Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
File: RZR46fHzCyT9FxmNHKyDW8Hk368.mft (raw, json)
Hash identifier: W02gCLHTm14EfhOe7fQtEDRknd3uT9SmTqsGaiT2RTM=
Subject key identifier: 20:1D:5E:E6:44:B5:8D:FF:45:FF:E6:20:7C:46:5E:43:EB:5D:45:C3
Authority key identifier: 45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
Certificate issuer: /CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Certificate serial: 019D2816B56D2AEBC9DAEE11C4C1DE36D6BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
Manifest number: 0926
Signing time: Thu 26 Mar 2026 03:01:09 +0000
Manifest this update: Thu 26 Mar 2026 03:01:09 +0000
Manifest next update: Fri 27 Mar 2026 03:01:09 +0000
Files and hashes: 1: 7QM2KeQ3Wn7b2DM_DaBA8kJny-8.roa (hash: 62/MDcXDz4G8cxXxwlkwD2glafSnz5PZXVYHbOFIM38=)
2: RZR46fHzCyT9FxmNHKyDW8Hk368.crl (hash: 2ZOUlMKHRL7km3uujGqG7X7SekMPP+n3oSZD/lOj370=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:b5:6d:2a:eb:c9:da:ee:11:c4:c1:de:36:d6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Validity
Not Before: Mar 26 03:01:09 2026 GMT
Not After : Mar 27 03:01:09 2026 GMT
Subject: CN=201d5ee644b58dff45ffe6207c465e43eb5d45c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:82:17:1e:31:60:ea:b2:80:4e:ec:07:a5:
cc:fe:02:4d:cc:da:ca:38:23:b5:7e:db:4e:e1:77:
6b:24:0f:35:df:42:33:3b:22:ce:e7:ab:19:57:83:
f7:e5:6b:33:d7:de:90:8d:ca:51:6f:be:a4:ec:a1:
97:4f:a9:52:7c:fe:16:0b:5c:da:e3:d0:c4:1a:0b:
f0:ba:e0:5f:47:4a:d4:61:ee:04:36:33:a5:79:c9:
02:33:56:aa:ff:ab:66:fc:d8:0a:93:88:7d:57:42:
05:d2:4d:df:84:50:5e:f6:7f:a5:59:6d:a6:a9:31:
22:9d:1f:b4:d3:c2:db:60:ce:58:23:f2:f1:c4:35:
5e:a9:69:3d:47:de:e2:5b:6f:a1:82:15:93:38:c4:
63:9a:1c:ec:84:e3:cc:c8:ac:20:14:60:d3:3b:8b:
57:4c:b2:8e:56:7e:56:7d:a0:3a:ac:90:13:44:60:
9e:63:2d:8e:d5:c4:35:0c:a5:6d:72:df:74:3e:92:
4a:78:34:0e:1f:5a:1b:3f:92:80:10:c7:60:df:53:
88:42:21:fb:5e:7e:98:85:83:8e:40:9f:b0:79:6a:
68:b3:28:a6:46:67:32:9e:c1:89:8f:32:8a:d0:c5:
fd:f5:df:ff:8c:29:10:8d:99:15:af:b8:5d:23:70:
42:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1D:5E:E6:44:B5:8D:FF:45:FF:E6:20:7C:46:5E:43:EB:5D:45:C3
X509v3 Authority Key Identifier:
keyid:45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a2:e1:62:5f:4b:b6:e1:b4:6a:a8:9e:9a:ee:39:49:a1:b3:
00:83:3c:0b:7c:62:b3:91:8b:65:6f:85:98:da:8a:67:d6:7e:
39:72:99:30:e4:c9:5a:73:38:5c:b0:3c:23:36:a1:e3:e6:84:
8a:2c:15:92:57:bb:dc:e3:4f:80:da:96:36:c7:96:fa:35:2c:
e8:8e:33:56:43:7a:fc:48:d8:1c:c4:0d:2c:28:e4:73:9b:a9:
be:60:c1:27:10:7e:81:71:68:24:75:fb:5a:e8:bf:f3:24:24:
f9:b3:dc:74:a3:63:fe:d5:fb:b1:cf:2b:c6:10:2e:b4:de:21:
9e:c0:b3:8f:54:d2:af:81:f2:e4:e7:4e:ec:50:4d:be:57:38:
a7:c8:7c:7c:20:8c:18:01:95:91:38:e9:7e:24:3d:60:d8:e3:
42:1a:ce:f8:4f:4f:e7:c9:41:e9:52:48:f2:b9:d4:52:fd:c9:
4b:e8:d6:8f:9b:44:2d:1c:2d:15:06:b6:a8:6b:14:bc:fe:79:
bd:59:59:b3:7c:fe:bd:c5:c0:85:72:ac:00:77:f3:b0:c2:01:
25:60:b6:9b:7f:86:e9:04:9e:fe:dd:a2:06:85:bd:39:d3:be:
2d:8f:46:39:2b:36:1f:81:8f:bd:c7:8d:33:e9:1e:48:88:84:
0f:4b:c7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:34 2026 by rpki-client