Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
File: RzsJuP3t5sq1JPyqOzHmFrouSJY.mft (raw, json)
Hash identifier: X+uvTXrhF0WsGFGtRKog+HpXTf7Esk2YdorcXK4xhnI=
Subject key identifier: 92:E4:DB:BA:3B:69:18:59:1F:3E:ED:EC:15:99:77:FA:F0:44:DC:F7
Authority key identifier: 47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
Certificate issuer: /CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Certificate serial: 019CABA1D9730422110DFEEDB01246A37FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 23:00:36 +0000
Manifest this update: Sun 01 Mar 2026 23:00:36 +0000
Manifest next update: Mon 02 Mar 2026 23:00:36 +0000
Files and hashes: 1: RzsJuP3t5sq1JPyqOzHmFrouSJY.crl (hash: InQ0kzUNs5xROzIUB8ZpEEssMb0JYgzUDKiO0TelI/s=)
2: qULAWziRR6EpNTlUGRYiVItcoc0.roa (hash: mkeeUvNAxFPl7/hk9APPcp6mDqYe93qja/XRGGlJYVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:d9:73:04:22:11:0d:fe:ed:b0:12:46:a3:7f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Validity
Not Before: Mar 1 23:00:36 2026 GMT
Not After : Mar 2 23:00:36 2026 GMT
Subject: CN=92e4dbba3b6918591f3eedec159977faf044dcf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:25:4f:86:43:1f:c2:8b:23:9b:cf:20:77:62:
3d:fe:d8:2f:c5:56:d8:6b:46:1f:62:b3:e4:c3:87:
29:d2:7e:80:44:6e:44:98:60:2c:be:97:48:2e:4d:
6a:83:81:c8:ea:cf:6e:2b:f2:7e:03:9d:6d:2e:ab:
fe:cf:53:da:f4:f3:46:31:85:55:02:e3:cd:69:21:
37:00:09:4b:49:c2:d7:a6:84:cb:5b:3b:d7:27:5e:
6b:62:dc:09:16:c6:b7:64:b4:e1:72:89:4f:d4:b7:
83:a8:ea:99:12:70:dc:29:e4:64:c9:b5:54:40:78:
a3:9b:1e:49:4d:d1:4a:9b:de:f6:43:15:62:90:84:
70:d4:92:4f:09:6b:a3:8e:6d:a5:d3:92:75:25:f2:
b2:ae:84:0f:d7:68:62:1d:75:a3:94:41:4e:e4:c2:
05:cb:28:f1:ab:7b:ea:17:6b:5c:d6:79:0d:17:9e:
43:28:e1:20:eb:9d:06:a4:82:8d:10:65:5b:bb:6d:
d7:66:83:b7:cb:94:03:c6:27:16:e5:64:d3:61:a9:
b7:03:73:69:ef:dc:01:44:c3:7d:b0:a4:a8:de:a9:
c4:62:63:9a:31:2e:5e:3b:72:f8:7e:6d:6d:42:32:
41:18:ac:6e:96:74:fc:be:9c:a8:ea:2d:97:39:92:
a5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E4:DB:BA:3B:69:18:59:1F:3E:ED:EC:15:99:77:FA:F0:44:DC:F7
X509v3 Authority Key Identifier:
keyid:47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c0:31:cc:d3:12:8a:26:0e:a4:e3:a8:e3:9f:49:61:3e:fa:
89:d5:fd:22:b8:6a:79:73:14:69:09:57:df:cc:df:75:10:04:
fc:f8:d3:7d:06:83:38:b8:fc:41:72:fb:76:b5:20:49:4d:b6:
