Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft
File: z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft (raw, json)
Hash identifier: t/0/t04z1FdW77O5PTBYVEOY0PMWPxQ4b13bTsW6rkI=
Subject key identifier: 56:8A:1C:B2:1F:DA:8C:FE:CF:8D:BF:FE:FD:95:3F:7F:04:4D:ED:EF
Authority key identifier: CF:E4:69:4E:C2:4E:A7:15:DC:A2:D2:7A:32:1C:04:BD:0B:0C:90:BE
Certificate issuer: /CN=cfe4694ec24ea715dca2d27a321c04bd0b0c90be
Certificate serial: 019D2816533E4C9BAF9EDB7DD296D22B0257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-RpTsJOpxXcotJ6MhwEvQsMkL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft
Manifest number: 024C
Signing time: Thu 26 Mar 2026 03:00:44 +0000
Manifest this update: Thu 26 Mar 2026 03:00:44 +0000
Manifest next update: Fri 27 Mar 2026 03:00:44 +0000
Files and hashes: 1: JkYAYVNwCur5J8bwJ80jkfME47w.roa (hash: CbSKEg/vIOH/qxG77B9ev+0u/ThhZsLHdvEQfupCLQo=)
2: qhCkwBj6GnED90E3xbK34LcjKis.roa (hash: sb4gZUUWKHHhpKTxH1X0qzK99oh2HCmziKT/wMaI3QE=)
3: z-RpTsJOpxXcotJ6MhwEvQsMkL4.crl (hash: cNBrD4VcOmB2089N0NlcFD6UGSi/0RZF6Hy6DIUikzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-RpTsJOpxXcotJ6MhwEvQsMkL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:53:3e:4c:9b:af:9e:db:7d:d2:96:d2:2b:02:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfe4694ec24ea715dca2d27a321c04bd0b0c90be
Validity
Not Before: Mar 26 03:00:44 2026 GMT
Not After : Mar 27 03:00:44 2026 GMT
Subject: CN=568a1cb21fda8cfecf8dbffefd953f7f044dedef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:46:81:36:e5:2d:31:af:f3:97:ea:a2:d7:
4c:e1:c7:93:90:2a:35:0b:4f:d5:47:7e:aa:0f:15:
3e:82:4d:db:80:5d:4c:48:9e:16:c6:ce:fc:61:d5:
e5:bd:10:4f:45:01:83:1a:74:35:97:45:1b:00:6c:
c2:99:c5:ef:6d:be:b4:29:b2:d7:57:07:15:a9:d1:
3b:01:72:49:4e:b8:c6:6e:58:30:91:fd:1b:0d:fd:
b9:6b:26:83:ad:27:6b:d1:84:66:81:6f:b0:f6:8f:
94:fb:26:ec:f5:1d:11:f4:77:b3:47:a1:94:de:0a:
25:2a:00:82:61:b0:ea:6f:7a:e2:98:0b:f2:a9:8a:
ea:8c:81:ab:b9:f6:d1:39:83:58:c0:ec:53:69:84:
53:08:b9:af:db:30:6d:de:8d:d7:68:a8:4c:fb:30:
71:ad:f8:4d:70:d1:a4:ba:18:ad:00:c6:5b:ba:fb:
b0:96:6d:a2:04:72:e7:4d:31:95:d3:02:cb:61:bf:
5a:0c:d7:10:59:38:89:5c:86:59:c4:54:c4:f9:33:
fa:04:83:d3:de:56:3d:33:5f:25:29:0a:25:a6:72:
42:f8:af:e3:b1:8e:0b:9f:67:58:a0:25:93:0c:64:
04:3b:4e:f2:2f:13:b7:16:4b:9e:9d:11:44:54:28:
68:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8A:1C:B2:1F:DA:8C:FE:CF:8D:BF:FE:FD:95:3F:7F:04:4D:ED:EF
X509v3 Authority Key Identifier:
keyid:CF:E4:69:4E:C2:4E:A7:15:DC:A2:D2:7A:32:1C:04:BD:0B:0C:90:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-RpTsJOpxXcotJ6MhwEvQsMkL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:bd:42:86:e9:3e:69:2a:76:fe:90:e7:f6:b5:a9:44:cf:b3:
b0:3f:34:ca:1d:75:fb:31:b1:2f:8e:52:32:6b:90:5f:45:b1:
49:34:2e:b3:ad:60:e7:16:dc:fa:c7:78:50:cd:5a:49:cb:e2:
22:80:23:c5:75:22:0a:82:72:e9:45:f7:d4:5a:3a:da:e6:17:
f3:89:e5:a2:44:07:86:18:18:12:e1:26:be:ac:f3:72:60:19:
e1:5d:9a:43:57:09:1c:61:6b:ec:0f:3f:4a:24:33:c4:4e:89:
fa:d1:72:90:9d:2b:f7:20:83:a1:09:43:40:30:c9:bd:0f:db:
1d:f0:ca:5f:e3:9b:d2:97:21:49:c8:5a:ec:d9:83:f7:c6:ae:
c7:84:8c:1b:12:e9:ce:8c:4b:de:80:1f:ab:b0:00:72:34:93:
06:2f:30:c0:9d:0d:51:15:04:5b:ca:d7:72:1b:27:98:dc:fd:
ec:27:84:81:86:f8:46:85:b5:fc:dd:76:9d:48:0c:71:16:f5:
a9:bf:fe:86:5f:b8:32:4a:54:6f:ce:ea:c9:7b:7e:68:3b:52:
79:22:0c:0d:b1:28:5f:34:b9:c9:81:01:76:b0:3a:c3:a0:ad:
c2:41:7a:4d:4d:04:ee:de:36:58:08:ed:f1:32:93:0f:d1:da:
1d:39:86:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:53:15 2026 by rpki-client