Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
File: sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft (raw, json)
Hash identifier: iSIYWLfP61joo5joaN3nKXoCcTdJBdi244N4scO+Q7g=
Subject key identifier: C1:0C:93:92:3A:D6:AF:E0:FC:34:B5:A7:7B:1A:E6:9C:BA:85:89:75
Authority key identifier: B1:95:49:D6:83:05:E2:9D:FB:00:06:9A:52:D3:D4:E1:F2:C5:60:4C
Certificate issuer: /CN=b19549d68305e29dfb00069a52d3d4e1f2c5604c
Certificate serial: 019D273AABA7C391A45C7901E89F12D84274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
Manifest number: 0D03
Signing time: Wed 25 Mar 2026 23:00:49 +0000
Manifest this update: Wed 25 Mar 2026 23:00:49 +0000
Manifest next update: Thu 26 Mar 2026 23:00:49 +0000
Files and hashes: 1: q0Y1p5XaMB9ViOtAFAUBAb62WEo.roa (hash: Y0brd6EFMahPzlPl3xKPC6MzSQAtYq85BSXJQ3hFrzY=)
2: sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl (hash: DR9ChXpz0NxJct89Mxkhi7MOPPYzEMz7KUL05gCvSjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ab:a7:c3:91:a4:5c:79:01:e8:9f:12:d8:42:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19549d68305e29dfb00069a52d3d4e1f2c5604c
Validity
Not Before: Mar 25 23:00:49 2026 GMT
Not After : Mar 26 23:00:49 2026 GMT
Subject: CN=c10c93923ad6afe0fc34b5a77b1ae69cba858975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:29:d2:ad:3a:52:0d:68:3c:8d:bf:86:fd:e1:
b4:93:a1:6d:f6:e6:a2:7f:84:15:d3:5c:d3:5c:a8:
7b:f2:55:04:a9:11:13:95:db:2d:72:9b:09:83:53:
4c:19:f1:de:17:4d:24:5b:01:dd:c4:1b:bc:80:38:
d1:32:ee:b7:eb:c9:e6:b5:c4:2b:84:57:9a:f5:8a:
03:82:d3:88:1b:c6:33:f6:3f:5c:85:b7:d6:d8:98:
1d:44:69:ea:98:84:69:41:e1:cd:cc:c0:40:2d:54:
7a:d9:8c:b9:f3:5d:e1:82:df:7b:c9:9e:4b:ff:8f:
61:03:8a:d8:32:2d:f2:97:07:c2:54:4e:f4:8c:c3:
20:6c:81:bf:7d:1c:82:a1:a5:16:69:c4:e8:8c:f5:
28:e7:0d:18:89:77:3a:02:4a:09:3a:b7:f5:e9:86:
58:15:3a:27:9c:6b:10:e1:7f:78:22:c5:c0:f7:50:
8f:cd:69:5b:e0:91:f7:1c:c5:53:c8:6b:8b:e0:eb:
a9:b4:79:c0:b2:62:d4:47:4f:f0:c9:c5:df:10:f2:
b3:14:84:ec:64:7b:9c:64:e7:e3:e4:c3:2d:d9:e3:
fd:a2:e6:69:03:c3:4b:af:27:0c:3a:0b:08:e9:c2:
4c:65:44:62:6c:f1:47:cd:87:18:f6:60:ba:73:71:
e2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0C:93:92:3A:D6:AF:E0:FC:34:B5:A7:7B:1A:E6:9C:BA:85:89:75
X509v3 Authority Key Identifier:
keyid:B1:95:49:D6:83:05:E2:9D:FB:00:06:9A:52:D3:D4:E1:F2:C5:60:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:89:ff:89:c8:87:b3:01:0c:a8:4c:16:73:d6:af:77:b5:33:
3d:0e:94:a9:78:e0:6c:84:97:41:f1:f0:67:34:a0:d9:dc:33:
64:1c:b8:98:69:70:61:d5:df:d9:75:84:61:be:ac:85:f5:55:
b4:a9:bd:8a:71:a1:e4:60:6c:c1:05:29:f5:8b:50:cc:cb:cc:
d6:a2:64:ec:41:66:64:b4:a0:64:18:3e:3e:96:74:2a:8e:c0:
c2:b2:e1:49:40:51:18:8d:1f:17:3d:57:a6:3c:51:35:2e:13:
b0:07:c9:b5:7f:9d:14:26:38:22:f7:f0:66:49:9f:5e:ab:0b:
18:f5:a3:78:b4:94:82:f4:2c:1f:4e:26:5c:28:0f:3a:2e:9d:
ba:41:33:79:a0:06:38:dc:67:1f:d0:05:c3:b5:b5:b1:bf:8d:
da:9a:f7:7c:84:f8:ef:1b:41:a8:ee:47:8c:b9:42:89:42:15:
6e:03:fb:01:68:e1:ae:da:6d:f5:a0:67:b5:b5:d7:1d:77:6f:
55:31:26:a1:c9:ac:10:21:3a:a7:c0:7a:ca:f5:14:ef:58:8f:
99:42:a5:16:8e:df:23:3d:60:2a:b6:d6:cd:70:8c:61:6a:c1:
cf:af:41:9f:f8:d0:b0:bc:83:f9:20:5a:09:79:d9:cd:6a:d1:
7a:d5:5b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:54 2026 by rpki-client