14:35:d1:3a:27:1b:69:d0:a9:6d:0e:ad:bb:0a:a7:06:76:3e:
05:c8:1d:48:81:62:81:c2:ea:d7:7b:57:c1:56:dc:3a:e5:54:
38:0d:96:82:7b:59:1b:54:dd:fb:76:0b:09:c9:33:22:9a:28:
dc:70:a1:d8:15:28:0a:ef:58:a2:5a:cd:0f:64:86:b6:8b:d0:
bf:48:76:69:e1:6a:ba:08:57:c7:f5:a6:7f:96:b4:84:dd:27:
f0:7c:2e:bf:f1:39:6a:1e:68:a9:dd:c7:91:d7:61:0e:37:0a:
8b:cc:6e:77:a6:bf:d1:aa:f6:1c:c7:7b:d8:ac:43:26:c0:f9:
93:d8:d2:12:8c:ff:2a:0f:7b:92:8c:51:0d:7d:a4:6a:9f:ce:
b9:30:26:68:4e:76:b3:b2:b2:8b:dd:75:86:23:70:38:b5:e5:
2e:88:e7:ce:2c:27:36:8a:7b:d5:a9:d2:10:fa:85:0e:37:51:
b5:69:67:e8:9b:20:39:1e:f4:30:a3:22:43:e9:97:a4:85:c0:
d6:1d:91:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrodlzBCIRDf7tsBJGo3/BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3M2IwOWI4ZmRlZGU2Y2FiNTI0ZmNhYTNiMzFlNjE2YmEy
ZTQ4OTYwHhcNMjYwMzAxMjMwMDM2WhcNMjYwMzAyMjMwMDM2WjAzMTEwLwYDVQQD
Eyg5MmU0ZGJiYTNiNjkxODU5MWYzZWVkZWMxNTk5NzdmYWYwNDRkY2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8iVPhkMfwosjm88gd2I9/tgvxVbY
a0YfYrPkw4cp0n6ARG5EmGAsvpdILk1qg4HI6s9uK/J+A51tLqv+z1Pa9PNGMYVV
AuPNaSE3AAlLScLXpoTLWzvXJ15rYtwJFsa3ZLThcolP1LeDqOqZEnDcKeRkybVU
QHijmx5JTdFKm972QxVikIRw1JJPCWujjm2l05J1JfKyroQP12hiHXWjlEFO5MIF
yyjxq3vqF2tc1nkNF55DKOEg650GpIKNEGVbu23XZoO3y5QDxicW5WTTYam3A3Np
79wBRMN9sKSo3qnEYmOaMS5eO3L4fm1tQjJBGKxulnT8vpyo6i2XOZKlWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLk27o7aRhZHz7t7BWZd/rwRNz3MB8GA1UdIwQY
MBaAFEc7Cbj97ebKtST8qjsx5ha6LkiWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpzSnVQM3Q1c3ExSlB5cU96SG1Gcm91U0pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9jMDQ2NzQtZTlhYy00NTQ3LWJjZGEt
MjU4ODU0ZTUwY2Y4LzEvUnpzSnVQM3Q1c3ExSlB5cU96SG1Gcm91U0pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9jMDQ2NzQtZTlhYy00NTQ3LWJjZGEtMjU4ODU0ZTUwY2Y4
LzEvUnpzSnVQM3Q1c3ExSlB5cU96SG1Gcm91U0pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAscAxzNMS
iiYOpOOo459JYT76idX9IrhqeXMUaQlX38zfdRAE/PjTfQaDOLj8QXL7drUgSU22
FDXROicbadCpbQ6tuwqnBnY+BcgdSIFigcLq13tXwVbcOuVUOA2WgntZG1Td+3YL
CckzIpoo3HCh2BUoCu9YolrND2SGtovQv0h2aeFqughXx/Wmf5a0hN0n8Hwuv/E5
ah5oqd3HkddhDjcKi8xud6a/0ar2HMd72KxDJsD5k9jSEoz/Kg97koxRDX2kap/O
uTAmaE52s7Kyi911hiNwOLXlLojnziwnNop71anSEPqFDjdRtWln6JsgOR70MKMi
Q+mXpIXA1h2Rkw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:59 2026 by rpki-client