Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
File: CzAFeBftL9lZWEYyD9uBTJ_EShM.mft (raw, json)
Hash identifier: eAuHLVunLuMCAFuej8NdVntSggUV/IrIEqAEdXbRqtg=
Subject key identifier: 65:FA:B5:94:5C:D4:B2:F7:77:12:FD:71:66:A9:51:EC:AF:C8:54:85
Authority key identifier: 0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
Certificate issuer: /CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Certificate serial: 01A04160CA966C50DBF2F7C8F81C3B293DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
Manifest number: 03C0
Signing time: Thu 27 Aug 2026 04:00:57 +0000
Manifest this update: Thu 27 Aug 2026 04:00:57 +0000
Manifest next update: Fri 28 Aug 2026 04:00:57 +0000
Files and hashes: 1: CzAFeBftL9lZWEYyD9uBTJ_EShM.crl (hash: Ykw6P6y7cDbz9c/sKTMzfr8Z2rd3GhqLi+JWiCaK3yM=)
2: lEbJm5syICAkDzBdnQFTwrUOmo0.roa (hash: vOTfqhJ4GKJTkXberBptf2018gCEaSZ0ldd8I65tSrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:60:ca:96:6c:50:db:f2:f7:c8:f8:1c:3b:29:3d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Validity
Not Before: Aug 27 04:00:57 2026 GMT
Not After : Aug 28 04:00:57 2026 GMT
Subject: CN=65fab5945cd4b2f77712fd7166a951ecafc85485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a2:f2:41:eb:12:8d:ff:0e:19:5f:9e:d8:6d:
bc:ef:ab:a2:e2:63:b1:7f:12:f1:81:57:cf:f5:9a:
9a:b4:86:ea:c1:ca:84:5e:dd:d6:a2:83:07:67:9e:
ff:0b:b6:2e:6d:d7:a2:5e:d1:cf:d4:5f:1a:cd:d8:
d8:65:e6:d8:40:a7:bb:da:a6:79:da:72:74:56:09:
4b:0d:ac:5f:01:b9:1d:8a:31:8d:d8:c1:99:3e:44:
7d:36:84:10:d1:ec:3e:38:d2:f3:30:3e:99:d9:d7:
4c:21:c9:76:52:60:74:46:e0:6c:4e:d6:84:f5:9a:
1d:4e:7a:e1:10:0b:ed:33:b5:9c:86:ca:b4:74:0a:
e3:7e:58:fb:0d:8d:13:fe:5b:50:36:9b:a9:a1:50:
b5:0a:cd:b7:50:91:b7:1d:e3:9d:3a:2d:dc:03:c7:
29:29:0c:a0:0c:18:2c:2c:44:18:3d:a9:2c:d8:78:
4a:c8:d3:aa:2b:1a:d4:6a:5d:b7:f2:71:e6:a0:c9:
ab:8e:e8:5c:d3:69:b2:0e:5f:2e:a6:d0:f0:13:c1:
90:bf:51:1b:8a:04:88:3d:1d:36:c0:2f:62:fb:25:
a7:25:5f:98:b9:6b:a3:f3:13:05:c7:be:6f:86:5d:
fb:b6:71:4e:46:d6:fb:f6:b7:63:49:e7:7c:43:ea:
d5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FA:B5:94:5C:D4:B2:F7:77:12:FD:71:66:A9:51:EC:AF:C8:54:85
X509v3 Authority Key Identifier:
keyid:0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:91:ea:03:5c:e1:c1:da:e1:6f:5c:0f:46:41:c6:c0:09:34:
bb:6c:93:cb:87:83:b3:72:2f:0e:9f:df:14:55:6b:27:38:53:
90:f8:c5:9d:e1:d1:84:dc:13:37:b5:08:8a:cb:ba:00:b5:b2:
a7:21:df:9d:a9:be:56:a6:a2:0f:a5:14:14:01:c2:43:7c:9c:
84:d4:dc:1f:0b:eb:22:08:7c:0c:80:e5:ba:28:6e:98:9f:08:
37:aa:cc:d6:34:18:4e:4c:84:87:0e:f8:2b:55:ed:78:33:29:
02:3c:9a:ee:55:b9:9b:8e:57:9c:62:b7:18:d1:44:86:27:8d:
7c:e7:78:db:10:92:d1:4a:f7:66:5b:58:d6:9b:26:80:5f:5a:
bd:84:e6:9d:d6:f7:b5:29:e8:2c:bf:1a:e3:4b:86:ee:71:4b:
4f:bf:a2:61:42:09:3d:31:f1:38:6c:d5:1b:eb:44:22:01:42:
69:d0:b7:56:20:db:cc:cf:c6:76:ab:45:d5:61:aa:41:36:26:
e2:25:93:b5:7a:90:30:50:28:2c:fe:67:d5:cf:29:f4:53:62:
4d:a0:cc:62:fd:44:77:4b:32:cd:a2:f5:bb:1e:f0:28:5a:2a:
33:8c:af:7a:61:f1:dc:b7:69:ff:e6:ad:24:be:a1:94:3e:49:
91:46:95:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:22:15 2026 by rpki-client