Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
File: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft (raw, json)
Hash identifier: UIY14++V+LTU66demp57/VTLkLbQsSToaoRcGvLxn+o=
Subject key identifier: 56:4C:42:06:F7:88:91:4C:D9:F1:7F:A1:25:9E:E4:CD:58:18:4A:36
Authority key identifier: 47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
Certificate issuer: /CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Certificate serial: 019D28BB1656DBC248AFA77190FC5DB34672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
Manifest number: 0BA9
Signing time: Thu 26 Mar 2026 06:00:42 +0000
Manifest this update: Thu 26 Mar 2026 06:00:42 +0000
Manifest next update: Fri 27 Mar 2026 06:00:42 +0000
Files and hashes: 1: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl (hash: Jz5FrFJe610z3bKtenITdzuY6VWH3Q1O9wyvBnRUYgI=)
2: XHT_nValr2j6SKOfGPicLhiXyO4.roa (hash: H5XqJ+imumLxCFtabqMwr2EYqfcFyzubhax0NWhApw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:16:56:db:c2:48:af:a7:71:90:fc:5d:b3:46:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Validity
Not Before: Mar 26 06:00:42 2026 GMT
Not After : Mar 27 06:00:42 2026 GMT
Subject: CN=564c4206f788914cd9f17fa1259ee4cd58184a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6e:15:7e:e8:09:30:b7:b9:5a:a8:55:0e:99:
dd:ec:bd:fd:ac:d5:57:3b:17:ca:0e:ea:ed:c4:ba:
ca:c8:66:80:8b:9d:fa:2b:a7:4a:1f:b8:c7:ea:63:
5f:c6:1c:62:64:a0:04:e6:3c:1c:67:15:e9:18:8c:
c1:1c:5a:4d:47:08:ab:70:7e:23:8a:a7:b1:84:36:
67:ac:8b:99:d0:98:e2:08:d9:36:9e:2f:39:10:a5:
7d:b3:12:90:37:da:c2:bf:06:f2:26:5d:47:19:92:
80:f3:c1:03:d0:37:b4:e5:54:1b:6d:38:21:16:54:
18:42:ec:db:b1:fb:09:16:22:54:32:c8:8d:56:ff:
90:fe:e7:9c:ca:b7:4a:29:6c:c8:1c:a2:9a:f8:53:
e8:ce:81:37:df:2b:51:22:9a:e3:8f:bd:42:06:be:
77:54:27:c3:e9:e1:81:54:a6:34:af:d4:b3:db:e2:
2a:f1:bc:3a:12:c3:87:76:93:32:59:9d:e9:89:49:
60:53:d2:cb:f9:b5:d0:33:f4:2b:0a:50:c6:ba:dd:
00:0e:df:69:b1:dd:19:7a:91:d9:8f:44:59:fb:31:
5f:ca:68:f1:51:7c:64:d2:d4:c5:0f:82:af:79:3b:
b2:58:31:24:da:56:42:5b:e2:72:32:9f:14:fb:4f:
83:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4C:42:06:F7:88:91:4C:D9:F1:7F:A1:25:9E:E4:CD:58:18:4A:36
X509v3 Authority Key Identifier:
keyid:47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ee:97:bd:7a:55:2d:f1:7e:22:4a:9c:a1:da:a2:57:90:eb:
72:39:44:63:b7:9f:63:c7:94:e4:2f:69:b8:12:4b:5c:21:8d:
24:de:27:b9:f1:9c:ea:a2:f0:1d:74:26:c9:6c:46:21:2a:df:
69:cf:27:b6:78:e6:c0:74:f1:0a:07:0c:67:d6:a4:70:59:1f:
19:1b:de:81:45:7a:9f:80:35:14:fd:39:10:e6:34:00:50:f7:
a1:3b:ee:b1:fd:e0:c2:8f:d9:1c:be:69:ae:7b:c8:e1:e3:b5:
b8:0f:ba:96:e7:76:e8:a8:d3:a2:62:4c:05:51:60:32:af:ee:
8b:d3:12:a6:ce:dc:14:9e:b8:9a:dc:ed:a8:30:f9:62:7e:ed:
b5:ed:24:f2:31:bf:9c:b0:10:8a:06:4f:b3:8e:42:0e:bc:e8:
5c:c2:c2:bf:86:2c:c2:65:4f:23:4a:a6:4a:c6:8c:b4:9a:a9:
e5:82:31:21:95:1f:64:05:d6:2c:a5:86:8e:c3:60:c7:d8:07:
d8:64:4c:7b:d4:8d:13:a0:d6:7f:d6:d6:d3:c4:7b:56:2f:11:
61:39:2a:e0:51:f7:be:16:44:01:84:06:9e:6a:ff:83:59:b2:
aa:e7:55:e6:d1:3b:3e:91:0b:72:d2:9e:c4:cd:c9:a4:02:b2:
40:4c:14:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:33 2026 by rpki-client