Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
File: rrwz1bpYUjTMzvilethsoer8SqI.mft (raw, json)
Hash identifier: F54AOpDXWcJlNDBTOnklCOFx0YelzI92aA74yPQDSdo=
Subject key identifier: 5B:AB:D4:4F:AC:EB:FE:8C:ED:DB:DC:50:6B:00:B0:66:B0:1D:16:7E
Authority key identifier: AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
Certificate issuer: /CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Certificate serial: 019D28F30D8BB46CCC7A2020E8FE15A5ECB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
Manifest number: 0833
Signing time: Thu 26 Mar 2026 07:01:50 +0000
Manifest this update: Thu 26 Mar 2026 07:01:50 +0000
Manifest next update: Fri 27 Mar 2026 07:01:50 +0000
Files and hashes: 1: E907k5QYJtLiwC_jK3iFvXI9RdI.roa (hash: snQqBx0r+DlkIlsrsM46ddsGDow3XlKtABIHB2rzqdc=)
2: rrwz1bpYUjTMzvilethsoer8SqI.crl (hash: maCKee4DJlGGyEFLnb56fz7722R3jOfC4DTY0Lxhh78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:0d:8b:b4:6c:cc:7a:20:20:e8:fe:15:a5:ec:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Validity
Not Before: Mar 26 07:01:50 2026 GMT
Not After : Mar 27 07:01:50 2026 GMT
Subject: CN=5babd44facebfe8ceddbdc506b00b066b01d167e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ec:98:13:7c:e7:89:f2:21:ce:81:50:82:b8:
c1:4f:d0:c0:04:d1:68:6e:c0:a7:49:6a:37:05:d0:
22:6c:6f:e6:c5:58:80:3f:39:0c:5e:0c:0b:19:4e:
90:f6:15:45:0d:46:ca:15:af:21:cb:55:e7:53:6b:
eb:cc:e5:6f:ae:ee:0c:c7:a1:4f:42:c1:a2:9b:cf:
70:a7:d3:58:04:e4:f6:04:05:02:09:89:9e:62:f3:
89:06:80:c0:a1:66:f8:e1:ae:32:6c:b1:f9:15:9c:
10:ad:b1:12:c2:e7:2f:a4:a6:57:b3:a7:26:ed:58:
7f:91:69:a1:5c:2c:aa:68:87:6e:a6:38:37:bd:c2:
8e:5d:89:88:c2:90:7e:fd:4d:e1:fb:42:89:cc:85:
10:43:04:d2:2b:ca:21:9a:12:99:51:bc:25:5c:0d:
a2:c9:93:c6:0b:e4:04:b2:85:2b:ed:ac:ad:2f:a4:
5b:ed:0a:6b:e4:6a:47:a5:8c:cc:82:97:a3:82:b7:
bd:83:30:a3:54:e3:cc:c2:e6:02:2c:b0:a4:f8:6a:
e3:b5:5b:84:b8:d1:a1:42:ec:77:4d:56:e1:5f:9f:
a5:c7:72:8d:76:20:f7:10:fd:d6:4f:57:59:e4:7f:
f4:a1:20:8c:d1:0f:64:95:f0:f0:6c:80:cb:88:29:
a0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AB:D4:4F:AC:EB:FE:8C:ED:DB:DC:50:6B:00:B0:66:B0:1D:16:7E
X509v3 Authority Key Identifier:
keyid:AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:1b:42:17:0f:d8:7e:08:18:44:eb:69:47:71:6a:70:27:ab:
55:6c:f4:c9:c8:3e:8a:f8:d9:12:50:f0:73:39:12:e7:74:0a:
02:71:e2:1d:a0:b1:8b:e3:6b:20:5b:80:f9:84:04:48:a7:d3:
c7:73:b2:e9:ef:ab:d0:ea:0e:b3:cf:43:aa:b0:df:e7:50:54:
50:60:33:ed:45:09:6f:ff:8d:4e:41:b6:88:f0:8d:38:3e:e7:
11:59:bc:c3:e2:08:2b:23:36:62:8d:49:f0:76:2a:d1:50:c0:
f0:c2:08:1c:23:59:00:ea:44:c8:32:1a:3e:fb:e4:76:ac:c0:
c5:86:db:75:f6:5f:fc:c7:66:71:59:c5:0c:29:8e:47:4c:d0:
a6:da:3d:6b:a9:c4:b1:63:e5:1c:20:e6:a9:20:fb:27:f5:e3:
6e:c0:91:02:22:5f:20:c5:ae:8b:92:4e:a2:ae:f6:8b:9f:23:
5b:bb:38:48:b4:08:91:53:e7:58:41:ba:7e:6a:ee:93:e6:1d:
d3:73:78:03:9a:cd:d0:8c:08:28:64:97:a1:cb:77:fd:9f:47:
2e:44:e4:41:8f:3f:5b:8e:5f:8a:65:d6:4c:b7:eb:5d:21:f2:
a4:7e:49:9d:f8:d5:2a:1e:36:1d:fe:92:9b:e4:5a:14:d2:39:
fc:0d:c9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:42:30 2026 by rpki-client