Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft
File: RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft (raw, json)
Hash identifier: 4Wf8n7+tOPJ9BxEPy/0bJkfcEx9asOB9aPKqF1C0NJc=
Subject key identifier: 1F:DE:D8:33:AA:F5:19:C1:3F:3E:87:88:05:17:D9:89:8E:86:BE:22
Authority key identifier: 47:32:D0:FC:E8:3F:B6:73:82:CE:AC:E3:75:6C:8B:13:C0:A9:5C:98
Certificate issuer: /CN=4732d0fce83fb67382ceace3756c8b13c0a95c98
Certificate serial: 019D27DF6781167514F89459A1C223681833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft
Manifest number: 0EC6
Signing time: Thu 26 Mar 2026 02:00:45 +0000
Manifest this update: Thu 26 Mar 2026 02:00:45 +0000
Manifest next update: Fri 27 Mar 2026 02:00:45 +0000
Files and hashes: 1: NLYSEvng8AX2VRtPGTIcyZbKRjk.roa (hash: Y4zpwbKI5+zqZBTRqFeBCG4Xc2c73w3Ij+kGXRrc9Tg=)
2: RzLQ_Og_tnOCzqzjdWyLE8CpXJg.crl (hash: n0VK42dKMS97gm8koOwa1CggLYev67Z1cvEyzrJtC7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:67:81:16:75:14:f8:94:59:a1:c2:23:68:18:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4732d0fce83fb67382ceace3756c8b13c0a95c98
Validity
Not Before: Mar 26 02:00:45 2026 GMT
Not After : Mar 27 02:00:45 2026 GMT
Subject: CN=1fded833aaf519c13f3e87880517d9898e86be22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:29:62:54:cb:34:c9:e3:f5:6c:e5:71:13:22:
8e:0d:80:2b:2c:f2:5e:de:0c:08:5a:2d:91:c2:29:
31:f9:51:72:85:dc:38:d4:16:13:21:35:d0:96:31:
82:55:ef:c0:61:12:e6:46:60:ce:77:14:48:77:42:
5e:ab:9a:53:9c:a8:6a:86:14:a4:a1:cd:51:2b:af:
bf:fc:75:9f:15:95:67:fe:d6:63:d3:d5:97:7f:45:
b3:e1:af:2c:e1:a5:04:0e:3b:f9:d3:ca:28:d7:8d:
ce:7c:ee:63:6e:24:91:07:c8:e7:c5:26:d2:ec:ac:
e1:4f:c4:05:72:aa:b9:26:b2:f2:a6:2e:0e:55:16:
45:f7:22:cf:2b:0c:fc:94:8b:04:90:2f:15:24:4f:
a9:bc:4f:21:02:77:46:54:79:5d:95:55:e8:0a:69:
46:ce:ce:02:56:de:52:5c:cb:7e:b5:2d:85:85:8f:
44:5d:96:89:ff:02:2f:7e:bf:b1:ba:40:4a:e2:ea:
f5:41:83:a3:51:36:ae:36:f9:39:38:22:5c:4b:e9:
80:cc:82:15:63:9e:73:e7:be:fd:a7:4d:2e:9b:85:
a1:da:29:4d:24:55:45:ab:97:88:e1:4d:6b:06:e1:
21:fd:48:88:f8:96:4b:5d:84:cb:86:fa:34:ad:5c:
1b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DE:D8:33:AA:F5:19:C1:3F:3E:87:88:05:17:D9:89:8E:86:BE:22
X509v3 Authority Key Identifier:
keyid:47:32:D0:FC:E8:3F:B6:73:82:CE:AC:E3:75:6C:8B:13:C0:A9:5C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:05:64:a1:17:50:23:fb:ef:43:82:09:ad:2d:97:7f:04:3a:
1d:be:65:8a:cf:29:1b:10:3c:5a:94:4c:ba:ab:91:9a:50:5e:
78:0e:2d:c9:33:be:5e:41:8e:ab:5b:02:a5:92:7f:e4:68:4e:
15:11:aa:e4:de:5e:3c:8f:70:b3:1b:84:4b:76:13:ef:b1:35:
ec:f3:ac:8c:be:33:bc:26:5d:31:ce:b2:cd:00:aa:e9:c3:63:
37:b6:13:79:7b:ed:61:ae:e5:63:cd:62:fc:6c:c7:73:be:9c:
b8:70:33:c1:d5:79:6b:61:d7:8f:dc:ba:12:71:98:dc:aa:33:
fc:77:37:a2:fe:53:6b:50:7f:4c:f9:62:f7:6a:4e:68:aa:8b:
33:03:ff:37:8e:cd:9a:87:cb:07:c9:e2:dd:f7:19:ba:13:82:
15:13:a6:66:93:c8:ad:8b:97:df:53:f2:b3:11:7a:5c:04:80:
3b:5b:0c:50:b0:50:bf:6c:89:f1:74:29:2e:4a:61:a2:19:eb:
c0:5b:3b:5f:3a:e9:62:50:76:09:72:d4:63:3a:9b:8a:99:3a:
0b:7a:53:9c:60:60:67:ae:af:b0:cd:04:aa:cf:c4:13:54:c0:
75:b4:be:0a:f9:03:af:06:bd:da:81:fc:7f:ce:89:4a:85:f9:
03:59:b1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:36:53 2026 by rpki-client