Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft
File: cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft (raw, json)
Hash identifier: RnDdH9TYRxFarY01QTwBuomEHrzc/uTkUf5jOYX6veI=
Subject key identifier: 63:D5:D7:C6:49:DA:62:A8:20:30:80:79:39:31:16:4B:B2:61:5B:C2
Authority key identifier: 71:90:F5:D5:F9:2A:48:63:62:17:7A:42:B3:D5:EF:DA:20:E2:20:E1
Certificate issuer: /CN=7190f5d5f92a486362177a42b3d5efda20e220e1
Certificate serial: 019D25F10226B6AE7394C89D23FDA85E8F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZD11fkqSGNiF3pCs9Xv2iDiIOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft
Manifest number: 16F9
Signing time: Wed 25 Mar 2026 17:00:44 +0000
Manifest this update: Wed 25 Mar 2026 17:00:44 +0000
Manifest next update: Thu 26 Mar 2026 17:00:44 +0000
Files and hashes: 1: W0kDwuE8Wzw-iZxK0RP3iilB4OI.roa (hash: LAGYp6tmx7aAjzZBlxGzQ8k1I+/BB+mHmklMRyiCKgA=)
2: cZD11fkqSGNiF3pCs9Xv2iDiIOE.crl (hash: YtfLxfyJHcOUGPidpr25Yd9IGwSZbxWe7B5gHXtlbqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZD11fkqSGNiF3pCs9Xv2iDiIOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:02:26:b6:ae:73:94:c8:9d:23:fd:a8:5e:8f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7190f5d5f92a486362177a42b3d5efda20e220e1
Validity
Not Before: Mar 25 17:00:44 2026 GMT
Not After : Mar 26 17:00:44 2026 GMT
Subject: CN=63d5d7c649da62a8203080793931164bb2615bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:82:eb:9e:67:13:dd:fc:8e:ad:e3:bf:42:95:
48:9a:a4:20:30:bd:54:6a:fb:2d:c2:03:51:6d:5d:
3f:c7:74:1a:42:4b:78:a0:45:8f:56:34:be:b2:7d:
fe:c2:be:86:f9:41:fe:a3:ea:bb:ff:95:8b:19:4f:
8f:b8:da:e4:72:a0:51:4b:a8:85:ca:c2:41:86:eb:
7b:04:d8:f4:84:5b:e1:e4:07:4a:8e:04:fc:20:47:
da:72:34:26:dc:3c:cd:b1:23:ad:5b:db:6d:f1:94:
66:50:bd:7e:f2:00:17:d9:87:9d:88:3a:8b:18:a5:
fe:ef:67:1a:64:41:6f:41:82:a0:cf:be:43:41:9d:
9d:73:7a:02:13:31:1a:27:41:f6:02:62:de:c3:ef:
5e:4f:f5:0e:b2:2b:a0:32:6f:81:69:e5:61:47:2b:
f6:7f:43:b8:96:08:da:6c:d9:0a:e0:5a:2a:bb:d2:
48:60:2c:fd:50:8b:32:e7:76:5b:9d:93:90:2f:48:
e2:a2:72:05:ab:45:ea:ea:d6:ce:a5:09:aa:7d:59:
0e:64:40:38:58:f0:85:0d:e9:62:00:de:bf:53:23:
a3:05:06:76:29:92:9f:65:8c:2d:02:3b:8c:3c:41:
4f:a7:a3:1e:f2:24:76:90:19:95:6f:9e:5f:7d:c0:
24:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D5:D7:C6:49:DA:62:A8:20:30:80:79:39:31:16:4B:B2:61:5B:C2
X509v3 Authority Key Identifier:
keyid:71:90:F5:D5:F9:2A:48:63:62:17:7A:42:B3:D5:EF:DA:20:E2:20:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZD11fkqSGNiF3pCs9Xv2iDiIOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:5a:d8:34:06:8a:2d:89:be:43:e7:5c:76:b2:a3:c0:3b:12:
b4:8a:91:ee:e2:81:4e:c1:29:72:f6:cb:97:b2:b0:40:af:d1:
64:8b:dd:4e:bb:f5:f3:85:a7:5f:28:cd:ba:46:12:bf:6f:19:
fc:e4:82:c3:01:42:a6:92:20:6f:06:a5:16:09:33:4e:9c:65:
df:98:37:68:da:14:12:b4:46:b5:7d:93:05:96:67:f0:4b:cd:
67:7d:5f:63:1e:e2:ca:84:5e:e1:f9:d5:f3:2a:56:11:db:a9:
ae:59:23:86:e6:24:d7:46:38:1b:5f:c7:73:56:4a:cf:e5:a3:
a6:b4:17:bb:ea:d3:1f:e3:a2:2b:6a:c1:e4:18:83:b4:f8:00:
08:87:5c:5d:e9:47:3e:93:cc:51:0b:36:51:f8:77:e9:ae:59:
9c:30:f0:f4:9b:42:31:9f:63:f3:dc:75:a9:60:5b:3a:54:80:
b8:d7:30:a0:f8:bb:54:1b:35:6c:0f:19:fc:e5:87:7e:24:f5:
42:27:e3:98:87:47:cc:88:d1:ad:91:e4:e2:19:16:b6:a0:c0:
e9:ee:01:2f:df:91:26:c4:fd:98:50:73:4a:08:93:70:6a:61:
b6:c3:1d:ce:7b:02:f9:4f:68:4b:70:c7:be:94:70:54:d5:46:
fd:69:9d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:20 2026 by rpki-client