Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
File: RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft (raw, json)
Hash identifier: dLwqsGvZTFC0e0bzXBNoRbuj4m0Lt2ll4Hcl2dGYLy4=
Subject key identifier: FE:D8:AD:6F:73:E1:2F:0B:C3:80:57:9C:43:81:CE:37:FF:E9:18:DF
Authority key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
Certificate issuer: /CN=473163527e83542dce693b16d0aedcd126d3319a
Certificate serial: 019D27E039C5AEC1BEA13B0EC90C12C4D13D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 02:01:39 +0000
Manifest this update: Thu 26 Mar 2026 02:01:39 +0000
Manifest next update: Fri 27 Mar 2026 02:01:39 +0000
Files and hashes: 1: RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl (hash: HQoJPAygt+Rydjj5+DUJOhAX76Cjkr+/G5oNDjy/F5A=)
2: pFkI7meix8Wvnh8I7pdS5zO5VAs.roa (hash: IiBaDlI4V6mbfD8AaxYpOFH+8BQ1zVQO5KQlE9ThC6Y=)
3: wIc-Rh6w6YDK1W-UeGedBj1DHzA.roa (hash: AHq1ZvIykr30MtwSSGLXsUeCsh/Ryu5hRBrmdW7qIMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:39:c5:ae:c1:be:a1:3b:0e:c9:0c:12:c4:d1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473163527e83542dce693b16d0aedcd126d3319a
Validity
Not Before: Mar 26 02:01:39 2026 GMT
Not After : Mar 27 02:01:39 2026 GMT
Subject: CN=fed8ad6f73e12f0bc380579c4381ce37ffe918df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:94:85:26:ac:73:47:ca:94:33:5d:97:69:88:
6e:59:80:eb:37:78:af:96:d4:1f:b7:59:6d:d1:6e:
4b:64:5a:4f:55:f3:67:c7:93:54:7a:53:88:b9:5a:
03:f7:85:ee:d4:56:a7:ed:5f:ac:1c:8e:fd:f6:4b:
04:94:fa:dc:97:62:0a:a6:73:e0:04:b9:61:3b:b1:
5d:36:ab:84:19:44:7e:25:0b:cb:39:64:5c:9c:a9:
4b:ed:9d:f3:6e:6c:ca:7f:71:ac:f9:d0:b0:4c:e2:
ce:bf:a2:74:b2:23:e1:8d:d1:19:93:5b:ec:e4:f3:
7c:8d:33:f6:23:10:09:d6:8e:08:cc:2b:7b:72:e0:
c4:a9:cc:21:d0:db:e4:09:37:83:ba:4b:d2:d5:0d:
f0:16:d1:4c:5f:d3:fc:ac:29:94:d8:e7:47:a7:22:
35:76:21:5b:88:f8:8e:12:d0:78:88:02:82:21:e9:
a8:17:f0:2f:72:67:2e:21:97:45:ce:b0:58:b7:52:
1c:c9:35:6a:b8:98:cd:44:c2:1e:7b:78:cf:ea:df:
63:83:3e:2b:42:09:aa:81:8d:2c:d5:4f:ce:a5:2c:
5a:70:3c:3c:ae:4a:9b:88:94:a9:46:c9:e3:59:d3:
c0:67:98:a0:ee:1c:57:af:51:fc:4d:6b:c5:8c:bd:
8c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D8:AD:6F:73:E1:2F:0B:C3:80:57:9C:43:81:CE:37:FF:E9:18:DF
X509v3 Authority Key Identifier:
keyid:47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e0:a7:0d:4d:4f:56:ff:39:bd:f7:da:5c:67:65:ae:cb:d3:
