Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
File: dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft (raw, json)
Hash identifier: FBZugX10SpJOF9MHMSbV7edhfBL0wWsL5ma0sMpCC+U=
Subject key identifier: 5C:58:4F:A3:1F:68:93:7F:1B:E5:83:47:CD:F3:8E:5A:68:9C:2D:B7
Authority key identifier: 75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
Certificate issuer: /CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Certificate serial: 019D25F192FAE7D7957E3822DC00159C2881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
Manifest number: 0CAF
Signing time: Wed 25 Mar 2026 17:01:21 +0000
Manifest this update: Wed 25 Mar 2026 17:01:21 +0000
Manifest next update: Thu 26 Mar 2026 17:01:21 +0000
Files and hashes: 1: cLTBY0x98iSs-6Cq3vbECPm_74w.asa (hash: 8w6sqSdlGvX1lbVCngXKKl24zTm7KhQKQzRK40Ycchc=)
2: dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl (hash: /ySBgpccpZZrONR6yXgcqxMhj0CRAsS162F2I85D7Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:92:fa:e7:d7:95:7e:38:22:dc:00:15:9c:28:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Validity
Not Before: Mar 25 17:01:21 2026 GMT
Not After : Mar 26 17:01:21 2026 GMT
Subject: CN=5c584fa31f68937f1be58347cdf38e5a689c2db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:00:2a:c6:06:e1:0d:6f:4a:ef:ad:e2:7e:7b:
8e:13:34:ca:94:14:a9:eb:b8:1c:84:ef:4f:71:73:
0c:dc:f1:b7:b2:b2:2d:67:0e:51:ef:76:dd:33:14:
82:2b:be:e6:2d:16:73:75:20:b0:6d:67:20:62:74:
eb:04:30:a1:c9:c6:3d:8c:34:ae:c1:37:79:59:61:
79:15:44:08:9f:63:74:d6:84:95:39:77:e4:88:87:
9c:99:13:41:12:01:7c:42:e9:c0:12:fb:99:09:0e:
5b:74:91:59:b6:f8:e1:b0:ab:c7:be:aa:35:96:76:
fd:36:36:1a:43:a3:fa:d1:7f:1c:ba:59:61:d2:10:
92:bf:3d:a8:54:f5:b9:31:3e:10:26:64:be:f2:31:
be:d6:ad:e9:e2:7f:02:06:92:89:16:3d:2a:f0:0f:
95:31:a8:11:98:cf:61:c4:ec:ee:eb:59:b8:fb:c8:
e4:23:02:31:ab:72:3e:18:18:14:c4:9a:0e:8e:b2:
53:98:35:91:73:9d:ba:78:5f:6d:90:59:b8:1d:43:
40:12:a7:7b:31:4f:36:21:70:ab:94:30:17:4e:b1:
ac:59:b6:34:79:69:9a:68:e9:e6:6a:1a:29:e5:19:
9e:52:31:ce:83:a4:e1:0c:72:f7:f7:d8:63:65:05:
a1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:58:4F:A3:1F:68:93:7F:1B:E5:83:47:CD:F3:8E:5A:68:9C:2D:B7
X509v3 Authority Key Identifier:
keyid:75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:12:d6:ff:d6:f8:96:c9:5d:d2:b0:4f:79:49:90:69:25:80:
82:40:ed:66:e0:6a:83:17:a3:3c:28:eb:b0:af:18:39:e0:2b:
09:e5:c0:f7:4f:db:81:44:ab:ad:1e:7a:55:d9:6a:f5:7f:4a:
06:2a:ad:9e:0a:03:e9:95:0b:20:67:cd:74:5c:75:a8:ae:f9:
5b:38:b1:5f:b8:d4:6a:38:04:e2:44:d1:f7:eb:c4:73:53:f2:
67:ba:c7:5b:11:b7:14:09:93:17:49:99:cb:c4:93:c1:9f:d8:
fe:73:95:b4:33:82:4d:f5:7b:cc:e1:a5:51:82:88:6a:77:20:
ee:c3:4d:cf:52:68:50:67:ca:f1:04:a5:a4:ce:71:7b:7e:7e:
57:d1:e6:7b:23:5a:7e:0d:a2:93:84:f3:eb:3d:0e:80:6e:87:
fb:e6:19:06:49:86:e4:19:42:99:94:9d:e5:81:f3:02:1a:ce:
54:35:34:34:29:bb:33:57:48:3a:cb:78:a4:12:2c:24:d5:39:
4a:1d:c8:3c:ac:93:24:10:4b:4f:62:78:05:7a:78:db:65:7a:
57:23:8c:70:c3:0a:05:0e:b3:a3:42:bd:c9:c5:5b:be:95:a6:
bd:69:b4:b3:29:1c:ee:7a:03:8f:0d:09:59:e1:a7:b0:b5:bc:
40:03:19:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:46 2026 by rpki-client