Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.mft
File: DEIZ0r8JtphczV1I_ZTSshuATsY.mft (raw, json)
Hash identifier: 94BS3DCBScL6LYsVi7fbzlIVbDtp8zpxhma2tBgZMtQ=
Subject key identifier: 87:86:F9:E2:18:6D:2D:E7:B0:DD:36:21:28:03:95:89:D2:7F:AE:2F
Authority key identifier: 0C:42:19:D2:BF:09:B6:98:5C:CD:5D:48:FD:94:D2:B2:1B:80:4E:C6
Certificate issuer: /CN=0c4219d2bf09b6985ccd5d48fd94d2b21b804ec6
Certificate serial: 019D2628048DD3363A51242BEE0CF2691B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEIZ0r8JtphczV1I_ZTSshuATsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.mft
Manifest number: 8B
Signing time: Wed 25 Mar 2026 18:00:49 +0000
Manifest this update: Wed 25 Mar 2026 18:00:49 +0000
Manifest next update: Thu 26 Mar 2026 18:00:49 +0000
Files and hashes: 1: DEIZ0r8JtphczV1I_ZTSshuATsY.crl (hash: mgdeK2ZendTXuirWCHMEslSS1b9yl8akmM0iDag3DfE=)
2: GViLUpBKhpnABkhMhuMdD2J_oqw.roa (hash: 7Bdn6jISx+wiSsw/Erals+/gDIwz2wOl6w9gjca7wOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DEIZ0r8JtphczV1I_ZTSshuATsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:04:8d:d3:36:3a:51:24:2b:ee:0c:f2:69:1b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4219d2bf09b6985ccd5d48fd94d2b21b804ec6
Validity
Not Before: Mar 25 18:00:49 2026 GMT
Not After : Mar 26 18:00:49 2026 GMT
Subject: CN=8786f9e2186d2de7b0dd362128039589d27fae2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2b:05:e6:79:c7:0f:b1:57:82:9b:43:fa:ec:
c3:a0:5a:eb:5d:fc:f7:e8:82:7f:1b:8d:23:91:7c:
eb:c3:46:3f:8f:3d:52:32:3d:92:9a:e9:8c:d3:54:
6d:25:a5:9f:41:99:8b:df:6f:c0:01:7d:0e:0a:33:
c6:d4:01:c5:9a:03:6e:09:ab:84:43:21:a7:73:ac:
fa:e9:70:c1:7a:f6:42:3e:76:a0:f8:4d:8a:c4:3e:
a8:a4:ca:32:d0:e4:11:af:73:9e:d4:31:7b:51:38:
b6:52:9f:f3:d5:6c:97:06:8c:00:30:6f:c9:88:0f:
79:df:c6:a2:be:27:17:c6:7e:bd:5f:08:ad:ec:fd:
59:17:a0:99:3c:46:ee:17:e9:35:7f:7e:d9:87:ba:
fe:a7:94:3a:90:b9:fb:d5:64:f6:7a:f3:18:a7:1a:
3c:a5:9d:4b:db:fe:45:5d:6a:82:0d:5b:d3:aa:7e:
fa:cd:73:98:bf:d4:67:65:2d:c5:ac:3c:39:3b:c8:
e2:08:f9:cb:32:e2:ad:00:50:34:50:20:d2:5d:e2:
70:2f:a8:76:2f:20:9b:9e:d0:a9:11:9b:19:b8:92:
f3:14:6b:4d:93:35:86:07:32:f7:41:d7:af:f3:45:
89:75:81:98:0d:80:3b:df:5c:75:8b:12:14:b5:d6:
88:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:86:F9:E2:18:6D:2D:E7:B0:DD:36:21:28:03:95:89:D2:7F:AE:2F
X509v3 Authority Key Identifier:
keyid:0C:42:19:D2:BF:09:B6:98:5C:CD:5D:48:FD:94:D2:B2:1B:80:4E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEIZ0r8JtphczV1I_ZTSshuATsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:96:56:ef:1a:50:1f:f8:19:f6:a1:4f:4e:65:8b:c7:a3:13:
53:a7:e6:b3:5c:ca:4f:20:ca:ee:81:6b:0d:a9:1f:3f:ec:3e:
31:0a:f1:bf:ec:21:f5:75:ff:64:66:19:6c:a1:aa:66:7f:74:
fd:e9:60:b1:a3:c9:ca:6d:cf:4d:0a:d6:27:df:37:a0:f3:9c:
7f:c8:a5:b0:74:7a:dd:25:69:7b:25:6d:a5:7c:f6:6a:e7:d5:
ff:47:09:63:1d:10:4b:dd:7e:28:5b:01:7d:fc:66:90:4b:16:
a3:e1:cd:19:bb:81:66:73:15:99:78:10:41:2b:7b:97:62:10:
2e:b1:af:24:48:2e:25:8d:47:d7:60:d0:72:93:e9:b4:de:8b:
6c:98:04:99:af:64:00:58:15:e0:bf:ee:fc:e9:9e:ac:4a:17:
d7:ed:67:de:ed:b0:f1:51:5a:db:10:08:49:ac:5d:5e:d1:f9:
7b:0d:55:2c:f5:00:20:c9:a3:17:48:79:c6:41:3b:09:d4:fa:
1a:cb:03:8b:08:54:d8:66:60:0b:29:aa:f0:b3:a7:27:88:64:
fe:ca:fd:09:14:44:63:f8:6d:9d:e3:a3:e7:02:d0:17:9f:43:
91:65:9e:73:dc:95:cd:15:cd:91:65:f6:78:d5:71:25:aa:56:
1f:39:e8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:31 2026 by rpki-client