Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
File: Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft (raw, json)
Hash identifier: ZNHtTm6prnFA33Hyh1ujY2a0c35+rWAHf/HRCHHTsLU=
Subject key identifier: AE:81:5D:04:E3:59:C2:5B:6F:F6:BD:F8:3F:F2:B3:99:6A:D7:91:5D
Authority key identifier: 47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3
Certificate issuer: /CN=473f498592457859f26fb5a610b7b51ef52413f3
Certificate serial: 019D25F108A8F0CF321BA20875ED39D280FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
Manifest number: 09F9
Signing time: Wed 25 Mar 2026 17:00:46 +0000
Manifest this update: Wed 25 Mar 2026 17:00:46 +0000
Manifest next update: Thu 26 Mar 2026 17:00:46 +0000
Files and hashes: 1: Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl (hash: VFZu1RYIqb9UKVO9eRir9lEK4wI7vu1MwSFW0s/zZ4s=)
2: hSwUOwAMED0n18PsqXIxOxQYAlQ.roa (hash: DbjICHwW8+pnzPKc7pAGSBb3/bjUMmNtreKRXOAvuXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:08:a8:f0:cf:32:1b:a2:08:75:ed:39:d2:80:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473f498592457859f26fb5a610b7b51ef52413f3
Validity
Not Before: Mar 25 17:00:46 2026 GMT
Not After : Mar 26 17:00:46 2026 GMT
Subject: CN=ae815d04e359c25b6ff6bdf83ff2b3996ad7915d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:2a:59:95:59:83:fd:b8:e5:35:ee:4a:10:
2e:3c:81:3f:2c:ce:62:ad:94:c5:72:f6:46:bf:17:
5d:59:68:cc:a6:54:fd:d3:19:3d:47:ee:ee:12:52:
53:f9:d5:bf:e9:34:dc:ce:fa:d6:19:ea:91:96:10:
cc:67:c7:38:b8:d6:18:d2:46:66:0e:73:68:d6:15:
0e:8f:70:11:68:86:a7:7d:d8:10:36:ba:a6:a2:66:
d6:bc:9a:7d:5f:3b:e5:2e:bb:4a:39:2b:93:7d:8c:
9c:a6:8b:d3:a7:5d:f2:41:53:4d:5f:16:fb:45:d3:
99:21:97:b8:fe:8b:09:9f:76:73:30:ac:ca:42:e4:
90:c6:f0:b7:fa:51:22:c3:b3:cc:d7:61:d3:e0:a9:
4c:c3:1c:b1:55:1d:93:b7:1d:05:c8:96:b2:0c:ed:
64:6f:64:83:13:6e:bd:6c:f8:b6:a0:94:27:fc:0a:
0d:f9:30:d4:db:a8:5f:2a:9c:a8:aa:06:a0:f3:c5:
d9:b1:a8:f9:31:85:8b:22:af:bd:21:fa:e0:a5:b2:
91:37:f3:d1:8b:f8:35:97:7c:99:08:22:65:35:90:
96:6c:7c:7f:53:36:72:81:d1:81:94:12:9e:92:bf:
aa:fb:c8:cd:ae:04:06:70:75:bd:b3:5c:5f:70:42:
cc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:81:5D:04:E3:59:C2:5B:6F:F6:BD:F8:3F:F2:B3:99:6A:D7:91:5D
X509v3 Authority Key Identifier:
keyid:47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d5:91:07:82:0e:46:6b:a9:cf:e6:9f:6b:b5:44:30:4b:3f:
cd:7e:ef:9d:42:ca:31:b6:93:b2:33:bc:30:37:29:ea:2c:2d:
fa:53:73:79:7d:b5:88:94:4a:5a:bb:df:71:58:7a:05:b8:cd:
00:56:4b:49:7a:ef:21:83:ae:f6:19:ee:8d:da:8b:42:e8:78:
ad:94:d6:24:43:ac:8d:56:94:8e:b0:03:b5:2e:91:3a:6b:3e:
21:37:74:a1:8c:07:1e:a5:7c:20:ce:ce:22:3e:b5:f5:69:50:
42:e9:76:b4:54:c5:3f:a0:e7:4c:ff:73:97:d1:ba:52:4f:74:
68:50:23:e1:5f:c0:08:b2:b4:4b:28:50:69:2f:8c:fa:a2:f9:
6b:ea:97:61:2a:ce:4b:ad:af:1c:20:4d:17:e6:6c:af:4b:bb:
28:68:0f:7d:d8:ff:23:4c:e2:3b:d3:1b:07:ad:83:43:da:af:
a2:63:70:94:fc:db:44:1f:54:a2:30:da:e8:e3:63:53:e6:bd:
1a:42:2c:81:b6:19:9e:26:16:75:de:ba:11:72:f5:1a:fb:44:
b8:59:f5:c1:13:ab:b1:4a:d6:56:b1:6d:68:f8:1f:56:52:63:
05:d7:82:e5:6e:db:c7:ef:68:12:5e:4c:de:1a:64:8b:65:00:
75:44:a1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:32 2026 by rpki-client