Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
File: rz9wBQP0ByCoL3bvFc2mICLx-ak.mft (raw, json)
Hash identifier: 20Si/D2HsPNeTt81nPqugQ30mw1ppRhiM1y8HELZR8k=
Subject key identifier: 4E:38:D6:F2:CA:E2:4C:D0:30:B2:C0:3D:EF:87:67:8D:E5:0F:9C:C9
Authority key identifier: AF:3F:70:05:03:F4:07:20:A8:2F:76:EF:15:CD:A6:20:22:F1:F9:A9
Certificate issuer: /CN=af3f700503f40720a82f76ef15cda62022f1f9a9
Certificate serial: 019D26280EFB445E21EF582B5BD25EA45FB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
Manifest number: 0F4C
Signing time: Wed 25 Mar 2026 18:00:52 +0000
Manifest this update: Wed 25 Mar 2026 18:00:52 +0000
Manifest next update: Thu 26 Mar 2026 18:00:52 +0000
Files and hashes: 1: 8LnVsjH2EwUmwFrvwngeTt29sfc.roa (hash: zoMdGFAt0JgG0lcHzQngcTPabdRrKnSlHq63qMuC6dU=)
2: rz9wBQP0ByCoL3bvFc2mICLx-ak.crl (hash: Sdkrb40MM09WYRgTcG08ExO8/LMMDsNBMfdqyJFdhNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:0e:fb:44:5e:21:ef:58:2b:5b:d2:5e:a4:5f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3f700503f40720a82f76ef15cda62022f1f9a9
Validity
Not Before: Mar 25 18:00:52 2026 GMT
Not After : Mar 26 18:00:52 2026 GMT
Subject: CN=4e38d6f2cae24cd030b2c03def87678de50f9cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:29:f4:89:83:0e:5d:5f:7c:3d:21:9d:d3:d0:
cb:50:fe:a3:ae:98:dc:4f:7f:11:74:0f:16:0e:fa:
ff:d1:0b:b1:b4:01:a9:4d:60:a3:a4:0e:db:23:83:
04:c5:13:03:fc:13:73:fa:fa:bf:79:ae:97:09:9a:
f7:b9:62:bd:a6:16:f9:57:1e:96:76:e3:04:9c:10:
90:33:f2:cc:b7:3f:ce:75:a0:d6:57:e9:ba:c8:51:
0a:36:ce:7a:25:54:96:85:60:00:60:34:cb:ad:91:
a8:1e:33:d4:47:ab:c6:e2:95:70:10:d3:4e:26:da:
49:2d:76:e0:40:ea:80:52:6a:9c:95:eb:f6:e1:49:
15:80:9e:83:fe:cb:a4:4c:65:80:a3:93:8a:9f:99:
22:5c:a3:59:30:81:17:a0:ad:0c:13:7f:7b:bb:d8:
91:5c:92:bf:d3:9a:29:7a:6b:e9:54:68:6b:6b:e5:
6f:90:d9:27:17:73:6b:1f:e0:40:9d:85:84:bc:cc:
ce:c5:a5:39:7c:bb:42:fe:7f:20:34:f1:87:d7:ae:
d4:c4:fd:ac:80:9e:8b:3f:df:58:dd:d5:6d:ca:51:
0a:2e:0f:c6:af:cd:b0:3a:4f:ee:52:45:a7:9c:15:
d7:fe:02:27:6c:ac:b3:88:d3:e3:1f:92:d8:2e:7b:
fc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:38:D6:F2:CA:E2:4C:D0:30:B2:C0:3D:EF:87:67:8D:E5:0F:9C:C9
X509v3 Authority Key Identifier:
keyid:AF:3F:70:05:03:F4:07:20:A8:2F:76:EF:15:CD:A6:20:22:F1:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:a8:cd:15:89:76:00:95:e6:c5:a4:bc:0f:0e:f6:ce:9d:bc:
0c:e1:8c:63:c6:33:f3:16:c6:ef:59:b7:7c:7a:f6:2d:7b:85:
d2:de:6d:4c:0f:9e:24:20:8e:95:02:d2:22:2a:3a:33:63:91:
58:c6:33:c6:85:41:e5:8b:c7:f8:f0:42:0f:00:d1:90:09:15:
6c:74:25:c0:0f:cc:ed:74:62:4c:80:0a:50:ef:32:3d:7b:31:
eb:d3:7a:c6:37:5a:2b:75:4b:f0:fe:9d:08:bf:9d:43:94:7a:
92:3d:68:79:e3:61:83:d6:ab:f4:2a:b2:37:f0:8c:49:dc:3c:
b9:bb:9b:01:ec:10:8c:9e:33:ca:0e:63:50:77:65:78:16:55:
6d:5b:61:13:6d:e2:aa:38:87:15:82:01:19:81:e4:e5:09:b3:
27:cd:1b:e9:05:6b:7f:4e:7c:2e:90:db:06:b6:8b:90:4e:81:
90:58:f0:e0:bd:04:1f:34:a5:a9:f6:87:98:8d:50:a1:1b:d3:
6a:ed:03:ce:32:92:5e:a1:a7:d7:fa:99:f5:20:35:07:4d:a9:
5e:37:af:c8:7f:52:42:34:45:18:b2:6a:32:62:b7:b1:34:2d:
4b:43:e4:1f:51:75:c1:48:63:49:81:57:62:33:cc:52:84:24:
d6:2f:a5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:48:56 2026 by rpki-client