Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
File: czsHKLegVDWEws0LSLdHjEGU7wo.mft (raw, json)
Hash identifier: wIPn4XVdLc4kGAY6B7aK4LH2UONsvxsVWoYZxMs+G9k=
Subject key identifier: 70:37:08:F5:E8:73:98:A7:AF:A3:9F:DB:BA:79:A0:67:CC:6A:ED:7F
Authority key identifier: 73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
Certificate issuer: /CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Certificate serial: 019E8E36C23B846C84E2E6D4BCADB480199B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
Manifest number: 0A78
Signing time: Wed 03 Jun 2026 16:00:13 +0000
Manifest this update: Wed 03 Jun 2026 16:00:13 +0000
Manifest next update: Thu 04 Jun 2026 16:00:13 +0000
Files and hashes: 1: Oce8w_FStQrxz5-sGyZ5GI_yylQ.roa (hash: /gUG2XD9ZyXjCehDc7TUgIzStA7kApp9jArOXsYwwL4=)
2: ZQWSBrSbVBwfkGrwKFFXvU4ra7w.roa (hash: r+NK3YQEVsT0+KvKCit8WLyB+4wd+LAbIvtambZpbro=)
3: czsHKLegVDWEws0LSLdHjEGU7wo.crl (hash: jqipvNcirQgSsDQF/c+k+wped699oCv7qB5n4Tb0bM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:36:c2:3b:84:6c:84:e2:e6:d4:bc:ad:b4:80:19:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Validity
Not Before: Jun 3 16:00:13 2026 GMT
Not After : Jun 4 16:00:13 2026 GMT
Subject: CN=703708f5e87398a7afa39fdbba79a067cc6aed7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:92:30:5f:8c:64:89:50:4d:67:2d:fa:1f:85:
05:eb:8c:f1:a9:b9:5e:71:c0:3b:7a:df:0f:7f:bc:
d6:10:2a:b9:96:2f:78:bb:c3:6d:b2:24:3b:55:76:
f4:88:e0:84:cc:f3:73:20:1c:ad:02:c0:20:55:1f:
9c:7a:10:5b:b6:a1:54:0f:66:7f:ec:e6:64:5f:1b:
76:68:90:42:54:3c:03:30:89:fa:6f:70:a9:49:a2:
45:39:5a:dc:ad:d7:43:3e:f5:e4:d7:59:49:a9:92:
0f:16:7c:da:d2:be:c0:40:76:d2:60:76:48:57:bf:
d0:3a:79:f3:53:ad:9e:a9:6a:cc:53:62:b4:b8:e7:
0a:f8:cd:71:f0:67:98:b5:37:21:46:d0:44:ba:15:
f0:c8:ab:65:ef:db:c2:f2:e2:65:10:4d:78:b8:7a:
9e:2f:83:7b:c9:dc:00:fe:8f:ad:07:92:fb:80:8d:
58:38:2d:78:0a:c2:ee:db:72:f2:25:d6:e4:72:3b:
cd:c2:f9:92:b3:d0:81:28:2b:33:82:08:69:84:52:
07:4c:95:74:9a:e5:a2:b8:4d:5c:68:85:d9:19:0f:
dd:1e:42:07:90:94:d0:a5:d6:a6:f8:8d:84:dd:0a:
47:18:33:89:ab:96:21:1b:a2:a3:81:2d:68:b4:9e:
f3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:37:08:F5:E8:73:98:A7:AF:A3:9F:DB:BA:79:A0:67:CC:6A:ED:7F
X509v3 Authority Key Identifier:
keyid:73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e9:41:3b:a9:b8:b3:f7:8b:c8:13:46:9a:9e:f3:76:f6:c0:
e3:c0:53:14:d4:23:2a:1a:4e:81:aa:2e:4f:05:24:5c:13:5f:
82:52:ae:ee:90:a7:2b:9e:37:38:79:b1:08:c6:da:ca:f2:93:
f7:39:a4:d9:ec:ac:88:4a:53:e1:77:b0:2e:7d:40:9b:50:f8:
f1:52:e7:84:b4:19:a4:cb:78:8b:3f:8d:b3:e5:d6:11:49:f1:
b6:87:a1:df:4d:69:2f:7a:26:b8:2c:e2:01:f4:4e:e1:13:90:
8c:aa:1d:51:7a:64:b7:53:60:ef:1a:2f:f1:dd:90:4e:94:b8:
60:74:a3:9b:3d:0b:49:92:2b:3b:e5:86:4d:c5:3d:79:7a:be:
e1:eb:cf:5c:44:3a:44:23:7c:d3:b1:63:60:01:4e:03:28:4b:
29:59:e8:ce:47:29:b9:df:b2:51:2d:31:9a:f8:77:cc:1a:70:
23:8c:43:41:ba:37:41:e2:21:ea:7d:d4:12:03:42:b4:47:e0:
38:38:25:3d:f3:57:4a:93:af:4c:20:93:ec:97:cb:a5:f0:c2:
0a:0f:b3:0a:e4:c5:79:a4:ea:d4:53:f3:b2:1c:67:b7:82:0c:
3f:ae:78:ca:34:78:b6:71:a4:b8:b3:92:0b:ed:3b:29:af:56:
2b:e2:eb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:56:29 2026 by rpki-client