Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
File: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft (raw, json)
Hash identifier: rB7359jgB/IMLGSiXF7nMTy1EAaKQSUPJmNjfP/lcG4=
Subject key identifier: 89:02:C8:50:8D:33:FB:31:45:ED:D8:11:7D:50:F5:04:BB:0B:89:3B
Authority key identifier: AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
Certificate issuer: /CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Certificate serial: 019D254CC44E755343EC400B44BBCB13FF04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
Manifest number: 0DA4
Signing time: Wed 25 Mar 2026 14:01:21 +0000
Manifest this update: Wed 25 Mar 2026 14:01:21 +0000
Manifest next update: Thu 26 Mar 2026 14:01:21 +0000
Files and hashes: 1: 6PvsgVwbpjjge_V2egl4nj0Eov4.roa (hash: U1ac2CnvIyxkgh4LffLq2pt3hg9vUAszqogwRbgBBLY=)
2: INbvbexKikJqE06AvP-OgH6xyns.asa (hash: 6+8nON8zORmJVsBb/5wLz53qepNYird7lFy9z0e2zr0=)
3: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl (hash: mYm+6/KD++qQd67NH6Ooj0yTAWbRtlrOT9l95LIf5BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:c4:4e:75:53:43:ec:40:0b:44:bb:cb:13:ff:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Validity
Not Before: Mar 25 14:01:21 2026 GMT
Not After : Mar 26 14:01:21 2026 GMT
Subject: CN=8902c8508d33fb3145edd8117d50f504bb0b893b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f0:59:e1:92:67:10:c0:58:5f:18:d9:86:ba:
76:c7:d4:b0:8b:6c:37:b2:3e:19:83:1c:e9:68:84:
94:16:c7:ee:40:3f:c7:d5:a2:d3:42:7e:fa:e9:7a:
3e:37:6e:fa:20:b1:8a:67:59:cc:78:fb:c5:0c:cb:
27:00:f7:6e:a4:e7:58:8d:b0:0b:50:fb:7f:6b:15:
fb:10:18:ce:d4:c9:a9:d3:5c:08:f1:c8:06:ef:78:
8a:9f:8c:97:32:cf:9b:3c:dd:28:a2:30:98:e3:6c:
63:c7:82:a7:94:c5:90:a8:90:a3:0f:17:5b:ea:75:
e5:bc:62:8b:63:cb:f1:e6:13:46:a5:46:9d:78:54:
55:4e:e1:3a:da:41:49:2d:d6:ff:7e:f3:00:55:d5:
7a:fb:10:fa:ee:e9:49:88:f0:f6:11:c8:ef:e8:40:
d7:f7:a9:02:d5:37:f9:65:6e:fc:f0:24:ac:c7:a3:
54:77:1e:e8:a8:2c:f0:39:0f:29:94:05:a8:cb:bc:
f5:49:a1:9b:07:2d:ce:2e:a7:9e:f7:7e:8d:33:bf:
59:2c:7f:12:67:fb:f3:f8:2f:9d:11:9b:f7:ba:ea:
da:d4:45:bc:cf:19:2c:48:cb:e8:3e:6d:ee:77:29:
b2:55:23:01:f7:d5:77:79:70:e2:a6:92:8e:9e:50:
0b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:02:C8:50:8D:33:FB:31:45:ED:D8:11:7D:50:F5:04:BB:0B:89:3B
X509v3 Authority Key Identifier:
keyid:AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:70:90:df:91:90:ae:85:89:a1:77:02:22:0a:f7:0d:b2:78:
4e:c3:03:4c:74:41:eb:bb:ce:66:01:b4:ee:87:21:cf:7f:9d:
f9:f6:63:5b:ad:a2:04:11:07:bc:40:be:e1:3d:32:99:55:d1:
65:6d:9b:52:66:ce:a5:bb:b0:88:95:bd:e3:48:3b:e8:32:e4:
97:ee:32:8a:62:1c:ea:60:cf:01:93:af:1e:7b:bf:3e:85:b2:
65:e3:67:5d:8b:57:54:17:95:f6:9c:50:82:77:c8:a4:f3:72:
6a:5a:6c:b3:43:df:74:c8:07:fa:98:34:78:11:41:46:ad:5e:
fe:84:72:f2:cb:e6:7b:c2:cf:64:a9:ed:db:79:0c:94:fe:9a:
8d:83:df:7b:49:ca:d7:39:d9:ed:88:b0:be:58:c8:2d:2e:c7:
d2:ce:95:59:81:02:8e:5c:08:91:d2:69:67:db:8c:be:ad:59:
f8:5e:82:6d:8b:f5:03:3a:5d:08:b0:9b:05:15:e4:58:26:f7:
bd:c9:9d:b6:5d:76:a7:27:8f:c0:1f:28:6c:b6:b7:ae:ee:49:
21:8a:49:37:da:4e:19:8c:06:6f:c3:ed:f7:59:56:03:f8:58:
22:71:2c:0a:0f:5e:4b:81:96:17:5d:18:b3:cd:67:4e:87:af:
12:e6:45:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:19:00 2026 by rpki-client