Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
File: c_JZnZXskZMn_2h0LWxJwqalSIg.mft (raw, json)
Hash identifier: v64GwI3XymvpyzK1tG3vfhD0QI5hfUW9zVCV3zn8oaA=
Subject key identifier: B3:5E:54:07:E0:1F:0E:31:53:54:ED:AD:C4:26:84:EB:D7:ED:3D:67
Authority key identifier: 73:F2:59:9D:95:EC:91:93:27:FF:68:74:2D:6C:49:C2:A6:A5:48:88
Certificate issuer: /CN=73f2599d95ec919327ff68742d6c49c2a6a54888
Certificate serial: 019D329A633FD16B9E89A3AB576FD91EB392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
Manifest number: 188D
Signing time: Sat 28 Mar 2026 04:01:11 +0000
Manifest this update: Sat 28 Mar 2026 04:01:11 +0000
Manifest next update: Sun 29 Mar 2026 04:01:11 +0000
Files and hashes: 1: c_JZnZXskZMn_2h0LWxJwqalSIg.crl (hash: c7EC4sXUoRUwR6KdEPd4p/rN9CKztDf2QuoFQXtMASg=)
2: lWnR0ekIz7F2D525B-XOkrpQ0YQ.roa (hash: TEzMU5Zsy6F06BlZcKBW0crSHPdy9jGsr3EscjQ6Tys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:63:3f:d1:6b:9e:89:a3:ab:57:6f:d9:1e:b3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f2599d95ec919327ff68742d6c49c2a6a54888
Validity
Not Before: Mar 28 04:01:11 2026 GMT
Not After : Mar 29 04:01:11 2026 GMT
Subject: CN=b35e5407e01f0e315354edadc42684ebd7ed3d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8d:02:c2:21:a2:ac:f5:18:ac:f5:f1:46:1c:
fa:fa:2c:3b:ba:65:21:d0:43:9f:ac:22:9f:a7:40:
cd:d4:49:19:b2:eb:a0:3c:c1:ac:4c:8a:06:81:8f:
66:11:fb:9f:9a:ba:bf:57:b3:70:47:33:7d:41:cd:
f0:97:86:04:24:86:5e:6e:5f:44:eb:0c:bb:44:d4:
ec:51:4a:89:ad:64:30:43:2c:94:11:d7:af:ed:ae:
21:05:bf:72:dc:22:35:2e:e0:04:59:2a:3d:e4:78:
7a:b4:2c:db:f2:fc:9d:0d:97:87:0f:44:7b:44:f7:
a2:fa:0d:d8:d5:da:8f:75:fd:70:91:45:e6:c5:64:
d1:50:0c:29:cf:79:0f:f6:9f:7b:b7:56:d9:01:e1:
9c:4d:1f:3e:da:89:8d:de:1e:f8:be:fd:c5:41:93:
ae:8b:0b:c2:03:dd:ce:6d:81:81:ce:21:9d:eb:fd:
5c:c3:b6:80:1a:d8:d4:f5:ea:1a:8a:35:3e:9b:4e:
7f:45:de:dc:7a:82:2a:b8:6e:04:a1:92:18:4b:a4:
c4:a9:aa:00:6d:75:f1:71:c4:da:c5:98:2b:35:d4:
ef:52:58:d6:c2:cb:83:f1:db:e7:99:36:5d:88:a6:
d4:dd:f1:28:7f:3d:56:01:0a:3f:4a:7e:11:e9:7d:
b1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5E:54:07:E0:1F:0E:31:53:54:ED:AD:C4:26:84:EB:D7:ED:3D:67
X509v3 Authority Key Identifier:
keyid:73:F2:59:9D:95:EC:91:93:27:FF:68:74:2D:6C:49:C2:A6:A5:48:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b8:ee:42:86:91:25:54:a4:76:32:db:ac:9c:a8:a4:49:55:
30:df:d5:e2:45:e7:e3:28:ec:9d:8e:08:a1:4b:cb:76:74:c1:
0e:e8:98:99:59:50:4f:f8:d2:1d:e7:c9:18:f4:7b:0c:44:5d:
98:04:a8:87:1f:ad:2e:ca:ef:ea:60:e4:95:61:86:f2:61:42:
53:5b:f8:80:33:51:60:7e:5c:3c:ee:a9:c1:04:87:0f:34:67:
1f:39:e2:a1:42:75:f8:5a:dd:db:4f:11:00:ba:de:60:9a:25:
98:6f:3e:35:fa:87:88:a1:45:1f:71:9b:3f:62:d1:b7:6c:22:
30:86:60:51:a1:3a:26:40:6d:ea:4c:7f:1e:66:00:be:61:55:
e8:1b:4b:9f:4e:19:30:4d:09:a3:3d:62:9b:4f:fd:63:80:8a:
9e:c0:25:4e:ca:1b:b8:80:2f:ef:00:5a:4f:be:08:21:5d:8a:
b5:12:47:73:00:1f:6d:9d:e1:e1:3a:c2:29:07:3b:da:a3:d0:
67:00:51:bf:2d:a5:b8:62:2f:00:32:20:37:11:e4:85:6a:2e:
72:5f:c2:3b:b4:cc:3d:79:79:5f:ba:82:8c:ed:ae:62:9b:4f:
88:43:0c:c3:76:cd:41:c4:aa:a4:24:dc:b1:87:92:ad:aa:88:
10:1c:12:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:02:25 2026 by rpki-client