Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
File: czsHKLegVDWEws0LSLdHjEGU7wo.mft (raw, json)
Hash identifier: 4YIjZ62v2s8k/tE1OAWCqL8dee8HLrpn/j1NqPGo/pM=
Subject key identifier: E1:24:C7:80:60:5A:1F:F7:59:3E:34:DA:3B:08:29:FD:14:7B:53:CE
Authority key identifier: 73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
Certificate issuer: /CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Certificate serial: 01A15C9EF155C5DC91324BC59F8D52D2E8BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
Manifest number: 0BEC
Signing time: Wed 21 Oct 2026 04:01:22 +0000
Manifest this update: Wed 21 Oct 2026 04:01:22 +0000
Manifest next update: Thu 22 Oct 2026 04:01:22 +0000
Files and hashes: 1: Oce8w_FStQrxz5-sGyZ5GI_yylQ.roa (hash: /gUG2XD9ZyXjCehDc7TUgIzStA7kApp9jArOXsYwwL4=)
2: ZQWSBrSbVBwfkGrwKFFXvU4ra7w.roa (hash: r+NK3YQEVsT0+KvKCit8WLyB+4wd+LAbIvtambZpbro=)
3: czsHKLegVDWEws0LSLdHjEGU7wo.crl (hash: 9JgnFy87iW7Apk6hgjb1KQa6lTyqVFayZIf4yELjlMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5c:9e:f1:55:c5:dc:91:32:4b:c5:9f:8d:52:d2:e8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Validity
Not Before: Oct 21 04:01:22 2026 GMT
Not After : Oct 22 04:01:22 2026 GMT
Subject: CN=e124c780605a1ff7593e34da3b0829fd147b53ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1c:ad:5a:75:e7:3e:0f:70:58:1a:31:2e:36:
74:fc:e8:d6:7e:4c:31:e0:0f:c3:c4:25:91:56:5a:
5f:48:da:3b:26:f5:23:5b:b9:e9:b3:c4:0d:04:d4:
da:77:89:66:5c:95:4f:0f:9f:8b:ab:7a:8a:fe:22:
ff:5a:f7:60:fb:e5:84:34:89:3a:eb:44:b1:f2:3c:
6b:9c:8e:41:71:96:02:32:67:f6:75:23:6f:1c:7f:
e1:17:4f:6a:8b:a3:03:27:c7:ba:32:95:4a:61:50:
27:c5:e3:f8:ff:db:6c:b7:2c:ef:2f:75:a9:b5:e9:
e0:29:1f:6f:f5:ec:12:4d:f8:c5:27:b2:fd:85:6a:
0f:c7:30:51:3e:0b:27:53:7c:e6:e6:96:a1:0a:cf:
4c:18:d9:30:b9:68:ed:e0:00:2e:b3:ae:d1:22:8c:
e3:2e:1f:30:cc:c6:bc:c5:e9:2f:f3:2c:65:37:00:
2d:59:7c:8d:25:69:ed:b0:b9:b5:e0:03:6a:45:80:
c8:02:17:d0:6e:5b:80:25:c7:f7:a1:32:71:9a:96:
de:a0:85:06:12:61:7f:68:27:d5:aa:79:a6:af:d6:
d7:fb:9d:11:20:0b:5b:92:f1:41:0c:8d:b6:a3:29:
54:84:06:22:93:cc:16:7d:9e:42:48:42:23:06:f2:
84:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:24:C7:80:60:5A:1F:F7:59:3E:34:DA:3B:08:29:FD:14:7B:53:CE
X509v3 Authority Key Identifier:
keyid:73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:32:8a:48:92:8b:be:72:b2:78:ff:1a:04:ba:20:23:fb:f4:
42:a6:03:a1:47:d1:f9:1a:70:85:08:7f:cd:db:4d:8e:c2:66:
21:ab:23:4b:5b:1c:3f:aa:bf:92:92:79:d3:c3:f0:30:4d:ae:
03:ee:6e:12:0c:db:37:3e:63:aa:0d:ba:7c:26:4a:64:a0:9c:
2b:ee:89:ba:09:a8:e1:6c:71:4b:49:fd:a7:49:14:23:9b:99:
d1:79:90:79:11:70:cb:b9:ed:a6:54:7e:76:92:eb:9c:de:42:
b4:4d:6a:a2:54:21:30:ba:ae:e2:97:04:72:10:9c:3d:30:cb:
29:06:d6:fa:2b:d0:9d:9b:e9:54:0b:d8:eb:d1:14:2d:a9:f8:
61:15:29:b5:eb:89:53:36:b4:8e:f0:e4:d8:04:dc:da:16:d4:
f9:f9:2a:2e:83:57:07:87:62:e7:21:19:42:bc:ef:e7:5f:72:
e5:c8:f4:5a:09:dd:85:ee:35:ce:cf:7e:f3:fd:6e:4f:77:6d:
6c:75:60:2c:38:11:af:55:35:1c:df:5a:3e:71:12:24:17:6d:
af:cd:8a:c2:e8:63:07:c3:e6:b9:ee:fd:37:62:ad:0e:95:9d:
64:14:29:60:7c:4f:3e:e4:a0:ab:a6:4e:f6:aa:08:b4:20:d8:
40:1c:d7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 15:21:47 2026 by rpki-client