Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
File: dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft (raw, json)
Hash identifier: 1taqMaTui0UK2HMnXFg6fZmlWAePeFow9c4rcyDgOQg=
Subject key identifier: 61:65:90:4E:DF:9D:A5:5C:6D:01:9F:10:D3:2D:82:23:AD:98:A5:E3
Authority key identifier: 75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
Certificate issuer: /CN=759d27ce072ca336d3afaab8879f94ec63455669
Certificate serial: 019D2BBC4224849C9393E80FD52428A4906A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
Manifest number: 094A
Signing time: Thu 26 Mar 2026 20:00:51 +0000
Manifest this update: Thu 26 Mar 2026 20:00:51 +0000
Manifest next update: Fri 27 Mar 2026 20:00:51 +0000
Files and hashes: 1: dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl (hash: BJDPHBuvIx631mqgdYcoed31Fp4qzu1iZtCG3TkIc/Y=)
2: fSa9ZsWpt6cpzETcA7PiodhwAl0.roa (hash: JZ8+GnG0s73YtbrymyZrp39I9Tjd+XU3bo06GAVoOFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bc:42:24:84:9c:93:93:e8:0f:d5:24:28:a4:90:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d27ce072ca336d3afaab8879f94ec63455669
Validity
Not Before: Mar 26 20:00:51 2026 GMT
Not After : Mar 27 20:00:51 2026 GMT
Subject: CN=6165904edf9da55c6d019f10d32d8223ad98a5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:63:76:25:88:cb:4f:1c:ab:13:76:ab:ae:31:
95:b9:05:dc:ee:d8:3e:60:46:e4:6e:00:94:0f:a0:
57:b1:13:ae:35:56:23:2e:13:5a:e4:b0:3e:a1:46:
bd:47:20:21:eb:d1:cc:93:75:0d:f2:81:02:82:d0:
46:30:0a:6f:63:89:1d:ef:c1:e3:68:22:8f:e4:d6:
a2:ac:3b:36:87:fe:05:05:81:08:58:15:df:8c:af:
5a:ec:b1:0e:b6:6f:93:b2:5e:44:40:7d:e0:cc:97:
0f:7b:61:c2:e3:6e:dd:de:e7:ae:9f:91:8d:c1:02:
24:0f:db:d7:e5:0a:56:a3:6c:04:49:cf:9b:83:63:
4d:d7:57:12:60:47:70:48:ab:51:d7:50:3b:61:95:
31:dc:0e:01:e0:74:b4:8a:8e:c7:e6:92:35:2a:f9:
51:5f:a8:63:d1:97:e9:b6:16:a5:31:ea:29:e8:ed:
97:62:a0:4d:97:42:94:75:2e:2a:3d:5e:3d:a9:08:
3d:2f:3b:3b:eb:08:ab:a0:1d:58:03:1a:d1:b9:f3:
56:65:cd:78:d6:c3:1a:fc:65:45:ce:ca:00:3f:29:
cb:fa:82:ea:20:74:ad:77:b4:44:c3:69:eb:0b:21:
dd:fc:d4:51:54:87:de:48:b6:e4:1c:d7:17:ff:06:
7a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:65:90:4E:DF:9D:A5:5C:6D:01:9F:10:D3:2D:82:23:AD:98:A5:E3
X509v3 Authority Key Identifier:
keyid:75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ba:d5:eb:a7:8f:fc:f0:93:11:9c:e0:f4:b6:6e:38:5f:72:
31:6f:33:b4:f5:db:eb:95:5d:1d:3b:6e:35:16:a0:92:9d:b5:
e8:39:16:15:e3:54:c1:32:ba:92:de:0b:6d:29:71:33:c3:a9:
a1:7e:91:11:46:a7:04:b9:aa:2d:4e:2f:9f:4e:32:b7:09:06:
ec:75:84:7c:c9:a2:b7:46:aa:0f:fc:e2:a0:1e:db:c2:56:63:
af:fb:ae:66:d3:f6:3a:81:86:4d:f5:6f:df:4c:3f:8f:1a:31:
d5:11:e4:39:61:5a:42:6e:ba:9a:8b:93:e7:31:b0:c6:f4:58:
bd:11:fc:23:6a:d7:4d:4f:95:3b:ae:48:de:b8:b1:8a:c4:87:
6a:85:a2:13:9b:37:26:04:2a:93:8d:30:a4:e9:22:92:fb:82:
47:60:c0:d7:31:e5:2b:63:fa:f6:d0:7b:6e:26:25:b5:84:a8:
dd:7c:5e:2a:65:6b:25:28:90:96:41:77:00:d5:df:7e:b2:a7:
30:90:33:75:3b:44:61:c0:e3:15:10:35:2f:1b:c7:e2:af:2d:
30:43:66:1c:6d:ba:e6:f7:db:ad:df:cc:42:be:66:f8:85:96:
8a:19:68:91:54:f9:35:5f:c3:bb:42:50:22:50:c1:60:61:fa:
af:f9:69:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:36:03 2026 by rpki-client