Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
File: CzEv6XRkvA5qHv-i8ciW96igJng.mft (raw, json)
Hash identifier: AouGq11zBAchscwO1HwDSQqIV9W1O0dQLrPX1jIUeLY=
Subject key identifier: 64:9C:4C:6A:C4:9D:DF:A2:E6:21:E0:97:23:EF:58:96:09:93:B8:C4
Authority key identifier: 0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
Certificate issuer: /CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Certificate serial: 019E2A3A20692F657E2D720065AD0A681C3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
Manifest number: 179A
Signing time: Fri 15 May 2026 06:01:52 +0000
Manifest this update: Fri 15 May 2026 06:01:52 +0000
Manifest next update: Sat 16 May 2026 06:01:52 +0000
Files and hashes: 1: CzEv6XRkvA5qHv-i8ciW96igJng.crl (hash: QMNeBfVuRuCYLxHS6KJspC2+WoRkCxo259pHg3GElO4=)
2: O4FogktllEObQ3m4gcGbxOTXFjc.roa (hash: LSEt+DfGeh7UZL23uB93PJ34d8wXBxGJPcCGrkXjZy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:3a:20:69:2f:65:7e:2d:72:00:65:ad:0a:68:1c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Validity
Not Before: May 15 06:01:52 2026 GMT
Not After : May 16 06:01:52 2026 GMT
Subject: CN=649c4c6ac49ddfa2e621e09723ef58960993b8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b6:5c:ac:aa:9d:c0:dc:fb:01:50:cd:5e:ec:
a5:d3:a4:1b:9d:f9:2e:e1:c0:63:7d:c8:68:22:af:
f6:76:8d:3a:15:75:53:81:bc:ff:d2:6c:f6:c9:b2:
94:60:4f:11:2e:b7:80:28:92:00:f7:4c:b8:d7:9e:
21:ef:5d:3d:30:60:fc:f3:2b:e5:24:c7:69:83:41:
07:32:0f:2c:82:3b:42:a8:63:d8:56:1a:00:2c:e3:
0a:ec:c8:11:6d:97:6a:85:27:f0:44:91:a5:0d:6d:
46:26:30:aa:7c:87:21:f1:b7:33:af:8b:f0:7b:f5:
ac:6f:19:9a:a3:fa:bc:e2:88:e4:72:20:a0:20:87:
ba:fc:e9:2f:19:52:c0:e9:44:5d:cc:0c:2e:a2:15:
27:54:3d:77:02:b7:09:e7:1d:53:b1:db:f4:10:20:
93:64:68:cc:56:af:75:5c:e2:4b:b4:63:89:12:36:
e9:9b:8a:7a:62:ce:54:7a:36:1d:55:75:9e:b4:82:
c9:39:62:3c:fe:59:36:3a:1a:e5:a1:b5:a6:b6:06:
7a:ea:1c:4a:76:a4:e2:7c:e1:b1:61:ac:d0:da:ea:
18:36:1b:36:05:ad:4a:a3:5a:17:51:dc:93:f1:90:
a1:29:52:ff:6a:a9:40:98:08:3f:6a:46:6e:3d:58:
b2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9C:4C:6A:C4:9D:DF:A2:E6:21:E0:97:23:EF:58:96:09:93:B8:C4
X509v3 Authority Key Identifier:
keyid:0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:7f:2f:b3:74:b2:e3:8f:1c:50:4d:78:e9:55:be:c2:52:ff:
8b:b4:d4:dd:65:53:8d:9f:02:29:80:e6:ef:93:b4:9e:b3:60:
