Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
File: z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft (raw, json)
Hash identifier: 7q7aX4PS94sOqHlobJMug2dM3A1Jq9AjKuDv/GV8rzk=
Subject key identifier: A4:59:F5:20:70:93:B9:59:1F:55:8C:A7:29:84:E5:8C:0C:59:4E:AF
Authority key identifier: CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
Certificate issuer: /CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Certificate serial: 019CAC475AB586B45AEF6BD5BA307823A575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
Manifest number: 0C99
Signing time: Mon 02 Mar 2026 02:01:23 +0000
Manifest this update: Mon 02 Mar 2026 02:01:23 +0000
Manifest next update: Tue 03 Mar 2026 02:01:23 +0000
Files and hashes: 1: 6Jo867Q7kI_xg37Z2hR0Zp-bKLA.roa (hash: nuQ+eCxmU3VLRBrNEQL/R2CLOaS7uJaHx+gJkQcGWrE=)
2: bpCdtlID1rH2DrjVzMcBmork2aQ.roa (hash: BSKDPkYhU8I5fR9wBcNo+U5cc/fHr2mCsZj2Lep7Q84=)
3: z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl (hash: g4O4tjrOya2gI7aUuCA4P1bUENSkRK4Yr+WBvsvgmfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:5a:b5:86:b4:5a:ef:6b:d5:ba:30:78:23:a5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Validity
Not Before: Mar 2 02:01:23 2026 GMT
Not After : Mar 3 02:01:23 2026 GMT
Subject: CN=a459f5207093b9591f558ca72984e58c0c594eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:81:9c:63:03:01:98:13:c2:96:98:62:17:9c:
2f:3a:7d:23:ca:0c:b9:6b:66:eb:8c:8b:d6:b5:d2:
2e:d4:41:00:59:27:fb:1f:98:be:a4:ee:de:a0:a0:
d2:40:99:ed:7f:41:14:19:e9:3e:c6:b5:0e:0e:91:
ce:14:2c:c9:f4:d4:34:0e:4a:04:07:02:7b:28:0b:
e1:ef:f2:e7:b0:27:9e:40:b4:2a:c6:a2:3d:53:ae:
38:f6:92:36:3b:01:cb:2f:79:3d:0a:78:83:29:96:
da:19:b5:86:cc:52:68:35:93:cf:11:39:5d:9a:fc:
3e:ec:95:b8:80:8a:f2:3b:7a:d5:9d:bc:62:ef:0a:
8e:f1:9c:15:19:9b:91:5f:97:cb:f8:d0:63:7b:48:
1a:2e:ce:01:36:c7:b7:43:5d:d8:a7:f0:6c:be:4a:
22:a0:9c:09:99:ce:b5:99:57:4b:38:26:8a:15:f8:
4b:ac:a2:49:36:ce:fe:1c:a9:02:35:51:ec:e9:39:
0d:45:c6:2c:04:16:51:5f:30:63:ef:93:e9:84:14:
41:e5:6e:3b:3d:7a:ff:fb:aa:42:85:d0:81:5b:84:
d3:f6:2a:de:11:c5:d7:e2:76:66:c6:12:aa:19:d4:
72:0b:cd:28:ee:23:ca:b6:0b:a5:42:4b:8d:03:36:
78:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:59:F5:20:70:93:B9:59:1F:55:8C:A7:29:84:E5:8C:0C:59:4E:AF
X509v3 Authority Key Identifier:
keyid:CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e5:ff:eb:35:dc:3a:58:13:27:a5:45:20:cd:ea:c5:a7:52:
60:c8:f2:1a:24:41:99:d6:42:1d:dc:15:cc:e5:e4:6f:32:b2:
ed:cc:22:02:48:04:be:ee:06:96:9e:34:f4:4a:8d:41:6a:69:
3f:b3:2c:de:bc:cc:c8:62:6e:c8:8d:7d:69:d3:2c:be:f5:93:
73:0a:01:71:fe:dd:7d:d4:1d:a3:40:7c:bc:bd:87:90:a5:c1:
28:03:ff:ed:3d:7e:37:8e:5a:b5:e8:99:d6:5d:0c:37:22:db:
b4:0b:01:81:84:96:85:e3:75:62:29:a8:dc:f3:a8:d7:b4:2c:
62:4c:46:2d:86:3c:5b:59:2c:19:40:77:44:73:3c:fd:f7:ab:
ab:9e:bb:e9:8e:74:a6:91:92:2f:92:d7:2f:f3:e3:17:a9:b0:
95:f4:6d:65:b6:16:e5:5f:cc:c5:71:9e:de:87:28:e9:81:e7:
50:45:6d:3a:d3:c9:89:b9:61:4b:00:71:a5:aa:fe:fd:3f:14:
dc:d8:0e:e0:8a:ce:1d:36:a0:3e:20:20:1e:02:03:fd:88:58:
f1:e3:4f:a8:5a:0e:7d:3d:5e:e6:0e:12:a9:d9:f0:f7:ee:22:
9d:28:94:27:ad:ad:d9:ca:2f:ef:e6:eb:ee:f7:a8:0a:79:ab:
73:8e:70:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:17:28 2026 by rpki-client