Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft
File: _RHEZUr3AuWW61DRP6SG202bzgo.mft (raw, json)
Hash identifier: ZnoAei3Dqh5wN4IP/qoPdLWF+jxVo3x7F9V+uYXFy4g=
Subject key identifier: CB:83:45:63:2C:DD:EB:36:37:27:87:EA:AE:91:C8:5E:2F:8E:BF:3A
Authority key identifier: FD:11:C4:65:4A:F7:02:E5:96:EB:50:D1:3F:A4:86:DB:4D:9B:CE:0A
Certificate issuer: /CN=fd11c4654af702e596eb50d13fa486db4d9bce0a
Certificate serial: 019D2772D7D1F8A2F258B290F7C69DD4BABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 00:02:10 +0000
Manifest this update: Thu 26 Mar 2026 00:02:10 +0000
Manifest next update: Fri 27 Mar 2026 00:02:10 +0000
Files and hashes: 1: RmRjeHQ5LHoRU1fZMCv-SARJc8c.roa (hash: zv/hPQoqGigtS053rI8GEj09bwC8kZaEZlvkwBWS8G8=)
2: _RHEZUr3AuWW61DRP6SG202bzgo.crl (hash: mTBGe32Vjy3ErGbbAvebV2A2Hp7mbrZqWc85rWqYg/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:d7:d1:f8:a2:f2:58:b2:90:f7:c6:9d:d4:ba:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd11c4654af702e596eb50d13fa486db4d9bce0a
Validity
Not Before: Mar 26 00:02:10 2026 GMT
Not After : Mar 27 00:02:10 2026 GMT
Subject: CN=cb8345632cddeb36372787eaae91c85e2f8ebf3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:85:ac:a2:5b:37:24:c2:07:82:4b:92:1f:
23:b8:2e:b9:ce:62:4d:4a:8e:c6:03:99:ef:bc:c3:
88:32:93:17:d0:ea:73:be:a5:ef:23:0a:d7:a8:2b:
35:47:5f:85:09:9f:60:eb:00:d6:40:b9:c3:ad:d7:
9b:21:05:d8:1f:a3:67:42:82:55:cd:d3:55:a0:6c:
fb:67:3f:66:1e:ee:92:93:66:fd:59:1f:73:9f:d6:
66:23:0d:e3:a3:d9:2c:76:b3:cc:4a:c7:db:b1:47:
a4:3d:24:55:a0:4e:72:51:9e:c8:8b:60:59:a1:6e:
8a:79:1a:1b:09:04:32:ef:b6:a3:1a:68:03:1b:ee:
9f:1d:93:76:4e:4a:1f:3a:fd:55:71:60:d8:ca:b1:
0d:bf:28:da:e6:ea:39:b5:f0:68:ec:c2:d9:0d:f8:
84:a5:fa:c7:d3:ea:50:7f:a1:72:1c:61:f4:d1:91:
bf:c9:fe:b9:29:bb:01:11:80:74:87:78:d0:25:b5:
15:8a:41:69:80:eb:0d:07:1e:55:d0:8e:e5:20:54:
b6:88:d7:e4:99:bf:6c:af:d2:62:87:6c:49:b8:39:
67:c6:1b:cd:1f:cd:04:aa:19:ce:5c:45:54:bc:24:
26:a9:c7:29:46:d7:94:a9:33:46:75:1d:e0:c8:d9:
22:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:83:45:63:2C:DD:EB:36:37:27:87:EA:AE:91:C8:5E:2F:8E:BF:3A
X509v3 Authority Key Identifier:
keyid:FD:11:C4:65:4A:F7:02:E5:96:EB:50:D1:3F:A4:86:DB:4D:9B:CE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:bf:05:09:13:71:bd:17:07:83:7d:40:a7:5c:bb:1f:f4:89:
b0:e3:dd:7a:19:c6:53:c2:97:9e:76:f8:07:38:b0:3c:1a:e2:
6e:6a:e6:ff:07:18:32:63:17:6a:06:bc:b3:cc:de:2e:98:f0:
34:86:e4:7a:54:8d:3d:4c:57:8f:b7:5a:63:9b:a1:12:f1:44:
58:2f:d7:6b:0d:62:fc:a0:f7:74:18:5c:59:0b:bb:cd:ea:a0:
99:b6:ff:eb:2e:5a:27:74:8e:a7:36:9f:2c:d9:b0:df:93:02:
c4:fe:2e:4e:06:2e:30:1e:76:b7:cf:3c:f8:71:1e:9c:48:36:
19:2b:be:69:fb:98:74:c2:c5:cc:b9:d4:f4:b4:77:7d:45:b2:
0a:0e:0d:a0:99:43:0b:7a:ba:10:9d:ee:0c:df:3c:8e:9a:39:
e0:95:55:0c:7e:11:9a:1c:9b:4d:94:33:b3:68:44:dd:3e:22:
95:33:11:56:72:fd:37:0b:47:30:5c:b6:6c:50:b0:8f:4a:0c:
e1:a9:81:b3:06:d4:5b:4c:32:7f:5a:ac:9b:b9:1a:9f:ee:1d:
3d:80:ab:cf:de:23:39:21:07:8c:1e:c4:53:22:68:73:cc:20:
ce:e7:4e:eb:43:f3:28:5e:81:25:5a:0b:a1:6b:48:36:bc:5d:
8b:8e:4b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:54 2026 by rpki-client