Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
File: cZSbR98xPLq5RS2pj8xjdgipCb0.mft (raw, json)
Hash identifier: 5Xm9dhyUsndPYbedQ2Rh6D1fAVZNRuIo/6gef7ilHFI=
Subject key identifier: 62:A5:AA:73:BD:8B:35:3C:E7:9B:2C:BA:1B:DA:3A:5E:9A:B5:40:12
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 019D2A3B5FA97A0D69F1DE4EF5D70551DD29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
Manifest number: 18AA
Signing time: Thu 26 Mar 2026 13:00:27 +0000
Manifest this update: Thu 26 Mar 2026 13:00:27 +0000
Manifest next update: Fri 27 Mar 2026 13:00:27 +0000
Files and hashes: 1: 4QGNMsc5EGKo58Zw8Ral2zodI2I.roa (hash: YULKFII3+bo9JTIVj/N+lbxzQak7k1SW83B1ho5/0B8=)
2: 7nQSU3KcKFGzNpk1S9m7Pg_R3QA.roa (hash: hhvez6L7iOSamemiziLCMKx9JI55MAZ7ghp/mQWgqbI=)
3: cZSbR98xPLq5RS2pj8xjdgipCb0.crl (hash: seKtQ9IasP0XrOJYm/GcFvc5u4sgBGsuTGkNbe5KfqQ=)
4: iqsTReQX-wslFa4ZJjVVBZ1O16I.roa (hash: HHgLFIJy8JtakXSElLjUicZ/9YwRa/+1lz1+D14ujGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:5f:a9:7a:0d:69:f1:de:4e:f5:d7:05:51:dd:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Mar 26 13:00:27 2026 GMT
Not After : Mar 27 13:00:27 2026 GMT
Subject: CN=62a5aa73bd8b353ce79b2cba1bda3a5e9ab54012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bd:57:f6:2a:9b:27:d9:6a:af:ba:c8:b9:fd:
2a:67:58:6d:92:79:62:bb:01:0c:e4:42:ff:da:dd:
ee:09:ad:5b:90:b3:82:77:71:66:bc:56:7f:65:72:
05:c7:a9:d9:23:2f:52:1a:1c:60:a9:d6:91:d4:a6:
8a:d2:98:f6:e1:fc:09:32:69:c3:ac:7e:a7:4d:46:
46:13:8b:de:90:23:d5:c0:ae:bf:38:f8:b0:45:6d:
62:de:7f:38:df:7f:df:d8:a5:90:7a:43:35:4d:1c:
0d:96:fd:9f:18:38:91:f1:c1:80:ff:31:3f:9a:0e:
bb:c2:c4:da:56:11:7c:62:28:bc:3f:3c:0a:a3:7a:
8f:f2:20:41:61:e7:a6:d2:8f:b0:74:93:e5:28:0e:
d8:0c:40:2b:8a:73:90:34:ac:f1:d8:f2:db:d0:11:
da:8b:03:a9:2a:12:6a:e0:4d:b9:e9:45:08:d4:c5:
60:94:e6:10:45:71:2d:b8:d0:b0:33:2c:99:77:7a:
3e:49:8b:bc:79:35:c8:79:09:ad:a9:a1:23:bb:76:
ca:eb:e1:32:ab:48:1a:17:88:67:00:6c:de:7c:e0:
0f:25:b3:3b:6e:97:92:42:5b:b9:24:e6:ed:dd:cf:
14:40:87:c9:f6:ba:df:b5:93:da:40:46:13:e7:b7:
0f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A5:AA:73:BD:8B:35:3C:E7:9B:2C:BA:1B:DA:3A:5E:9A:B5:40:12
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:5c:11:df:cb:2b:17:b9:04:6b:ea:f6:02:d1:4c:4a:7a:88:
9b:0d:f0:86:12:0f:e1:0a:7d:72:d2:f5:76:54:00:d7:5f:68:
97:a1:3e:1c:3f:d9:b4:82:39:37:4e:f5:81:4b:aa:2a:7c:f6:
1a:0a:f0:9b:e6:7c:24:2c:2f:76:87:be:6d:3d:ef:d0:57:08:
9c:a8:39:71:db:87:e4:e6:6d:50:3d:e4:1a:4e:18:c6:0e:11:
d4:d2:a2:20:f1:58:3c:fc:71:87:3d:db:16:03:e6:40:7f:80:
d8:d2:d1:7e:62:70:4e:4a:8b:26:9c:5b:cf:a8:d5:17:3b:26:
94:35:a3:18:44:98:57:02:a2:71:ad:71:b1:62:ec:84:0a:a3:
2a:fc:7c:0d:2b:81:29:e0:00:87:f8:3a:43:32:e7:f7:00:74:
8e:08:ab:ee:6b:56:de:1e:8e:ff:28:dd:8d:ac:52:87:e5:bf:
b7:f1:aa:a7:75:61:64:9f:63:12:bf:2d:37:a0:ee:57:c5:e8:
72:2f:f1:27:81:e7:35:e8:3d:f2:9c:cd:7e:3c:ab:20:c0:6a:
8d:03:97:22:9a:ef:fa:f9:9c:5d:de:64:ec:e1:60:0a:27:0c:
d1:5a:48:88:82:46:80:fd:ca:f1:44:40:4b:f1:7c:ba:6d:4e:
2f:a5:44:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:36:56 2026 by rpki-client