Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
File: rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft (raw, json)
Hash identifier: Esz1wRmzFCgKgS2LZE7pilnQ7zbjDlrYz2QS9xpEkLA=
Subject key identifier: B0:5B:D9:97:AC:9D:B1:5F:A5:5C:43:36:CA:7E:B5:10:B7:D4:2F:1E
Authority key identifier: AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25
Certificate issuer: /CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25
Certificate serial: 019D29617FCE7920ACEE704D9D7CB970FEE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
Manifest number: 15CA
Signing time: Thu 26 Mar 2026 09:02:28 +0000
Manifest this update: Thu 26 Mar 2026 09:02:28 +0000
Manifest next update: Fri 27 Mar 2026 09:02:28 +0000
Files and hashes: 1: ldB1ccba1eVWxNgUlrtHodR40IY.roa (hash: /jl6IvaIt6KPatpRGzV51YKDjVrmO0TQhFPcR45WfF4=)
2: rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl (hash: sst1Bfb7uOskriwmbfINvv4H8T+n1WDiHR4yqmhzjs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:7f:ce:79:20:ac:ee:70:4d:9d:7c:b9:70:fe:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25
Validity
Not Before: Mar 26 09:02:28 2026 GMT
Not After : Mar 27 09:02:28 2026 GMT
Subject: CN=b05bd997ac9db15fa55c4336ca7eb510b7d42f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:95:4b:58:47:56:15:d7:7c:ec:98:fa:01:50:
57:08:6a:08:4f:bf:d5:02:0e:10:ff:57:2e:c7:9c:
77:b1:b0:06:80:f0:50:39:7e:b8:c2:bf:fb:92:09:
03:e6:b4:5d:ff:b7:08:0d:f0:67:18:7a:e0:2a:db:
02:29:46:cb:4b:ec:73:ca:88:ad:1e:fe:bb:f8:15:
77:97:ab:42:dd:b4:c0:63:c8:3a:6b:07:2e:b4:91:
ca:e9:53:eb:39:cb:78:e7:91:b1:05:67:ab:c7:20:
1f:d6:05:b6:3b:d4:ce:70:77:4b:b2:00:12:55:86:
06:60:5d:ff:2c:9b:26:8c:e9:11:86:b2:c0:79:d6:
db:c6:d6:7d:30:3b:59:4c:03:d5:b8:68:d3:d9:43:
5a:a5:48:26:6a:6c:6a:6d:d7:79:55:57:18:89:28:
c6:97:4d:12:eb:c6:43:d7:0f:55:5b:93:53:c1:70:
56:9b:7b:37:c1:f7:f4:50:5e:cf:d8:6b:60:c3:56:
9e:41:8e:6c:00:9a:26:b6:57:8c:70:73:8e:ab:9f:
39:d0:2d:63:82:53:97:41:66:39:08:d8:2f:4e:3f:
0f:64:3c:bc:16:de:ab:e7:a2:c7:23:51:16:b9:5d:
b5:cf:ee:e4:1d:97:a5:ee:d9:a2:f7:56:19:36:5b:
2c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5B:D9:97:AC:9D:B1:5F:A5:5C:43:36:CA:7E:B5:10:B7:D4:2F:1E
X509v3 Authority Key Identifier:
keyid:AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:aa:b3:4e:50:0f:de:88:24:b8:66:9c:98:36:b6:b2:1c:62:
e3:fa:68:8e:3b:f4:97:24:8c:5e:02:1f:17:00:8b:fd:1b:ed:
e8:a3:6c:15:fa:49:3a:1a:d7:ae:13:d1:00:a2:25:c5:ed:78:
da:e2:a7:2f:2d:b1:08:c0:a3:56:01:d4:d0:61:6e:4e:00:a3:
4a:5e:a1:f7:4b:bc:bf:1e:91:c4:44:0f:ca:3c:13:84:47:6d:
b1:fe:fc:30:73:e7:8d:9c:66:6d:86:0d:4a:4c:d2:5d:ee:30:
37:8b:c2:d4:84:d4:2d:46:98:cf:80:ec:88:72:1f:b9:f1:c0:
73:7d:1e:fd:9b:eb:c7:0c:7c:6d:10:49:be:1f:ee:98:d5:5b:
82:98:e6:bb:06:85:b0:66:c2:2f:95:90:6c:ce:e8:d1:a3:b4:
7f:e5:80:73:66:97:4f:27:61:90:cf:a4:7f:af:71:fa:b9:ca:
93:17:69:d3:1b:9c:48:02:b0:1c:1c:ce:98:c5:43:30:74:0f:
dd:ab:74:69:2b:ef:35:c0:fc:63:62:a0:07:c5:1d:71:0b:78:
3d:78:16:3f:50:12:0b:c8:ae:e7:14:f3:18:e9:71:6e:40:6a:
33:49:91:85:38:07:a4:2c:5a:be:1f:4e:99:a9:c2:e6:2a:73:
44:8b:e6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:15 2026 by rpki-client