Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
File: CzAFeBftL9lZWEYyD9uBTJ_EShM.mft (raw, json)
Hash identifier: Yg6L+/CX8mcX8cTCaaIKW/UA02hIseIzzSXckDVdsqo=
Subject key identifier: B6:70:E8:E9:85:AC:F3:65:8A:B2:A6:09:BA:83:94:E8:52:7A:E6:AF
Authority key identifier: 0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
Certificate issuer: /CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Certificate serial: 01A132C6D2536D518C6BC95C3C9F32EE16D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
Manifest number: 043D
Signing time: Tue 13 Oct 2026 01:00:53 +0000
Manifest this update: Tue 13 Oct 2026 01:00:53 +0000
Manifest next update: Wed 14 Oct 2026 01:00:53 +0000
Files and hashes: 1: CzAFeBftL9lZWEYyD9uBTJ_EShM.crl (hash: e8RUQ1iDiS09VreOp12Ee8j5zyvTuBAUPKihWyMXygw=)
2: lEbJm5syICAkDzBdnQFTwrUOmo0.roa (hash: vOTfqhJ4GKJTkXberBptf2018gCEaSZ0ldd8I65tSrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:c6:d2:53:6d:51:8c:6b:c9:5c:3c:9f:32:ee:16:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Validity
Not Before: Oct 13 01:00:53 2026 GMT
Not After : Oct 14 01:00:53 2026 GMT
Subject: CN=b670e8e985acf3658ab2a609ba8394e8527ae6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a7:6e:6a:f6:ca:3a:05:d4:6b:e1:99:83:51:
71:b5:99:2a:7b:0e:b0:1b:f9:7c:cd:26:f9:de:ff:
20:30:cd:03:f7:62:1a:d5:5b:18:82:d5:bd:6f:64:
6e:b3:3a:b8:40:89:32:bf:08:22:b6:b3:4b:db:11:
16:e0:15:fc:e7:4e:6f:f0:8d:e6:d3:86:48:17:cf:
19:d7:94:5c:c2:f3:ea:04:57:8b:5f:68:e3:a2:83:
38:0c:be:5e:f6:f6:2b:97:46:32:b4:af:57:c5:21:
5e:3d:d1:9c:ef:f3:7b:bf:b0:74:80:41:ad:ea:bb:
3d:ad:54:2d:ef:64:a9:07:c3:e7:ab:2b:38:f3:58:
5c:b5:48:4f:23:88:c5:fb:c4:3f:d8:1e:39:82:f7:
d8:66:6f:20:62:87:8b:90:21:f4:62:0e:2e:92:08:
43:1b:a8:f0:cf:71:df:38:83:c6:b4:33:d0:d7:e2:
03:23:2d:5d:0e:82:34:44:a5:a1:0e:8f:d4:7f:74:
d0:fe:50:50:af:20:9f:db:46:93:7a:3b:4f:d4:cb:
f2:4a:ab:a0:f0:18:96:89:7c:97:fd:a5:4b:32:20:
1d:6f:d7:a5:4a:e5:0a:3e:b0:cb:70:2d:cc:29:6c:
58:a9:be:05:cf:3c:f6:85:0f:68:3d:48:4c:6e:10:
ed:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:70:E8:E9:85:AC:F3:65:8A:B2:A6:09:BA:83:94:E8:52:7A:E6:AF
X509v3 Authority Key Identifier:
keyid:0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d5:dc:3c:a3:2d:27:ae:76:9d:43:95:be:7f:2b:39:7e:30:
18:a5:d1:9c:ca:12:b8:a8:32:79:3c:83:9b:eb:c6:53:8f:b5:
44:6d:89:6e:2b:6f:68:b1:bf:c5:9c:72:80:2a:49:02:98:1b:
3a:c2:2b:e7:db:f0:78:be:b3:5a:c0:c9:ef:fe:7e:c1:50:12:
84:69:27:b3:78:3b:21:97:60:5f:bd:a0:2b:9a:e0:6c:58:36:
6d:96:c6:ad:85:10:ce:c8:b3:2e:10:e3:eb:c3:8d:0f:20:0e:
05:3e:03:2c:a2:ef:c8:68:9e:55:76:8a:d0:13:43:0b:85:33:
37:bc:5c:76:43:ca:e8:06:ca:97:51:9a:1a:e3:fa:b6:b9:42:
42:c4:dc:01:b2:ec:1a:0c:4b:73:79:3c:41:9b:73:38:8c:73:
16:0f:5f:d7:ce:58:65:c6:4d:c9:60:98:69:bf:15:d2:1b:4b:
d7:8e:e2:2e:b2:23:dc:a0:df:e9:ed:d0:cc:52:7a:b4:c4:8b:
16:ff:e2:5d:20:5b:ac:25:b9:f5:3c:d7:e1:8e:aa:a7:26:a7:
7e:78:cc:a5:7b:e1:f3:7a:46:8d:2e:84:49:fd:4c:10:b1:32:
78:12:98:60:dc:a3:95:56:c5:6f:e3:76:38:32:b4:33:20:70:
6f:1d:ae:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:11:25 2026 by rpki-client