Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
File: dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft (raw, json)
Hash identifier: YyRRaPxR3Cnp5j5YUeWskqYQ5qzc+2glSHrAPso0B3c=
Subject key identifier: 70:59:61:CA:E5:13:EA:DE:76:9A:16:F1:1C:CA:B9:02:EB:53:20:C2
Authority key identifier: 75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
Certificate issuer: /CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Certificate serial: 019CAC46F3EA261BFE65C36BDF9EC04A01A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
Manifest number: 9A
Signing time: Mon 02 Mar 2026 02:00:56 +0000
Manifest this update: Mon 02 Mar 2026 02:00:56 +0000
Manifest next update: Tue 03 Mar 2026 02:00:56 +0000
Files and hashes: 1: 5vgf_9aZThkj_7VAzPV1SdycQ9s.roa (hash: WWuwQNMz2jPS1Lz9ZyTa8kKgvLVWvH3DolJRQpBYZVw=)
2: ZUFdt76XEIRqjB1ZsCU8KDPIIeE.roa (hash: +22Qmq4Y9pNmDRsynGIXRX9EtOmlc0lMrcEc8jeBxvw=)
3: dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl (hash: /YkC1cHrVexdYhGJbEDd0P8vWvEb3Flw8OK3EFqKdQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:f3:ea:26:1b:fe:65:c3:6b:df:9e:c0:4a:01:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Validity
Not Before: Mar 2 02:00:56 2026 GMT
Not After : Mar 3 02:00:56 2026 GMT
Subject: CN=705961cae513eade769a16f11ccab902eb5320c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:af:72:eb:dd:f8:10:24:9b:58:e7:2b:a0:61:
25:31:83:c3:e6:ed:47:64:87:d2:16:e9:12:62:38:
6e:5f:03:e5:36:f6:f5:00:0a:34:1d:9f:f1:b2:df:
a0:8e:0a:d3:33:b7:ad:b2:22:7c:ef:59:a5:1f:40:
1c:94:0d:7c:07:52:2d:b6:dc:0d:21:85:ac:72:93:
dc:d3:28:b5:a7:e4:8b:65:e9:0d:22:3b:6c:0a:0f:
72:fa:d0:74:40:3b:f2:c3:86:14:8d:97:0d:62:bf:
63:b4:e2:30:e7:e8:0d:d3:21:b0:48:3f:73:08:9d:
94:23:aa:48:d4:32:04:47:41:d0:98:82:d1:82:4c:
4b:17:7c:0c:86:fb:63:3c:a2:66:bf:05:82:1c:8d:
d1:b4:cb:36:cf:56:cc:f5:9a:a7:5b:92:3e:96:5f:
b0:48:04:af:c3:75:fc:a9:83:67:6c:83:5b:4a:03:
79:4e:f7:69:ac:00:92:82:2a:5a:51:93:c3:ac:8e:
85:06:0a:a9:b1:fa:84:db:53:14:66:08:99:75:bf:
9d:ba:ec:d1:11:b4:df:4e:84:b6:27:2a:8d:fe:5e:
d2:5c:3d:9c:6f:c7:d1:9c:a2:10:ef:70:cd:d0:b7:
b7:43:14:2c:55:89:a3:df:c2:5c:cb:ad:0e:a6:bd:
d0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:59:61:CA:E5:13:EA:DE:76:9A:16:F1:1C:CA:B9:02:EB:53:20:C2
X509v3 Authority Key Identifier:
keyid:75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:26:27:9b:d8:c3:93:81:87:50:c8:a5:79:81:86:84:ac:aa:
4e:c9:54:1a:d1:9c:98:dd:99:ab:69:ad:b7:9b:18:9e:36:5e:
79:dd:b0:3d:0b:61:13:ec:df:cb:c3:dc:da:88:0e:07:a5:b6:
e5:bd:7e:02:89:40:7e:da:72:d2:8e:a0:1d:78:c8:bd:97:1d:
c3:13:2b:91:7d:5a:fe:c0:40:f7:91:6e:57:31:3a:9a:d1:9a:
6f:93:a2:9c:c9:45:9b:3b:92:57:93:ce:c6:2b:57:85:ac:52:
ab:a9:d4:cb:a4:7d:be:37:9c:58:90:eb:e2:3d:55:19:32:65:
02:0c:ba:a1:6b:a4:3f:54:a3:07:65:a1:fb:c0:6a:f8:dd:20:
db:9e:09:e8:7a:09:6c:e7:70:25:32:d3:8e:0f:58:fe:5b:89:
e0:2b:28:0b:9c:35:0f:e6:d2:73:67:11:7e:2f:6b:7b:85:4d:
3d:1a:b2:4d:ae:58:53:fc:3a:1a:79:fb:f8:8e:4f:03:55:4e:
da:12:36:e2:b0:40:f7:f5:68:15:ea:b3:37:52:29:7a:8d:aa:
db:25:91:05:62:65:1b:f5:b8:b0:76:a9:4c:02:a4:f0:07:80:
79:95:77:7f:1e:eb:ef:3b:96:36:12:2c:7d:d8:99:0d:af:83:
43:93:50:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:13:08 2026 by rpki-client