Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
File: RzsJuP3t5sq1JPyqOzHmFrouSJY.mft (raw, json)
Hash identifier: uWjW5dRAePNXXqW1i7diPnt7/FXphrrX/10z85uL9nI=
Subject key identifier: AB:5F:DB:01:A7:7A:D6:90:E7:F5:85:5F:6D:93:7C:42:D0:4F:1D:C4
Authority key identifier: 47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
Certificate issuer: /CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Certificate serial: 019D273A97FC06F7D6C1C3CC9A5A61AC19A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 23:00:44 +0000
Manifest this update: Wed 25 Mar 2026 23:00:44 +0000
Manifest next update: Thu 26 Mar 2026 23:00:44 +0000
Files and hashes: 1: RzsJuP3t5sq1JPyqOzHmFrouSJY.crl (hash: j24JVllaBqEsc/AsulGpC/1EKod3+P9CatCgYaPKJeg=)
2: qULAWziRR6EpNTlUGRYiVItcoc0.roa (hash: mkeeUvNAxFPl7/hk9APPcp6mDqYe93qja/XRGGlJYVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:97:fc:06:f7:d6:c1:c3:cc:9a:5a:61:ac:19:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Validity
Not Before: Mar 25 23:00:44 2026 GMT
Not After : Mar 26 23:00:44 2026 GMT
Subject: CN=ab5fdb01a77ad690e7f5855f6d937c42d04f1dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:92:2d:45:3e:8b:89:00:0e:b9:d0:47:e5:a6:
b6:a8:da:10:66:e6:4b:0d:fc:6e:70:e6:53:89:ca:
35:aa:53:aa:b0:40:6a:3a:f8:cd:d4:39:ff:5c:aa:
be:5f:0d:d1:8a:73:80:91:81:8a:2c:1d:40:25:35:
7f:a3:c2:ca:31:1c:44:72:f3:c1:4c:a9:ca:02:4e:
ef:d1:f2:14:91:cf:d2:7f:58:a7:ca:dd:43:d1:ff:
65:73:16:2e:63:2b:42:c4:69:2b:50:20:44:9a:6f:
0d:a6:a7:d0:8d:6f:97:03:88:a6:d4:01:1b:e2:29:
93:ef:5f:d1:df:04:fd:6a:db:71:13:7b:d0:99:5b:
9c:6f:70:c6:50:29:92:09:24:a3:8f:c2:00:8b:48:
3f:3b:86:7f:fa:87:5a:fc:94:bc:fa:63:09:87:68:
7d:7f:28:99:28:46:ce:81:22:17:45:30:30:5e:e1:
83:9e:ee:7c:ef:fa:37:1e:fc:e2:dc:b7:83:1f:4f:
fe:a9:3a:c7:d5:7a:c4:25:7d:1a:4d:3c:f7:ef:83:
ee:67:f2:b7:9d:c4:7e:17:3a:eb:cf:7b:9a:71:f5:
81:a3:75:ee:63:31:f0:19:b8:10:94:21:47:66:67:
0f:68:8e:b4:40:77:fb:39:c4:74:40:7e:59:0f:40:
a2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5F:DB:01:A7:7A:D6:90:E7:F5:85:5F:6D:93:7C:42:D0:4F:1D:C4
X509v3 Authority Key Identifier:
keyid:47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:6b:d3:b0:11:19:2f:22:b1:5a:14:e2:c0:e3:52:12:00:73:
c0:aa:ea:85:f9:a9:5d:d3:ed:39:21:38:6d:95:87:3d:e6:15:
88:b3:82:9c:77:21:91:89:e0:b3:86:65:87:5e:21:65:df:67:
