Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
File: czsHKLegVDWEws0LSLdHjEGU7wo.mft (raw, json)
Hash identifier: abo4mYn0vSGFeP8ckk5bEVwZDTda9ROAwOdT0tjAwUM=
Subject key identifier: BC:5C:AD:EA:9A:E3:AD:E1:4E:D2:49:01:A8:1B:94:B4:3F:7D:72:3D
Authority key identifier: 73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
Certificate issuer: /CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Certificate serial: 01A06F1558EA6A6C1C6E1F47A0A96B3826CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
Manifest number: 0B71
Signing time: Sat 05 Sep 2026 01:01:05 +0000
Manifest this update: Sat 05 Sep 2026 01:01:05 +0000
Manifest next update: Sun 06 Sep 2026 01:01:05 +0000
Files and hashes: 1: Oce8w_FStQrxz5-sGyZ5GI_yylQ.roa (hash: /gUG2XD9ZyXjCehDc7TUgIzStA7kApp9jArOXsYwwL4=)
2: ZQWSBrSbVBwfkGrwKFFXvU4ra7w.roa (hash: r+NK3YQEVsT0+KvKCit8WLyB+4wd+LAbIvtambZpbro=)
3: czsHKLegVDWEws0LSLdHjEGU7wo.crl (hash: 6WAYT3Ixltzgycl7UCEbj/Z03lzONvoaygrlZWDYIlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:15:58:ea:6a:6c:1c:6e:1f:47:a0:a9:6b:38:26:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Validity
Not Before: Sep 5 01:01:05 2026 GMT
Not After : Sep 6 01:01:05 2026 GMT
Subject: CN=bc5cadea9ae3ade14ed24901a81b94b43f7d723d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ff:5c:c6:12:9e:89:7b:a0:6b:8d:88:9f:92:
72:bb:3e:3e:59:41:7a:ea:2e:c4:95:56:ae:a2:c9:
bd:2f:3e:9a:6f:7b:d1:de:d8:72:43:41:93:4a:45:
7a:49:d0:67:d8:1b:54:3c:cb:7b:7b:99:08:f2:03:
5e:46:3c:f7:af:29:ea:75:96:a2:34:cc:1a:c3:68:
23:fe:bb:e7:9c:b5:88:4c:aa:3d:7b:1a:25:b5:f7:
cd:eb:bc:94:69:ad:16:cd:bb:f7:9f:ac:90:fd:03:
75:7c:ed:d8:2d:03:22:5a:21:8b:6f:4b:ca:2f:e2:
a0:f4:cd:fa:17:c3:09:de:5c:a1:f2:53:e3:9b:79:
ea:81:24:24:40:9e:0c:22:78:aa:90:6f:e1:00:b8:
fe:3a:20:b9:62:d6:74:68:ed:26:ee:95:de:8a:eb:
7b:6e:4f:1e:d8:50:2f:c1:8f:a1:d5:7f:97:ff:0b:
b9:c8:84:54:41:f4:3d:24:14:c9:80:28:9c:a3:8c:
57:b2:0b:e9:c6:72:a6:b8:7a:c2:d3:02:58:e5:32:
1a:e9:01:c4:42:80:ee:82:a0:42:3d:ca:65:c8:17:
13:20:a1:86:38:39:0e:1d:75:16:4b:d2:1c:0a:04:
2d:b2:5f:16:0b:2c:7c:9e:76:65:7f:b2:1f:37:7d:
1d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5C:AD:EA:9A:E3:AD:E1:4E:D2:49:01:A8:1B:94:B4:3F:7D:72:3D
X509v3 Authority Key Identifier:
keyid:73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ee:80:e9:74:95:4d:fc:3e:73:60:aa:af:53:bc:fa:db:d7:
22:32:39:e9:8c:11:75:3b:c1:bc:a9:74:da:d2:3d:4e:8b:3f:
c0:09:c2:ec:ca:21:42:6a:ff:08:00:69:71:67:07:11:a3:6b:
1c:f0:e9:c4:6a:f7:fa:41:73:5b:16:fd:8e:61:c4:13:1d:54:
6c:a3:d7:34:3a:f2:d0:06:f4:fa:5b:8e:93:d3:d7:35:e9:92:
60:84:71:09:5b:19:eb:bf:80:35:20:60:6e:13:b7:59:7d:ab:
6e:4a:cb:42:8e:d1:98:2a:bb:2c:78:cb:e8:d1:36:61:e6:c9:
43:bd:5b:6f:af:c8:64:56:57:e1:b7:f7:55:66:3f:95:49:5e:
f6:77:d0:41:41:f3:57:c6:ac:bd:da:74:8d:81:77:3d:14:aa:
0d:30:27:87:7c:0a:1a:b5:f0:e1:a3:31:a4:d1:2b:c9:8f:29:
cb:fd:d9:48:17:bb:bb:8a:24:c6:2d:84:71:f3:87:bf:ba:de:
f0:2e:3c:98:ca:19:c4:3a:07:66:85:4b:5f:e4:48:8a:3f:81:
7b:2a:22:62:05:79:28:c1:10:0a:d1:01:45:fd:d3:62:d8:a4:
84:ba:f3:71:5c:9c:1e:25:75:5f:ab:b5:4c:8d:2c:22:c2:63:
88:b1:f8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:20:07 2026 by rpki-client