Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
File: CzAFeBftL9lZWEYyD9uBTJ_EShM.mft (raw, json)
Hash identifier: wJLynTB8jhta8m8uqCNJiX66tEhvfD5VNyAfhMQBfB4=
Subject key identifier: DD:1F:E7:E9:FF:96:84:0E:D0:EA:57:11:0E:AF:AC:E9:A2:C6:2F:2D
Authority key identifier: 0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
Certificate issuer: /CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Certificate serial: 019F53D745E55C4E995996EF6F503CE0D868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
Manifest number: 0345
Signing time: Sun 12 Jul 2026 01:00:44 +0000
Manifest this update: Sun 12 Jul 2026 01:00:44 +0000
Manifest next update: Mon 13 Jul 2026 01:00:44 +0000
Files and hashes: 1: CzAFeBftL9lZWEYyD9uBTJ_EShM.crl (hash: +03yBbfIQgvmjEq3tREBYP/kTjw9Ow/U65Goj4IdEwU=)
2: lEbJm5syICAkDzBdnQFTwrUOmo0.roa (hash: vOTfqhJ4GKJTkXberBptf2018gCEaSZ0ldd8I65tSrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:53:d7:45:e5:5c:4e:99:59:96:ef:6f:50:3c:e0:d8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Validity
Not Before: Jul 12 01:00:44 2026 GMT
Not After : Jul 13 01:00:44 2026 GMT
Subject: CN=dd1fe7e9ff96840ed0ea57110eaface9a2c62f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:eb:d0:80:10:50:24:42:fe:a3:4c:f5:96:5f:
ee:da:49:78:c1:61:38:8f:12:4e:ef:ba:25:0f:49:
3c:43:ec:41:32:e3:98:5f:5e:b3:74:85:8a:36:79:
ef:54:4c:9f:d0:f6:4b:86:da:e4:ec:af:9a:16:bb:
07:9b:f4:c9:0d:ef:dc:fe:f1:b8:df:11:0e:be:49:
d4:fd:10:c6:a2:96:59:7e:41:12:46:03:f9:cd:2c:
8e:1f:45:a5:4b:db:9c:8e:ba:e4:f2:17:ab:49:40:
28:e4:f2:d1:5e:5b:05:0e:4a:55:85:05:0f:c0:1a:
aa:63:6e:88:15:9b:cf:e6:53:42:55:f4:f2:71:89:
9b:5b:b4:50:24:99:70:2c:15:73:b4:37:05:32:49:
ca:56:6f:98:03:ce:a5:8c:6e:2b:cd:09:4f:93:bf:
75:f0:ee:9c:1e:bf:fd:9e:1c:14:32:ba:95:97:e6:
ca:de:64:62:bd:f5:45:4a:c2:11:58:02:5f:66:39:
dc:c4:4c:23:48:01:f3:ba:62:09:32:b8:25:6d:44:
b5:20:8b:c5:27:aa:c0:10:35:97:d1:c8:e7:ee:90:
e4:ec:9b:cb:a5:4e:7b:6d:e3:60:de:a9:9d:06:20:
01:6c:99:4b:7c:3c:9b:b0:cf:e4:f4:05:03:ff:d7:
05:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1F:E7:E9:FF:96:84:0E:D0:EA:57:11:0E:AF:AC:E9:A2:C6:2F:2D
X509v3 Authority Key Identifier:
keyid:0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:6d:73:e5:5c:7e:2f:32:d3:b0:b6:3b:d4:8d:78:5d:38:f0:
ff:21:de:54:be:e9:25:9b:1f:a4:f0:77:44:15:66:e0:82:87:
9c:81:8d:d8:84:3b:31:e7:e7:10:d6:eb:57:42:08:2c:53:76:
ad:7d:dc:0d:7b:59:c5:56:65:bc:e7:58:b0:92:0c:b9:de:be:
14:73:ae:80:73:8c:12:e9:88:fd:4c:92:b0:cb:3b:b3:89:57:
9f:eb:90:f9:53:d8:d2:73:4b:8d:51:49:cc:04:fe:fc:5b:36:
35:48:4d:e7:70:60:13:f4:d8:c0:a3:5a:ba:2a:13:bb:72:49:
d0:bb:37:7e:8e:9f:0d:1f:4c:45:93:3e:70:bb:26:99:ae:fa:
1f:9a:ea:5a:59:bd:90:f0:e5:4f:8b:c6:92:55:e8:23:03:50:
61:cc:06:15:ec:0a:18:f8:c0:78:12:a3:f7:cf:d9:a9:43:5d:
58:35:00:3f:5e:2a:38:81:66:aa:a9:12:17:85:02:5f:ed:fc:
65:e0:7e:fe:bc:cd:aa:1d:f3:82:08:71:ab:b1:d5:76:9a:c8:
be:ed:51:cd:95:af:ac:06:15:77:10:93:0d:99:64:75:03:ff:
1f:0c:e0:6a:54:75:e8:7a:25:56:cb:69:2d:68:a5:36:29:96:
92:a2:d7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:06:28 2026 by rpki-client