af:67:ae:4a:e4:1e:9e:2c:18:4d:22:f7:9c:20:7a:4a:6a:ee:
18:35:38:5c:13:45:f0:78:83:ed:75:25:f6:07:c0:1b:4c:1b:
3e:e8:eb:35:c2:6b:03:70:ea:c7:30:5e:57:75:a6:20:d7:38:
59:1b:f4:99:77:be:b7:a4:86:a8:0f:cd:b7:cc:93:50:9c:27:
4d:d4:e8:0f:46:c2:9b:1e:56:00:fc:5e:5d:9e:22:1f:54:35:
d5:06:be:06:1b:3c:7b:16:c5:fd:d7:74:4f:08:2f:c6:de:3e:
e4:b9:c2:e8:c1:67:66:fa:53:b1:1d:01:65:78:d7:c4:95:27:
29:95:5c:36:f2:bb:98:5a:e6:c9:6a:e3:c3:fc:52:4d:4e:82:
ba:c3:ee:88:ae:13:2c:c6:b7:12:de:b7:5a:6c:35:94:bd:f5:
0c:bd:a7:70:cc:05:7c:9c:89:f6:70:bd:88:28:73:4e:52:9f:
b3:ed:9b:78:b6:2b:ff:8d:99:98:4f:02:b4:b1:e2:a6:1c:ed:
08:fa:60:74:7d:dd:7c:b7:ac:9c:ae:68:26:d8:c0:bd:1d:cb:
9e:38:ac:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4qOiBpL2V+LXIAZa0KaBw7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMzEyZmU5NzQ2NGJjMGU2YTFlZmZhMmYxYzg5NmY3YThh
MDI2NzgwHhcNMjYwNTE1MDYwMTUyWhcNMjYwNTE2MDYwMTUyWjAzMTEwLwYDVQQD
Eyg2NDljNGM2YWM0OWRkZmEyZTYyMWUwOTcyM2VmNTg5NjA5OTNiOGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLZcrKqdwNz7AVDNXuyl06Qbnfku
4cBjfchoIq/2do06FXVTgbz/0mz2ybKUYE8RLreAKJIA90y4154h7109MGD88yvl
JMdpg0EHMg8sgjtCqGPYVhoALOMK7MgRbZdqhSfwRJGlDW1GJjCqfIch8bczr4vw
e/Wsbxmao/q84ojkciCgIIe6/OkvGVLA6URdzAwuohUnVD13ArcJ5x1Tsdv0ECCT
ZGjMVq91XOJLtGOJEjbpm4p6Ys5UejYdVXWetILJOWI8/lk2OhrlobWmtgZ66hxK
dqTifOGxYazQ2uoYNhs2Ba1Ko1oXUdyT8ZChKVL/aqlAmAg/akZuPViyOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGScTGrEnd+i5iHglyPvWJYJk7jEMB8GA1UdIwQY
MBaAFAsxL+l0ZLwOah7/ovHIlveooCZ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3pFdjZYUmt2QTVxSHYtaThjaVc5NmlnSm5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82YjJjOWUtZTUwZS00ODg3LWI0ODIt
ZmExYjU1NWRhYTkxLzEvQ3pFdjZYUmt2QTVxSHYtaThjaVc5NmlnSm5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC82YjJjOWUtZTUwZS00ODg3LWI0ODItZmExYjU1NWRhYTkx
LzEvQ3pFdjZYUmt2QTVxSHYtaThjaVc5NmlnSm5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXX8vs3Sy
448cUE146VW+wlL/i7TU3WVTjZ8CKYDm75O0nrNgr2euSuQeniwYTSL3nCB6Smru
GDU4XBNF8HiD7XUl9gfAG0wbPujrNcJrA3DqxzBeV3WmINc4WRv0mXe+t6SGqA/N
t8yTUJwnTdToD0bCmx5WAPxeXZ4iH1Q11Qa+Bhs8exbF/dd0Twgvxt4+5LnC6MFn
ZvpTsR0BZXjXxJUnKZVcNvK7mFrmyWrjw/xSTU6CusPuiK4TLMa3Et63Wmw1lL31
DL2ncMwFfJyJ9nC9iChzTlKfs+2beLYr/42ZmE8CtLHiphztCPpgdH3dfLesnK5o
JtjAvR3LnjisrQ==
-----END CERTIFICATE-----
Generated at Fri May 15 11:15:36 2026 by rpki-client