Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
File: p2_PrZZq5-gXHPzibbP2V3bSb-g.mft (raw, json)
Hash identifier: P3R5mfcf8mXZgMIj0V26Wh3/w1cmBRf1d1rCuSA72NE=
Subject key identifier: 9E:FE:75:2F:62:99:F2:3D:0A:3F:F9:51:4A:56:F4:97:D6:F6:37:8A
Authority key identifier: A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
Certificate issuer: /CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Certificate serial: 019CAAFD8CB7BE855AC17266D5FBC37FD896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
Manifest number: 0936
Signing time: Sun 01 Mar 2026 20:01:09 +0000
Manifest this update: Sun 01 Mar 2026 20:01:09 +0000
Manifest next update: Mon 02 Mar 2026 20:01:09 +0000
Files and hashes: 1: 9H2Cao4L9seLn80FxSiOGYvYmbE.roa (hash: 6fh3UPrvbfpSC3IgcyXg2AEmgPfBi1rjETuQ8TwnWs8=)
2: J616ho14DKGXrY52dTz4rECA6rg.roa (hash: Pr/K62ihwSA6YnMNqUbbcVQlKEbx5zr2tsgN3ot1lW4=)
3: JzRoxhNcR2kzwArFwmc0pS-ExCs.roa (hash: KJ1WUHpaALO4NgyLeM/jwu4bNeSWXf1o/mMEG/mPGY8=)
4: p2_PrZZq5-gXHPzibbP2V3bSb-g.crl (hash: BZHnuMjQtqkYhhaNUlLdrpvwSgN6Gj64jdFtvmWLScE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:8c:b7:be:85:5a:c1:72:66:d5:fb:c3:7f:d8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Validity
Not Before: Mar 1 20:01:09 2026 GMT
Not After : Mar 2 20:01:09 2026 GMT
Subject: CN=9efe752f6299f23d0a3ff9514a56f497d6f6378a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4d:0c:2c:ca:8b:e6:01:1b:cc:d1:de:a1:b2:
5e:ba:18:3c:f7:27:38:13:72:dc:10:e4:ad:7a:23:
85:70:42:75:9b:20:ce:36:89:3d:77:e4:d9:de:82:
8d:16:ee:a2:6d:e2:7f:ae:d2:14:c5:6f:96:93:45:
7c:9a:6c:22:54:db:d1:9d:7e:54:72:d2:db:d8:3c:
e8:32:05:6f:10:9a:91:3c:1c:ca:a9:06:00:91:2d:
5d:77:a1:3f:10:71:58:be:98:f1:57:d8:4b:74:ed:
ec:f7:9c:55:5b:33:e7:81:83:5e:d7:3c:73:ce:d4:
32:00:a3:1f:57:2e:6a:b7:b1:d2:8d:fd:ba:d1:cb:
b2:50:be:d8:c4:dd:73:03:68:94:b9:28:27:c2:6d:
10:f1:8e:b1:41:66:65:f0:11:fe:6a:c3:74:0b:a1:
dd:31:39:c0:9b:19:0f:ac:91:9d:89:99:b7:40:7f:
e3:23:e7:d9:8a:0d:73:2d:15:ac:7b:56:82:57:93:
a5:5b:35:3d:4d:7f:83:18:31:14:ff:61:08:dc:b4:
65:fc:23:e8:95:22:15:79:9c:af:3d:59:ea:53:8c:
b0:c8:af:1e:2c:ce:39:61:eb:22:0a:9f:a1:f7:fe:
61:35:ce:ff:6c:a2:71:46:87:43:be:c4:0d:99:66:
fd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FE:75:2F:62:99:F2:3D:0A:3F:F9:51:4A:56:F4:97:D6:F6:37:8A
X509v3 Authority Key Identifier:
keyid:A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:19:d0:dc:58:9f:0b:ce:a2:27:39:03:6d:f6:82:92:44:1a:
dd:57:1b:00:55:cf:31:29:2d:ce:6b:a7:f4:18:64:c7:02:db:
00:2a:d8:11:2f:ba:11:71:62:55:9c:f1:79:c9:40:2b:cc:85:
c1:85:2b:65:ae:61:d7:ed:f0:ab:6e:66:70:8b:06:e6:95:e2:
8d:87:9e:6d:cb:b5:1a:f0:1d:73:44:66:b9:a6:67:c7:6a:af:
cf:ee:6c:8d:81:7d:37:38:14:76:a2:d3:b2:d4:69:61:68:a3:
a6:b6:7f:37:77:49:4c:f6:02:bd:5a:9a:ee:d5:15:48:e5:fa:
f9:24:e1:3e:16:00:32:4e:38:79:5f:cb:b7:92:71:f6:73:8d:
a7:a6:6e:74:32:e1:95:27:3a:51:ef:26:29:cb:ec:94:35:a0:
7d:20:f1:2b:06:7a:18:6b:50:75:17:a8:78:ad:0d:8a:3c:65:
55:44:ee:a3:b5:ab:b4:6b:37:e1:dc:6b:5b:94:35:b5:d8:76:
d9:8e:e7:79:7c:85:15:7e:82:e6:9f:c5:8a:c5:47:9f:fd:46:
df:a8:7c:df:a6:90:35:6a:ea:8a:50:73:3d:f9:d0:a7:12:2c:
30:53:3e:4b:e2:1c:c0:1a:3c:44:0b:6b:a6:22:0c:2b:75:c9:
f7:9d:59:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:50 2026 by rpki-client