6e:5e:14:b6:30:d3:40:5a:aa:a2:0e:87:77:37:f6:e1:9b:12:
a8:cd:53:37:3a:9a:f3:1a:7e:cb:76:d9:1a:39:2d:ab:db:fe:
5c:ea:b7:fa:6d:6e:ce:be:92:53:22:6b:c3:8c:b8:c8:dd:08:
bc:ee:70:50:de:8f:a7:13:1b:53:d5:c5:ad:bc:21:eb:ff:19:
33:87:a3:59:49:af:0b:34:3f:22:cc:82:be:3d:b2:81:6d:7e:
8c:4c:3f:65:3d:a2:5e:14:e6:04:b8:48:90:a5:62:14:54:9f:
12:85:2c:b1:9a:e1:7e:4c:43:aa:0b:73:31:79:49:04:74:04:
52:0d:6e:d1:b4:96:0e:5b:56:b0:89:2a:46:18:e0:a5:78:ad:
e4:1c:91:18:f4:81:86:d7:cd:e5:80:60:8a:35:20:df:ce:eb:
a4:5b:7b:d2:ba:cc:a4:98:22:dd:53:f0:c4:55:ce:01:62:43:
ef:cf:3b:86:27:d9:9b:60:d0:f2:9a:6d:f1:b7:64:c0:c6:fc:
0b:42:61:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOpf8BvfWwcPMmlphrBmgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3M2IwOWI4ZmRlZGU2Y2FiNTI0ZmNhYTNiMzFlNjE2YmEy
ZTQ4OTYwHhcNMjYwMzI1MjMwMDQ0WhcNMjYwMzI2MjMwMDQ0WjAzMTEwLwYDVQQD
EyhhYjVmZGIwMWE3N2FkNjkwZTdmNTg1NWY2ZDkzN2M0MmQwNGYxZGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JItRT6LiQAOudBH5aa2qNoQZuZL
DfxucOZTico1qlOqsEBqOvjN1Dn/XKq+Xw3RinOAkYGKLB1AJTV/o8LKMRxEcvPB
TKnKAk7v0fIUkc/Sf1inyt1D0f9lcxYuYytCxGkrUCBEmm8NpqfQjW+XA4im1AEb
4imT71/R3wT9attxE3vQmVucb3DGUCmSCSSjj8IAi0g/O4Z/+oda/JS8+mMJh2h9
fyiZKEbOgSIXRTAwXuGDnu587/o3Hvzi3LeDH0/+qTrH1XrEJX0aTTz374PuZ/K3
ncR+Fzrrz3uacfWBo3XuYzHwGbgQlCFHZmcPaI60QHf7OcR0QH5ZD0Ci8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtf2wGnetaQ5/WFX22TfELQTx3EMB8GA1UdIwQY
MBaAFEc7Cbj97ebKtST8qjsx5ha6LkiWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpzSnVQM3Q1c3ExSlB5cU96SG1Gcm91U0pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9jMDQ2NzQtZTlhYy00NTQ3LWJjZGEt
MjU4ODU0ZTUwY2Y4LzEvUnpzSnVQM3Q1c3ExSlB5cU96SG1Gcm91U0pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9jMDQ2NzQtZTlhYy00NTQ3LWJjZGEtMjU4ODU0ZTUwY2Y4
LzEvUnpzSnVQM3Q1c3ExSlB5cU96SG1Gcm91U0pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsWvTsBEZ
LyKxWhTiwONSEgBzwKrqhfmpXdPtOSE4bZWHPeYViLOCnHchkYngs4Zlh14hZd9n
bl4UtjDTQFqqog6Hdzf24ZsSqM1TNzqa8xp+y3bZGjktq9v+XOq3+m1uzr6SUyJr
w4y4yN0IvO5wUN6PpxMbU9XFrbwh6/8ZM4ejWUmvCzQ/IsyCvj2ygW1+jEw/ZT2i
XhTmBLhIkKViFFSfEoUssZrhfkxDqgtzMXlJBHQEUg1u0bSWDltWsIkqRhjgpXit
5ByRGPSBhtfN5YBgijUg387rpFt70rrMpJgi3VPwxFXOAWJD7887hifZm2DQ8ppt
8bdkwMb8C0JhZA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:04:54 2026 by rpki-client