJcTyGVOaX2VmVTxjzIr6IQu4zntHYCybi8
3ij6O4gQ4NEZQnJUMGtcllmSQqEiMvaWSB+kJsseday2qJWIM7PcFkpGOruuKEct
C3+QahZqkatE2g==
-----END CERTIFICATE-----
Generated at Sun Apr 19 02:13:46 2026 by rpki-client