Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
File: RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft (raw, json)
Hash identifier: uMtT6hDmHrkdW+zY+yLk35qmKHiwNaj6zH/1bb2R4MA=
Subject key identifier: FD:CF:08:95:3F:51:C9:A6:F3:2C:C2:CF:88:82:31:87:18:A6:B7:0A
Authority key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
Certificate issuer: /CN=473469a966f4df3cf28171d87c74780fc472f979
Certificate serial: 019D2816A3055958AF2AF06723BC6E6C775B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
Manifest number: 0B8F
Signing time: Thu 26 Mar 2026 03:01:05 +0000
Manifest this update: Thu 26 Mar 2026 03:01:05 +0000
Manifest next update: Fri 27 Mar 2026 03:01:05 +0000
Files and hashes: 1: DNxT4KfUnSN5D5Pb2TXRMl9CQRk.roa (hash: U4JVcc+2nFb5M82ma1QdMgZr3eKXlGDJ6qSOPbU6n2I=)
2: RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl (hash: pzwXmp1UVeTIIq68kudJPtYA3mGybmDG7P+H0gDQiFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:a3:05:59:58:af:2a:f0:67:23:bc:6e:6c:77:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473469a966f4df3cf28171d87c74780fc472f979
Validity
Not Before: Mar 26 03:01:05 2026 GMT
Not After : Mar 27 03:01:05 2026 GMT
Subject: CN=fdcf08953f51c9a6f32cc2cf8882318718a6b70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8d:7b:16:54:c9:e5:c4:6b:65:34:f4:bf:e0:
f6:24:4c:b8:3f:9c:a3:d4:12:47:fe:80:1a:9c:0f:
97:cc:a0:99:58:62:03:77:bc:7a:0f:13:64:41:8b:
9a:8a:60:6e:6a:42:97:bb:87:72:05:33:7b:1a:89:
21:59:fb:85:66:0b:30:17:ce:a4:28:3b:13:a3:4f:
20:3f:f4:43:cd:07:0a:8e:2d:8c:b5:b6:04:8f:ec:
cb:5e:25:0b:9d:88:3d:77:a2:46:85:65:de:49:ae:
75:73:92:54:1c:92:94:99:e2:18:d6:83:91:97:67:
9f:7f:14:09:4d:9a:52:50:3f:81:b7:d2:5c:6e:88:
07:51:b7:04:15:5c:54:72:43:d4:91:6b:6d:5b:4e:
a2:06:2c:78:72:58:36:b9:19:3e:ad:f5:66:44:16:
40:68:28:c1:7c:87:42:55:12:5b:66:77:f6:b1:76:
7d:b1:f2:50:8d:d7:11:8a:b5:0e:61:0f:a3:59:d4:
27:7e:9d:2f:b1:1d:de:46:30:e0:94:35:d3:bc:c4:
57:cf:4e:51:b7:8c:6a:a1:f7:a3:4b:bd:b0:c3:05:
fe:49:c4:dd:1d:dd:7d:ce:65:33:27:18:ba:1b:cc:
72:19:19:e6:54:8b:a4:f0:b3:db:28:36:a1:f0:7c:
f9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CF:08:95:3F:51:C9:A6:F3:2C:C2:CF:88:82:31:87:18:A6:B7:0A
X509v3 Authority Key Identifier:
keyid:47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:8a:54:86:b7:28:cd:62:4a:89:7e:12:3a:99:41:e7:71:ca:
16:88:18:34:de:f6:9b:15:29:8b:de:e2:36:98:bb:92:d6:dc:
ba:05:15:88:3a:64:fc:5d:58:47:34:69:59:23:4d:4b:d8:f6:
f8:e6:f4:d1:c9:ac:da:e6:c7:a8:b1:91:92:ce:5e:7d:66:61:
69:f6:95:82:e8:e8:30:29:68:e6:84:fa:b7:3f:36:b5:ff:cf:
29:e1:b6:73:14:37:78:e0:d4:62:79:59:11:b9:c5:bb:98:21:
14:69:cf:16:26:c9:2d:b2:84:23:fb:c2:b4:dc:40:96:e4:72:
15:ca:07:01:b1:54:73:63:b7:14:42:3c:48:52:74:47:42:4d:
a2:50:94:c4:ec:c9:25:d0:a4:d8:95:a3:10:2d:03:e4:aa:e1:
46:a2:08:5b:db:40:1b:30:5a:50:fa:95:f8:0b:9a:0b:11:ab:
d7:d1:f0:1f:99:b3:7b:bf:e7:50:4f:e4:6e:80:e6:2c:a9:08:
b0:7d:d0:52:66:4b:9d:99:e2:71:6a:3e:4e:57:6a:82:1e:e8:
2d:5d:96:16:62:90:5f:73:3d:e2:7a:c8:5e:cc:0c:6c:2d:d8:
9b:6b:b8:c9:b1:19:0e:2b:01:68:f1:c3:b6:5f:c2:ad:ef:79:
88:8f:8c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:16:31 2026 by rpki-client