Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
File: CzAFeBftL9lZWEYyD9uBTJ_EShM.mft (raw, json)
Hash identifier: i/8qZgF67PhRq4YPTQ3U/LJPCefq+TutuHd0EEVJhPg=
Subject key identifier: F2:45:F7:A3:4F:AD:FA:6B:7E:48:1F:2E:39:D4:C4:DB:68:01:8A:CB
Authority key identifier: 0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
Certificate issuer: /CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Certificate serial: 019D3909A66E828E67696BE7579151620AAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
Manifest number: 022E
Signing time: Sun 29 Mar 2026 10:00:26 +0000
Manifest this update: Sun 29 Mar 2026 10:00:26 +0000
Manifest next update: Mon 30 Mar 2026 10:00:26 +0000
Files and hashes: 1: CzAFeBftL9lZWEYyD9uBTJ_EShM.crl (hash: nfi0zQrQNkRkiK73ZJ6J6x6Pbehmi3nqRyHV9UMqEHo=)
2: lEbJm5syICAkDzBdnQFTwrUOmo0.roa (hash: vOTfqhJ4GKJTkXberBptf2018gCEaSZ0ldd8I65tSrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:a6:6e:82:8e:67:69:6b:e7:57:91:51:62:0a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Validity
Not Before: Mar 29 10:00:26 2026 GMT
Not After : Mar 30 10:00:26 2026 GMT
Subject: CN=f245f7a34fadfa6b7e481f2e39d4c4db68018acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:31:5b:17:9e:fd:40:7a:d4:1c:72:c1:44:a0:
b2:0b:fe:e3:a6:f9:b2:30:d7:f6:32:0b:65:33:25:
ef:43:af:b0:44:6d:64:88:f0:18:ef:1d:2f:46:c4:
55:cd:ec:74:99:ca:7a:2f:fb:18:46:05:2b:0a:9b:
b6:b3:c7:cd:94:7d:88:8c:c5:00:ce:51:ca:cd:7e:
e4:0e:8e:17:fb:18:43:20:43:38:03:32:71:76:c7:
b3:c4:cc:f1:18:b6:4f:bf:57:b6:f9:d9:98:0c:9b:
85:ae:90:69:cf:c3:51:ab:74:11:79:e0:7a:f7:14:
5e:d7:33:b4:18:ab:67:c4:56:0b:8d:6a:aa:43:5c:
e4:78:ec:86:5b:db:cb:cf:77:e0:0d:d4:26:e6:cb:
bc:6f:31:8e:bd:89:9f:fc:82:b6:94:b1:9c:f6:24:
d2:9d:25:4b:38:d7:ab:ff:83:0d:27:14:97:81:02:
b8:37:67:c0:13:ea:77:5a:62:44:2a:d6:31:c0:7d:
38:50:ad:f1:4b:7d:d7:e6:a8:27:14:40:b3:71:96:
75:bf:89:e0:69:53:a9:46:f8:61:48:a4:4c:c9:4e:
6e:be:fd:1d:ac:5c:19:07:68:f0:bd:8b:af:47:1b:
13:05:72:6a:09:bf:e4:a4:10:25:30:68:a6:10:21:
cb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:45:F7:A3:4F:AD:FA:6B:7E:48:1F:2E:39:D4:C4:DB:68:01:8A:CB
X509v3 Authority Key Identifier:
keyid:0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:5e:26:b1:dc:11:52:e1:3f:f0:7f:03:4a:75:75:66:6d:51:
06:39:10:6e:9e:30:7e:39:e4:b5:e0:20:f4:0e:1b:f9:98:7d:
