Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
File: RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft (raw, json)
Hash identifier: JjyWfvg8EDIbbg/BmZabkie55o4CvZZAfnOahteBmJU=
Subject key identifier: 61:EB:78:0D:A1:E8:C0:58:91:A4:C4:C2:38:91:24:4B:41:7A:6D:8F
Authority key identifier: 47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE
Certificate issuer: /CN=4735e807d349d31564f9fd546138e3598e2007ce
Certificate serial: 019D29297724F2570F5A1D84915FB16526F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
Manifest number: 119A
Signing time: Thu 26 Mar 2026 08:01:16 +0000
Manifest this update: Thu 26 Mar 2026 08:01:16 +0000
Manifest next update: Fri 27 Mar 2026 08:01:16 +0000
Files and hashes: 1: RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl (hash: rMSNCOaCFJW0XnY2BP4cQusJYbIX7nST98x6rIAH4Kc=)
2: xYQhbQyfXrOfvdiJkCemh8CpZ2k.roa (hash: 3F6vLCFxR75VhJCktR9LybENxtIsB4rpv9WYC6tqfNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:77:24:f2:57:0f:5a:1d:84:91:5f:b1:65:26:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4735e807d349d31564f9fd546138e3598e2007ce
Validity
Not Before: Mar 26 08:01:16 2026 GMT
Not After : Mar 27 08:01:16 2026 GMT
Subject: CN=61eb780da1e8c05891a4c4c23891244b417a6d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:62:54:74:e3:25:74:91:ce:a5:25:1e:92:37:
8a:2e:f4:4e:85:28:a3:a9:f7:14:9c:e1:a5:9b:9a:
80:7a:ca:75:69:47:df:28:cb:15:30:29:35:71:72:
bb:69:a5:92:7c:81:06:14:82:39:38:06:30:a9:75:
f8:fd:50:66:ce:4d:a3:1e:b5:44:ad:21:da:b6:97:
da:e4:cd:e2:25:d2:d4:a6:48:f8:25:05:23:ea:0e:
f7:28:68:b7:fd:79:81:40:25:59:30:c4:72:1b:bd:
ce:07:d0:54:2f:8f:42:fa:ac:95:1d:2c:c7:58:f7:
e6:ba:0b:64:e5:a8:ed:21:02:70:89:6f:ff:df:b2:
01:3a:84:ac:c4:6c:52:ad:ee:d1:92:04:7b:06:91:
99:fe:d9:aa:9d:ea:a4:2d:a6:0c:09:d3:b8:05:80:
1b:8c:75:5c:ee:08:9a:f4:70:53:a3:9c:b5:6e:0e:
f0:8f:ea:11:04:ef:5e:06:28:49:e0:33:8f:f2:9b:
41:1f:b6:49:34:cc:5d:50:4f:87:b0:19:e0:59:1b:
cd:20:60:ab:30:e6:b4:67:7a:12:e8:71:d6:63:c8:
02:74:91:95:d2:57:b4:0b:ad:3b:ba:a8:dc:e3:4f:
bc:2c:05:47:31:dd:bd:cc:82:90:26:16:7f:2f:26:
29:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EB:78:0D:A1:E8:C0:58:91:A4:C4:C2:38:91:24:4B:41:7A:6D:8F
X509v3 Authority Key Identifier:
keyid:47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:3e:6b:3f:18:95:9c:7d:77:d2:35:b5:c3:7b:cc:86:45:03:
e1:19:cf:f7:6e:18:0f:88:c9:eb:b5:b4:cd:fa:25:8b:21:f3:
62:de:01:95:19:89:a6:09:11:6d:a2:14:d0:b6:f2:81:06:70:
9d:a2:a9:25:b7:78:a5:1a:e0:bd:11:fb:76:40:95:65:01:12:
a4:ab:dd:57:a2:cc:d7:df:2d:f4:0f:92:36:2a:4d:40:75:b5:
ae:e8:79:de:a5:c2:60:cd:98:7b:cc:2f:a7:dc:6c:53:cd:00:
d6:98:21:29:a7:27:a8:93:c0:75:ef:30:1b:ec:9b:c4:c0:f5:
d2:9d:2c:21:e1:f5:b1:25:2a:22:0d:76:9e:21:42:4b:59:88:
cc:ef:a3:58:99:31:62:37:5c:30:85:40:de:e5:c4:82:5a:78:
b5:67:a7:7c:3b:8b:6e:fa:9c:b7:18:e8:6a:ab:99:d5:e3:65:
cf:03:a7:a5:46:11:b8:8e:66:b7:7c:fb:e1:35:a1:bc:b7:76:
45:3a:04:da:15:0e:d7:c9:d5:cd:5f:6c:cd:fc:ee:2b:82:57:
56:95:31:b2:48:1f:7b:a5:6a:f0:62:cb:40:a0:24:9e:41:52:
22:6f:94:1f:e8:4e:c0:1d:55:0f:a6:b5:bf:a2:59:ee:2f:2d:
c2:28:6b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:56:37 2026 by rpki-client