Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
File: RzC917vMVv6TebEYysfh-SBSp64.mft (raw, json)
Hash identifier: 7/C/0Hf38oKmO1fSh57C4pls41pfcFDJJi89ReeK7dg=
Subject key identifier: FF:9D:2B:BD:46:64:49:26:85:61:58:AF:82:D9:8C:A5:15:F6:EE:2D
Authority key identifier: 47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE
Certificate issuer: /CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae
Certificate serial: 019D2A7240A15CA0A3B34DAF31E52989D842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
Manifest number: 0646
Signing time: Thu 26 Mar 2026 14:00:23 +0000
Manifest this update: Thu 26 Mar 2026 14:00:23 +0000
Manifest next update: Fri 27 Mar 2026 14:00:23 +0000
Files and hashes: 1: O2TJIvTx_voT0YHcBveB5ME3HxU.roa (hash: iQiLUq3IFvglKvs6Hy5MwuxHRRp9rkkjwK4qxW0zxvg=)
2: RzC917vMVv6TebEYysfh-SBSp64.crl (hash: dq889pDQUqIM6ROX4t91L6Bw4/lHaMUC9eTxYbdP+x4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:40:a1:5c:a0:a3:b3:4d:af:31:e5:29:89:d8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae
Validity
Not Before: Mar 26 14:00:23 2026 GMT
Not After : Mar 27 14:00:23 2026 GMT
Subject: CN=ff9d2bbd46644926856158af82d98ca515f6ee2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c1:18:ba:f0:b8:d8:c4:49:84:80:71:db:8b:
db:ba:7e:06:c3:53:2e:d8:6a:b0:31:4a:40:98:e8:
35:a0:c4:ed:68:1e:57:b6:2f:7e:21:08:c9:4b:90:
99:10:76:0e:96:03:36:0d:be:7a:d7:f8:c8:d1:53:
f5:07:56:dd:70:82:40:44:33:cb:bd:17:0d:5b:54:
70:41:a3:3f:d7:9b:19:79:18:2c:71:98:fa:c4:5b:
a2:8c:92:a9:a9:8c:4e:5e:2b:c4:b3:99:bf:d3:6c:
37:83:b8:98:12:c4:10:ea:69:27:2f:11:ef:d7:27:
cf:9a:d0:77:6f:c1:f0:0f:84:95:99:b8:ea:72:9a:
68:3a:08:db:8f:40:0a:a8:69:88:15:cc:4c:d7:bc:
dc:75:ee:b8:f8:f2:0d:90:42:d2:de:96:53:71:d7:
6a:d1:44:4b:6d:10:44:b1:e5:bf:e8:a5:08:08:0f:
fc:63:e8:05:7f:8d:8b:01:ed:a0:07:29:aa:7f:e2:
8a:ba:15:45:dc:39:39:db:15:f2:f2:2f:22:63:bc:
d3:87:4b:f5:57:41:82:2d:bf:18:ee:b8:fc:ca:db:
27:05:ba:f8:6c:68:9a:70:4a:af:77:c2:a9:6a:19:
23:86:4f:42:87:c7:ab:93:97:99:2b:be:cb:6d:4b:
9e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9D:2B:BD:46:64:49:26:85:61:58:AF:82:D9:8C:A5:15:F6:EE:2D
X509v3 Authority Key Identifier:
keyid:47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:0a:10:31:d6:d8:29:ae:bd:38:3b:cd:8b:e8:2b:15:aa:f9:
b4:5e:fc:ae:64:29:ba:fe:fb:db:65:e3:60:4f:a6:fc:95:32:
1d:6f:62:2b:5d:07:e5:01:2d:59:39:8d:82:30:4e:79:fd:03:
9e:87:eb:0c:0e:0d:ed:fa:86:d6:f6:6c:d6:9c:f0:14:50:16:
c1:b5:5b:76:78:26:b5:3a:e7:a6:d1:63:b5:e4:2d:28:ce:a9:
d9:26:ec:ac:90:a6:28:d6:84:6c:51:18:6c:29:21:a5:d1:b9:
c8:aa:35:ba:84:5d:68:31:3a:8c:ab:63:c1:aa:f9:74:64:2f:
2b:bc:d2:d9:43:59:c9:a0:48:c6:59:af:2d:78:3a:9e:3e:b2:
de:44:e5:0d:c6:bc:77:f0:ef:49:49:43:86:68:af:a5:b5:99:
9f:91:fa:36:8b:aa:ec:48:16:ba:a9:0a:cc:4c:28:e4:0a:df:
f0:9a:d2:6b:f4:be:60:46:68:b6:aa:57:97:b9:2d:b4:1d:de:
eb:82:6e:6f:6e:f4:45:99:12:48:4e:7a:43:d0:3c:3b:43:6a:
4e:70:5e:a6:71:86:77:19:cc:92:fb:49:1f:ce:46:d2:af:14:
f7:72:2e:22:e3:5e:90:2b:4b:de:46:8c:b9:88:92:f7:16:a7:
97:c9:12:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:33:55 2026 by rpki-client