Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
File: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft (raw, json)
Hash identifier: RGSr9f+RcM3/OS6Oze61d/blqEfPcn4cagF2ooGbxac=
Subject key identifier: D5:1C:E8:FB:00:AB:D9:E4:85:0E:DB:34:82:12:B0:79:BE:07:90:67
Authority key identifier: 47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
Certificate issuer: /CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Certificate serial: 019CAB33F3692A1E1E73AE57CE4CD9CEEDD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
Manifest number: 0B68
Signing time: Sun 01 Mar 2026 21:00:34 +0000
Manifest this update: Sun 01 Mar 2026 21:00:34 +0000
Manifest next update: Mon 02 Mar 2026 21:00:34 +0000
Files and hashes: 1: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl (hash: Fe9vMVgvy1G7EwyLa0HM8+k4lpYroPw5rUN/TiVKT5w=)
2: XHT_nValr2j6SKOfGPicLhiXyO4.roa (hash: H5XqJ+imumLxCFtabqMwr2EYqfcFyzubhax0NWhApw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:f3:69:2a:1e:1e:73:ae:57:ce:4c:d9:ce:ed:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Validity
Not Before: Mar 1 21:00:34 2026 GMT
Not After : Mar 2 21:00:34 2026 GMT
Subject: CN=d51ce8fb00abd9e4850edb348212b079be079067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:42:bc:58:c3:a8:a8:5f:b9:7c:11:12:68:19:
3a:35:05:db:d7:99:86:ff:1d:1f:b8:01:7e:95:30:
39:ac:17:99:a7:91:31:52:b2:1f:0d:2a:6c:95:8c:
59:0a:a3:dc:08:f7:a0:a5:3e:e6:e5:79:d6:7e:aa:
74:3f:39:db:c3:bf:0e:bb:24:8a:aa:01:0a:05:78:
11:ab:8c:d3:7f:6e:73:5b:51:9c:21:1c:74:3f:b3:
43:c5:dc:77:28:fe:ec:34:c1:ca:3d:94:fa:8e:74:
6c:45:20:7b:b0:da:bb:4f:2c:49:f3:37:40:01:bb:
c5:2f:3e:de:66:f9:f8:05:9d:f9:20:37:63:c2:7d:
64:a0:ca:0e:49:12:bc:66:70:d7:87:55:fe:05:14:
56:da:99:55:71:fb:be:30:9b:26:4a:c0:73:b8:b5:
a3:98:01:56:b6:86:66:19:4e:6f:11:f5:26:03:ed:
07:49:a1:a6:99:d0:8e:b1:f2:bf:78:40:06:91:0e:
6f:84:20:5f:b9:62:bb:9d:13:69:46:2a:4d:56:30:
97:b5:f8:e9:ea:fe:dc:2d:79:57:92:f8:92:fe:4d:
a4:4d:bd:ce:70:03:50:5d:31:17:0e:e1:b5:72:fe:
3f:64:66:25:b7:8b:ab:e3:c7:15:9c:c1:31:cd:ae:
16:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1C:E8:FB:00:AB:D9:E4:85:0E:DB:34:82:12:B0:79:BE:07:90:67
X509v3 Authority Key Identifier:
keyid:47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:6c:23:63:1d:4c:87:08:e6:71:d6:f6:81:71:57:27:b4:39:
a6:67:f8:5a:41:f3:a2:c2:98:16:04:fe:98:c6:21:2d:38:35:
c1:22:ff:7b:c1:cc:e4:90:8f:d9:20:15:71:b3:e2:42:2e:66:
c9:4c:16:3d:3a:51:da:ff:c6:f1:3a:ab:1a:b1:dd:24:74:f4:
68:38:31:51:7c:21:6f:0e:e5:4c:17:70:ac:3b:69:16:37:16:
ea:c1:42:61:9d:6a:e1:bd:f0:6e:ff:58:14:88:83:88:00:ca:
03:b7:d6:12:92:f4:d6:e4:19:2e:61:d5:81:45:26:c4:27:87:
6a:a3:30:99:2c:9b:d5:f0:e5:d5:33:0e:00:72:95:83:0d:d6:
6d:c3:34:c4:11:8a:7a:ef:8c:6b:88:2b:f6:17:91:78:0b:04:
84:a8:b4:be:80:b1:26:4e:63:45:3a:40:ad:db:37:be:22:71:
0b:f4:72:18:cd:43:28:e1:90:1b:d9:d0:79:97:8b:61:e0:7b:
9e:a5:f5:29:ff:3e:3d:1c:95:fb:1e:2f:17:16:24:81:6f:29:
67:7a:ca:56:b2:db:ee:c3:bf:f5:85:fd:07:6f:0b:5d:63:8b:
5b:da:70:f2:59:4e:e1:62:15:71:36:75:27:b4:77:ad:f6:a5:
59:78:b5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:35:35 2026 by rpki-client