eb:30:3d:82:b0:5d:29:a8:6e:08:b6:11:06:37:ed:10:60:27:
e8:bf:fb:3c:36:d0:15:f1:ec:ea:30:33:87:d2:84:7d:4b:04:
4f:69:8e:60:53:7a:1f:f1:ad:50:ff:a6:98:c8:a6:90:ae:10:
47:a8:9b:d0:48:c5:8b:4f:6e:40:78:1d:aa:01:35:b9:02:54:
ce:03:84:da:e9:f0:5d:a5:ed:b7:3e:ec:bf:42:b3:33:87:dd:
dd:64:fd:54:4f:d5:8c:bd:f7:fe:87:9c:56:ea:22:ca:89:63:
8c:e2:41:da:be:72:45:e0:95:b1:61:e6:a1:26:9c:ca:b0:1c:
46:b0:c2:32:f8:cb:a1:70:2e:8d:5b:d5:dd:74:07:57:99:f6:
48:79:c1:df:cd:92:b6:ae:a3:a3:65:13:70:b9:e6:b9:f2:3b:
47:c1:e6:ac:20:a8:0d:55:31:82:cf:ae:38:8c:38:75:e7:1f:
94:6d:d6:38:83:30:94:92:2a:90:3a:e6:8a:6b:bf:5b:fb:62:
de:e9:9d:66:20:c1:e9:8f:06:4a:e3:2c:1a:e1:20:28:38:d1:
fa:a2:ef:c8:06:ba:c4:50:db:2d:3a:02:e4:17:dc:42:d9:cf:
37:24:ca:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4DnFrsG+oTsOyQwSxNE9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MzE2MzUyN2U4MzU0MmRjZTY5M2IxNmQwYWVkY2QxMjZk
MzMxOWEwHhcNMjYwMzI2MDIwMTM5WhcNMjYwMzI3MDIwMTM5WjAzMTEwLwYDVQQD
EyhmZWQ4YWQ2ZjczZTEyZjBiYzM4MDU3OWM0MzgxY2UzN2ZmZTkxOGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJSFJqxzR8qUM12XaYhuWYDrN3iv
ltQft1lt0W5LZFpPVfNnx5NUelOIuVoD94Xu1Fan7V+sHI799ksElPrcl2IKpnPg
BLlhO7FdNquEGUR+JQvLOWRcnKlL7Z3zbmzKf3Gs+dCwTOLOv6J0siPhjdEZk1vs
5PN8jTP2IxAJ1o4IzCt7cuDEqcwh0NvkCTeDukvS1Q3wFtFMX9P8rCmU2OdHpyI1
diFbiPiOEtB4iAKCIemoF/AvcmcuIZdFzrBYt1IcyTVquJjNRMIee3jP6t9jgz4r
QgmqgY0s1U/OpSxacDw8rkqbiJSpRsnjWdPAZ5ig7hxXr1H8TWvFjL2MwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7YrW9z4S8Lw4BXnEOBzjf/6RjfMB8GA1UdIwQY
MBaAFEcxY1J+g1Qtzmk7FtCu3NEm0zGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpGalVuNkRWQzNPYVRzVzBLN2MwU2JUTVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hYjIzODktOGQzNi00M2ZlLWFmNDIt
OWEzODQxOTY3MTgxLzEvUnpGalVuNkRWQzNPYVRzVzBLN2MwU2JUTVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9hYjIzODktOGQzNi00M2ZlLWFmNDItOWEzODQxOTY3MTgx
LzEvUnpGalVuNkRWQzNPYVRzVzBLN2MwU2JUTVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAduCnDU1P
Vv85vffaXGdlrsvT6zA9grBdKahuCLYRBjftEGAn6L/7PDbQFfHs6jAzh9KEfUsE
T2mOYFN6H/GtUP+mmMimkK4QR6ib0EjFi09uQHgdqgE1uQJUzgOE2unwXaXttz7s
v0KzM4fd3WT9VE/VjL33/oecVuoiyoljjOJB2r5yReCVsWHmoSacyrAcRrDCMvjL
oXAujVvV3XQHV5n2SHnB382Stq6jo2UTcLnmufI7R8HmrCCoDVUxgs+uOIw4decf
lG3WOIMwlJIqkDrmimu/W/ti3umdZiDB6Y8GSuMsGuEgKDjR+qLvyAa6xFDbLToC
5BfcQtnPNyTK3w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:28 2026 by rpki-client