Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
File: CzAFeBftL9lZWEYyD9uBTJ_EShM.mft (raw, json)
Hash identifier: WCvR4iRjitidf1haN5ikhuoYgrn7BLtxKvpMntO7Ysc=
Subject key identifier: 5D:E6:99:19:77:01:B4:DF:EE:8F:A5:9D:BE:73:F6:CB:E9:30:1D:41
Authority key identifier: 0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
Certificate issuer: /CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Certificate serial: 01A136A3A5DD9A82FDBA5E45E29D85852B3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
Manifest number: 043F
Signing time: Tue 13 Oct 2026 19:00:56 +0000
Manifest this update: Tue 13 Oct 2026 19:00:56 +0000
Manifest next update: Wed 14 Oct 2026 19:00:56 +0000
Files and hashes: 1: CzAFeBftL9lZWEYyD9uBTJ_EShM.crl (hash: Vdd8xCnBBcau8O1G+91gSIr7Qya+CyzLvvJsB8Ics1Q=)
2: lEbJm5syICAkDzBdnQFTwrUOmo0.roa (hash: vOTfqhJ4GKJTkXberBptf2018gCEaSZ0ldd8I65tSrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:a3:a5:dd:9a:82:fd:ba:5e:45:e2:9d:85:85:2b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Validity
Not Before: Oct 13 19:00:56 2026 GMT
Not After : Oct 14 19:00:56 2026 GMT
Subject: CN=5de699197701b4dfee8fa59dbe73f6cbe9301d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:77:22:be:15:fa:10:42:ae:26:4f:b6:62:a1:
f1:e7:b8:47:dc:93:8c:49:92:e5:ac:fb:98:93:ab:
80:77:62:e1:c8:a5:4f:77:68:28:5a:22:31:22:90:
24:4b:d8:73:cb:26:ab:fa:1a:79:70:9c:eb:0a:3d:
6c:2f:c8:d9:a4:21:21:f7:14:99:ba:77:db:fa:45:
c1:e5:c4:c3:96:ce:d9:4b:25:9c:5d:1a:41:f7:7c:
b9:36:b6:1c:c2:0a:e5:bc:e3:ad:53:ae:6b:fc:95:
24:13:d7:de:1c:c1:47:b5:a1:65:b6:5b:49:e6:2f:
9d:5a:7f:e9:14:e2:ee:c7:47:9c:62:df:dd:fc:d1:
18:76:64:58:d9:f3:68:88:41:81:e8:c0:9c:6b:a8:
e6:ff:f2:c6:06:a9:fd:0e:65:dd:ea:19:73:03:80:
ab:8e:74:d2:ee:12:78:06:a0:14:a0:28:21:98:b0:
2e:2b:fc:2b:ed:c8:44:7f:d5:92:38:f9:4a:ec:bd:
87:e0:6c:e6:d1:68:af:c2:2a:71:ce:5e:41:19:49:
17:69:9f:d0:9c:ff:42:82:ca:d2:68:fb:92:3c:6a:
5e:54:40:bc:d9:08:0a:6a:b8:b9:f3:a5:f0:46:3c:
f5:10:01:e1:e8:a7:b7:9c:f8:a4:65:07:1f:3e:28:
f7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E6:99:19:77:01:B4:DF:EE:8F:A5:9D:BE:73:F6:CB:E9:30:1D:41
X509v3 Authority Key Identifier:
keyid:0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c5:e7:d9:16:53:90:de:68:51:e4:67:4a:7f:72:c8:8f:47:
ee:e5:93:a1:0a:cf:bb:5a:4c:0a:85:0e:6c:44:26:60:86:68:
b6:1a:94:ac:fb:5d:2b:7e:74:4e:dc:e6:94:78:d6:c4:ad:95:
dd:cf:50:9e:fc:9c:e7:bf:a2:67:be:1b:08:88:81:cf:7f:74:
f0:11:e7:11:05:56:bd:8c:e2:3a:60:55:28:d3:22:0e:00:98:
b7:74:22:64:9c:e8:45:cb:01:28:df:bf:17:82:80:80:31:23:
2f:90:00:27:81:5f:85:ad:24:6b:ac:bf:bb:73:bc:d2:f4:11:
75:8f:9b:aa:c8:26:3b:66:66:57:31:66:a2:4f:eb:74:bf:8e:
eb:0b:b0:6d:97:89:02:05:48:2e:23:bf:62:eb:98:0f:9d:da:
5f:60:7f:b3:3b:bf:9c:ca:b9:51:be:7d:b6:a1:73:fd:b3:43:
72:85:7f:70:86:87:27:b8:a8:b1:68:e0:39:57:ac:6c:bf:e8:
d8:87:33:7e:b4:b4:2f:a2:ee:72:9a:f3:4c:81:63:22:43:2d:
2f:24:47:f2:7e:56:27:60:da:80:58:59:82:c8:f9:ac:37:e7:
2a:ab:cc:66:2f:3e:24:60:fe:3e:fd:81:e6:d5:48:d7:d4:c2:
a7:b4:75:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:43:35 2026 by rpki-client