02:d7:c8:a6:3a:18:ea:89:81:eb:da:79:ac:c6:72:31:cb:90:
d4:26:10:d2:11:36:1d:7a:10:11:32:5b:ab:5d:32:46:6b:6b:
b0:7f:88:b0:e3:8f:0f:d6:71:35:36:89:93:8d:2a:4e:56:82:
9d:18:7a:3a:ef:d6:c6:26:c6:c2:f8:03:f6:72:8c:a0:2a:66:
f3:89:00:b4:7e:35:19:85:8d:f6:fa:ef:3e:2e:d3:f3:f4:44:
b7:6c:58:63:94:80:c0:e1:f7:e1:aa:d7:25:cb:8e:6d:6d:4e:
c1:e5:96:cd:a0:a2:ab:e1:42:b6:32:d8:1c:9b:19:8a:bc:2f:
de:47:6d:c2:69:60:b1:45:d4:c3:c0:19:dc:f1:c3:32:b8:fc:
94:e9:91:f6:32:3b:23:03:fd:f5:9e:b0:90:d2:fc:ac:e1:db:
4a:8a:74:fa:85:f9:67:ef:63:b6:e5:0b:8c:80:d5:c6:8d:b0:
4c:90:e1:13:de:3b:d6:05:6d:cd:1b:d3:28:ed:68:93:5c:86:
2c:ed:5a:c8:89:ea:e8:f3:8a:cd:4c:4a:f1:70:84:ad:04:cc:
ce:bd:22:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CaZugo5naWvnV5FRYgqvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMzAwNTc4MTdlZDJmZDk1OTU4NDYzMjBmZGI4MTRjOWZj
NDRhMTMwHhcNMjYwMzI5MTAwMDI2WhcNMjYwMzMwMTAwMDI2WjAzMTEwLwYDVQQD
EyhmMjQ1ZjdhMzRmYWRmYTZiN2U0ODFmMmUzOWQ0YzRkYjY4MDE4YWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjFbF579QHrUHHLBRKCyC/7jpvmy
MNf2MgtlMyXvQ6+wRG1kiPAY7x0vRsRVzex0mcp6L/sYRgUrCpu2s8fNlH2IjMUA
zlHKzX7kDo4X+xhDIEM4AzJxdsezxMzxGLZPv1e2+dmYDJuFrpBpz8NRq3QReeB6
9xRe1zO0GKtnxFYLjWqqQ1zkeOyGW9vLz3fgDdQm5su8bzGOvYmf/IK2lLGc9iTS
nSVLONer/4MNJxSXgQK4N2fAE+p3WmJEKtYxwH04UK3xS33X5qgnFECzcZZ1v4ng
aVOpRvhhSKRMyU5uvv0drFwZB2jwvYuvRxsTBXJqCb/kpBAlMGimECHLhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJF96NPrfprfkgfLjnUxNtoAYrLMB8GA1UdIwQY
MBaAFAswBXgX7S/ZWVhGMg/bgUyfxEoTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3pBRmVCZnRMOWxaV0VZeUQ5dUJUSl9FU2hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wZjA4N2ItNzI1My00NjFlLTkwMjEt
OWE5MTIxOWYwNmUxLzEvQ3pBRmVCZnRMOWxaV0VZeUQ5dUJUSl9FU2hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wZjA4N2ItNzI1My00NjFlLTkwMjEtOWE5MTIxOWYwNmUx
LzEvQ3pBRmVCZnRMOWxaV0VZeUQ5dUJUSl9FU2hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgl4msdwR
UuE/8H8DSnV1Zm1RBjkQbp4wfjnkteAg9A4b+Zh9AtfIpjoY6omB69p5rMZyMcuQ
1CYQ0hE2HXoQETJbq10yRmtrsH+IsOOPD9ZxNTaJk40qTlaCnRh6Ou/WxibGwvgD
9nKMoCpm84kAtH41GYWN9vrvPi7T8/REt2xYY5SAwOH34arXJcuObW1OweWWzaCi
q+FCtjLYHJsZirwv3kdtwmlgsUXUw8AZ3PHDMrj8lOmR9jI7IwP99Z6wkNL8rOHb
Sop0+oX5Z+9jtuULjIDVxo2wTJDhE9471gVtzRvTKO1ok1yGLO1ayInq6POKzUxK
8XCErQTMzr0iRA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:35:47 2026 by rpki-client