Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
File: _z7T1NR7joJfv9B5SC96DCHcke8.mft (raw, json)
Hash identifier: QCpbbY/WedcKMOoVoKzb7DqV1UjUHq9MzJNflnMBkdM=
Subject key identifier: 33:40:76:D5:8A:76:19:BA:1A:63:B5:96:7B:87:C5:3A:91:CB:D9:16
Authority key identifier: FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
Certificate issuer: /CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Certificate serial: 019D27A85FBEBEDBFD71C449213C66ACD45A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 01:00:39 +0000
Manifest this update: Thu 26 Mar 2026 01:00:39 +0000
Manifest next update: Fri 27 Mar 2026 01:00:39 +0000
Files and hashes: 1: 2fZ1bQhJblUq5fcVHhL0C_-Td54.roa (hash: pAu1H6XJd6QLNwtCItbi85jUBgZSBz8c5zchsEegiak=)
2: _z7T1NR7joJfv9B5SC96DCHcke8.crl (hash: heSZcuVeKrY/2OBWPQ/ecYvdEoc1IJoBX3WUGqIvrk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:5f:be:be:db:fd:71:c4:49:21:3c:66:ac:d4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Validity
Not Before: Mar 26 01:00:39 2026 GMT
Not After : Mar 27 01:00:39 2026 GMT
Subject: CN=334076d58a7619ba1a63b5967b87c53a91cbd916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d5:a1:ed:90:db:55:7a:8d:29:7a:b5:31:24:
da:32:28:32:13:48:40:bb:de:43:69:a0:a6:93:38:
f0:8a:3d:40:4f:ac:fc:b8:45:30:1d:5c:46:c0:25:
43:9b:16:93:4a:5b:6e:11:ef:2d:e3:bd:bc:94:5b:
8d:fe:51:dc:a1:49:87:a5:72:b7:58:95:74:fe:df:
ef:1f:01:24:23:bd:c2:d8:9c:eb:70:34:00:da:20:
95:5e:00:d7:44:fa:9e:28:a2:0f:71:5b:61:a6:d5:
88:6e:8e:f7:d1:11:cb:3a:49:0c:00:0f:76:dd:65:
da:66:f7:e2:d8:c0:9e:e3:d9:16:b1:87:61:d6:e0:
0d:5f:af:1e:45:ef:1e:c1:69:c8:a7:ea:11:fb:9c:
9f:33:e0:c5:8c:5e:19:db:6c:e4:91:1a:5f:2d:ba:
59:26:5a:03:d9:e2:9c:c1:a7:52:70:70:96:2e:2c:
a5:0a:dd:d7:34:95:83:0f:2e:56:df:d5:61:8f:78:
28:8a:ca:b1:38:04:23:41:7b:1d:3b:53:74:75:55:
36:ec:fe:ea:96:76:cd:46:84:ab:eb:00:0b:00:33:
be:fa:6f:63:a7:43:2a:f5:17:4a:0c:02:90:16:dd:
6b:47:3c:a2:1a:17:0c:38:31:ee:00:fa:e7:5a:bd:
b6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:40:76:D5:8A:76:19:BA:1A:63:B5:96:7B:87:C5:3A:91:CB:D9:16
X509v3 Authority Key Identifier:
keyid:FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:34:fc:c2:e5:f7:21:dc:82:2c:14:f3:5b:c4:2a:c1:0f:3b:
10:0a:53:82:18:cb:cd:9f:d8:e4:79:46:91:1e:c0:8c:fc:c2:
41:34:97:b2:04:e9:72:20:97:57:83:73:4f:48:4d:59:f3:96:
58:9d:b9:85:57:b9:b4:01:89:cd:98:86:51:4c:c8:2f:08:6c:
e7:3f:7e:16:61:b9:04:58:ab:a5:b2:f7:80:31:7f:0e:1b:71:
f0:ab:d5:44:1f:f8:7e:12:6e:6c:23:7f:fe:4f:5a:0a:75:d9:
a0:e0:0d:fc:fb:5c:8d:77:69:7f:4c:4a:d7:39:d0:20:fe:ac:
ff:2a:bb:e2:b9:cf:1c:ca:68:a1:d9:b1:0a:6f:7b:7d:14:df:
79:88:e5:d5:6c:35:eb:8c:29:4b:e5:b0:92:94:06:bb:70:e7:
5f:5f:31:3b:f5:b4:da:fa:73:96:dc:06:97:4a:58:01:43:65:
49:db:64:b7:89:9f:49:b6:78:69:d0:66:ef:9c:37:87:8d:8f:
49:d7:9e:97:a6:f9:5d:7e:d7:ac:b4:45:38:73:b1:48:40:ca:
67:e6:b8:7b:3d:5d:52:9e:4d:4b:39:d1:08:d9:04:51:16:ff:
2c:3c:b7:b4:d8:b6:8f:89:ab:6d:6e:0d:a1:d5:54:61:56:e7:
1d:6e:22:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:47 2026 by rpki-client