Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
File: RRZvo3x2TNxioAvKKyssh5_2mdk.mft (raw, json)
Hash identifier: VkZ5KIeMpJG8A0T8ctWBF6YreOmjgArkHzrnAQK3+CE=
Subject key identifier: 2D:B1:4F:0A:4E:7C:13:F1:EF:6E:ED:22:68:01:90:D3:41:FB:F1:45
Authority key identifier: 45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9
Certificate issuer: /CN=45166fa37c764cdc62a00bca2b2b2c879ff699d9
Certificate serial: 019D333F159E0CC43EE19545428EA77DB9AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
Manifest number: 0F63
Signing time: Sat 28 Mar 2026 07:01:05 +0000
Manifest this update: Sat 28 Mar 2026 07:01:05 +0000
Manifest next update: Sun 29 Mar 2026 07:01:05 +0000
Files and hashes: 1: KxHEVmH4ZzisTbT08NTktg-60iA.roa (hash: b0du6Bjw3gRNHV7fsxqZsIbVFbvqTTXS/uOc0leO4zU=)
2: RRZvo3x2TNxioAvKKyssh5_2mdk.crl (hash: tfSsCgcuf3yvcEdCrI8vsXzn85kIVCnCYNK9dUKjZn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3f:15:9e:0c:c4:3e:e1:95:45:42:8e:a7:7d:b9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45166fa37c764cdc62a00bca2b2b2c879ff699d9
Validity
Not Before: Mar 28 07:01:05 2026 GMT
Not After : Mar 29 07:01:05 2026 GMT
Subject: CN=2db14f0a4e7c13f1ef6eed22680190d341fbf145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4b:d0:31:76:29:27:ec:2d:72:3f:19:fd:8f:
8c:fd:67:61:bf:4a:89:b7:fc:8d:fd:2e:5f:b8:57:
fe:75:8b:17:b5:dd:18:e0:78:0b:16:d8:98:73:f7:
10:0e:5b:97:b9:40:73:45:f3:66:73:9a:fe:d8:74:
1e:2b:ca:33:6c:61:d2:b7:35:f1:f3:19:34:31:b8:
53:89:64:9f:59:6c:2b:e4:59:8a:58:1a:51:52:8d:
34:50:32:a9:d2:db:78:00:5f:cf:89:cf:07:a4:f6:
aa:60:f5:dd:2e:0a:0d:6e:a9:47:3e:dd:63:83:b3:
84:96:cf:80:00:0d:9d:62:92:b9:26:68:84:17:ef:
09:40:5c:0c:4a:79:6e:15:75:b0:04:2f:44:ca:48:
7e:a3:46:48:c3:dc:dc:57:79:34:3d:80:c0:8d:aa:
a1:90:cc:a2:de:5c:5f:5e:d2:79:ba:a7:c8:41:72:
9c:7e:eb:a3:0b:7e:49:dd:8f:b2:cc:69:16:02:6c:
3a:f7:e5:18:ad:e8:0d:a4:ce:75:6b:e0:6f:f5:ec:
b6:f5:63:15:6c:d3:4e:b0:0e:20:5e:02:90:7d:fa:
65:93:91:94:b0:61:74:70:22:3e:31:4b:a6:ad:9b:
d3:02:64:1d:a8:fb:f3:f5:02:bc:7c:99:d3:04:d6:
ff:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B1:4F:0A:4E:7C:13:F1:EF:6E:ED:22:68:01:90:D3:41:FB:F1:45
X509v3 Authority Key Identifier:
keyid:45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:35:14:7c:70:86:5c:36:3b:62:18:16:8c:df:35:8c:de:4f:
c6:e2:b8:8d:36:e5:67:a6:fe:35:f5:4b:ed:6e:a7:73:bc:3e:
47:9b:f1:d9:44:24:8a:73:43:3b:7e:84:6e:04:d5:e7:e0:e8:
37:18:5d:da:c9:a8:42:81:7b:56:bb:d7:04:09:38:eb:de:a3:
91:cd:64:57:77:c1:6b:e4:f7:55:38:d2:ac:ca:f6:47:ca:79:
99:cd:1e:e6:e2:46:31:ca:56:e5:70:f5:f3:22:01:fa:6c:4d:
f8:0a:e4:ed:f5:90:0a:68:ef:b9:ad:1a:ef:53:b3:cf:3e:83:
4e:10:11:a7:93:40:78:ed:92:08:dd:a5:30:05:ed:e5:ad:fa:
4b:e3:a6:af:35:2c:77:14:29:63:33:fc:de:a6:0e:af:0c:be:
44:8b:26:38:4a:7f:c6:db:da:17:d5:e7:ad:34:19:d0:21:2c:
db:ff:45:03:d7:95:84:6e:a1:4e:41:9c:74:eb:ca:a3:7f:94:
42:3c:2b:f3:f7:7c:a7:be:eb:34:46:a1:a0:1e:3d:6f:40:b6:
64:89:21:b3:a8:be:78:1a:59:9e:8a:e3:38:9b:4c:a2:74:29:
ea:aa:0c:40:48:89:3f:01:5b:c6:75:ff:f4:f5:3e:fd:e9:08:
d8:bb:31:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:16:33 2026 by rpki-client