Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
File: cZSbR98xPLq5RS2pj8xjdgipCb0.mft (raw, json)
Hash identifier: 91KApdMcVWwMAX6dAJuLSglZj5HnFtLIywKdOIMWj7s=
Subject key identifier: 5A:85:E1:9C:4B:3B:AE:81:89:E5:FE:39:D5:0B:72:B9:7D:B3:FB:E9
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 019D284E1B6E05F9E63DD701EE9623C48D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
Manifest number: 18A9
Signing time: Thu 26 Mar 2026 04:01:40 +0000
Manifest this update: Thu 26 Mar 2026 04:01:40 +0000
Manifest next update: Fri 27 Mar 2026 04:01:40 +0000
Files and hashes: 1: 4QGNMsc5EGKo58Zw8Ral2zodI2I.roa (hash: YULKFII3+bo9JTIVj/N+lbxzQak7k1SW83B1ho5/0B8=)
2: 7nQSU3KcKFGzNpk1S9m7Pg_R3QA.roa (hash: hhvez6L7iOSamemiziLCMKx9JI55MAZ7ghp/mQWgqbI=)
3: cZSbR98xPLq5RS2pj8xjdgipCb0.crl (hash: 8+7FBklQEll+qbY85KAaVciZ3zCtU76kViCdpuHeFOE=)
4: iqsTReQX-wslFa4ZJjVVBZ1O16I.roa (hash: HHgLFIJy8JtakXSElLjUicZ/9YwRa/+1lz1+D14ujGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:1b:6e:05:f9:e6:3d:d7:01:ee:96:23:c4:8d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Mar 26 04:01:40 2026 GMT
Not After : Mar 27 04:01:40 2026 GMT
Subject: CN=5a85e19c4b3bae8189e5fe39d50b72b97db3fbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:64:69:98:4a:f5:58:59:4a:9a:49:b0:f1:a2:
66:14:ec:cc:20:eb:4b:02:31:1d:d8:c0:a2:27:83:
b0:b1:1b:4b:f9:28:af:08:f5:71:17:f1:09:71:36:
73:d3:3a:44:43:34:52:9d:d6:c5:a9:c0:7e:af:c2:
35:3b:e5:58:2f:ce:fd:30:71:12:44:68:f6:34:9f:
b6:56:34:c7:c1:8d:48:49:30:32:09:b7:3b:77:20:
8b:bc:ed:12:6f:ce:6d:ee:9f:03:63:b0:c4:ee:d4:
bd:8c:10:2e:e6:7d:43:e1:38:10:63:d3:dd:9d:3d:
af:47:fb:5e:c3:2c:b5:d9:0d:7c:8b:8e:84:32:fb:
55:e2:a9:9a:c1:1e:82:5c:81:3c:a7:20:8c:f7:3d:
05:14:97:d9:8c:30:dc:0c:6a:e2:d5:50:3e:84:62:
ab:80:9b:40:ed:6d:87:80:a8:07:22:67:cf:5b:ee:
cf:ec:ab:4a:8d:13:96:0e:cf:db:4c:87:43:7b:81:
35:61:a6:a1:a9:36:ab:72:8f:4c:3e:c6:58:b4:36:
f9:6d:46:f4:cb:0c:dc:d6:24:13:d6:93:cf:f1:9a:
8a:f2:54:67:43:10:d3:a7:32:c7:f4:be:43:ea:91:
9c:35:83:f1:c7:3b:b7:be:3f:97:e4:de:75:87:92:
83:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:85:E1:9C:4B:3B:AE:81:89:E5:FE:39:D5:0B:72:B9:7D:B3:FB:E9
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:58:48:23:79:35:72:03:4d:72:00:01:d0:c6:1c:c2:55:f7:
a8:96:12:22:42:c0:33:54:d1:f9:c2:6d:40:67:09:9a:83:3a:
76:c9:42:a3:09:58:1e:45:64:f0:8f:40:58:53:eb:c3:89:58:
92:4c:eb:9e:5e:87:1b:a3:1d:fd:76:6d:34:9a:77:f0:0e:c4:
7c:75:f2:da:41:7f:22:4b:3a:e3:03:02:d2:94:6a:1c:12:b3:
a8:e9:6b:8f:08:02:d9:81:84:19:a9:c4:2b:ee:78:54:a4:e0:
f6:ff:c1:e2:91:5f:76:57:7d:b0:4f:87:92:a9:18:52:f7:9f:
bb:52:01:13:60:6d:34:e4:6f:a5:74:ff:f4:22:f3:cd:99:b2:
38:41:f6:41:16:50:a2:92:f8:e3:d8:a8:2f:b7:bf:1d:9f:dd:
d2:8b:ff:3b:70:93:ec:4d:79:ec:c2:0c:65:21:6b:80:b0:8f:
bd:89:b4:f3:44:85:95:2b:ee:14:3c:79:5f:95:e0:a7:b8:e1:
2d:84:bd:6b:f4:da:4f:68:d5:b5:9d:7a:97:65:79:3d:18:7c:
c1:5a:4c:38:21:b7:f9:73:b5:c1:14:4a:f6:99:5d:f2:f0:3f:
77:43:4d:50:a2:9f:cc:c7:4a:5d:39:b0:4f:90:31:48:68:45:
12:23:f5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:06:15 2026 by rpki-client