Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
File: dWyevH_4dZ2KEG__rzNeo0b66lc.mft (raw, json)
Hash identifier: gCNWIwVW9lalNdPk1iCaBUX7gJsiqcewQzTP8dXrvu0=
Subject key identifier: 54:FB:C3:84:78:6E:87:B1:E3:0B:C6:9B:FE:4A:2F:31:E0:0C:CD:4F
Authority key identifier: 75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57
Certificate issuer: /CN=756c9ebc7ff8759d8a106fffaf335ea346faea57
Certificate serial: 019D28BB2A9A7033F960B315B42528B973E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 06:00:47 +0000
Manifest this update: Thu 26 Mar 2026 06:00:47 +0000
Manifest next update: Fri 27 Mar 2026 06:00:47 +0000
Files and hashes: 1: AVxiOXJDrisHfmZgr2aXeclmtwU.roa (hash: 4L7UFMqLp3HNu/xc7sjo2ZgReOCpLyizZvJkZ1OP7h0=)
2: dWyevH_4dZ2KEG__rzNeo0b66lc.crl (hash: 4+CalACzGYMRhehs/znAHU9iyyc5sR5wc8UA8l3JHdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:2a:9a:70:33:f9:60:b3:15:b4:25:28:b9:73:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756c9ebc7ff8759d8a106fffaf335ea346faea57
Validity
Not Before: Mar 26 06:00:47 2026 GMT
Not After : Mar 27 06:00:47 2026 GMT
Subject: CN=54fbc384786e87b1e30bc69bfe4a2f31e00ccd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8f:e5:e7:e3:29:94:7b:f7:70:8e:4a:a4:e0:
34:ff:ed:94:eb:75:c3:07:1f:6b:54:27:78:9d:27:
64:db:1e:0a:82:d7:de:8b:ab:a7:08:bd:5f:e2:73:
31:8a:41:78:7f:1f:7e:15:6b:42:50:79:e4:82:76:
8f:aa:19:74:f3:3f:b2:b8:18:4f:59:72:b3:07:c5:
fc:df:48:fb:30:3a:a7:db:c6:57:5a:13:85:27:a4:
7a:48:88:5e:10:fd:d2:a3:ac:f6:89:f1:88:ef:1e:
0b:47:d1:71:9a:1e:3a:91:32:38:dd:89:5b:a3:76:
e1:d1:d5:60:05:a3:f5:f2:98:0a:bf:da:56:21:4b:
62:81:61:7e:32:6b:ae:5d:ef:5a:50:4e:7a:ab:7f:
03:69:33:7a:ab:e4:86:10:aa:cc:89:55:0f:7f:68:
b0:5e:92:8b:df:4b:ee:de:d1:12:ef:f4:65:da:9e:
fa:d1:0a:1a:4c:9f:b6:f6:b0:27:5f:23:c3:aa:c1:
e6:af:8c:c9:af:cc:84:0a:c3:b3:6f:1f:19:91:2d:
eb:27:d0:eb:f9:dd:65:95:c1:42:1b:ac:be:c5:44:
a0:8e:0f:4f:fc:95:b8:23:dc:08:17:92:cf:4b:21:
5e:90:7b:b8:15:80:8f:fb:bd:b6:da:21:1b:16:27:
35:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FB:C3:84:78:6E:87:B1:E3:0B:C6:9B:FE:4A:2F:31:E0:0C:CD:4F
X509v3 Authority Key Identifier:
keyid:75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ab:45:b8:78:21:4e:20:80:e8:25:80:bf:66:20:6a:76:e0:
7b:41:c4:63:10:3a:91:f5:61:58:98:45:2f:9c:49:92:8e:02:
36:d9:c0:85:2c:74:f4:f7:e6:41:10:26:f2:a6:6d:ed:8b:7f:
7c:03:0a:0b:59:08:97:59:9b:b4:1e:c3:8f:2e:ee:06:9f:4f:
39:94:36:80:5f:d8:5c:82:21:36:d2:fa:72:84:9d:3e:bf:9d:
e3:9e:f7:4d:83:01:25:ed:92:c1:07:ce:a8:be:97:2e:26:21:
ff:fa:4e:7c:f4:4f:98:af:e2:dd:a2:ff:59:5b:3b:60:5c:bb:
ee:bf:33:25:20:14:e8:7c:d9:45:09:b0:cf:76:ba:e2:00:80:
7f:9d:b4:4f:db:dd:a7:45:cb:05:46:e8:42:a0:78:19:d5:66:
bf:7e:c6:9e:ed:59:62:f6:b7:cb:ce:9b:f5:46:47:d4:11:0d:
5c:b2:da:9e:54:e8:fe:73:34:41:86:4d:04:c9:14:3f:05:c5:
ba:bb:3e:09:43:9c:9c:6b:14:45:52:cc:12:c9:fd:cf:73:6c:
e0:85:0a:8f:c4:12:dd:7f:6c:d0:9b:66:7a:b8:f3:bd:fc:3f:
20:c7:87:0e:7a:9e:32:84:7d:f7:1a:c1:0c:48:0e:b4:fb:8e:
89:a8:9a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:32:07 2026 by rpki-client