Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
File: RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft (raw, json)
Hash identifier: rOjBbp0bTIYQAHClhNkNeJ42E7aMoTmXKNXVSh4YtNk=
Subject key identifier: 26:B8:AD:AE:03:86:AC:EA:58:BB:27:FB:C5:F4:30:D0:53:AA:6D:D2
Authority key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
Certificate issuer: /CN=473163527e83542dce693b16d0aedcd126d3319a
Certificate serial: 019CAA58D0ABA61E4D21267ED58802E1FEF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 17:01:12 +0000
Manifest this update: Sun 01 Mar 2026 17:01:12 +0000
Manifest next update: Mon 02 Mar 2026 17:01:12 +0000
Files and hashes: 1: RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl (hash: njD8A1+piFNsneTLzmac43xfTN6R6owVsQ2ExdRkHW0=)
2: pFkI7meix8Wvnh8I7pdS5zO5VAs.roa (hash: IiBaDlI4V6mbfD8AaxYpOFH+8BQ1zVQO5KQlE9ThC6Y=)
3: wIc-Rh6w6YDK1W-UeGedBj1DHzA.roa (hash: AHq1ZvIykr30MtwSSGLXsUeCsh/Ryu5hRBrmdW7qIMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:d0:ab:a6:1e:4d:21:26:7e:d5:88:02:e1:fe:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473163527e83542dce693b16d0aedcd126d3319a
Validity
Not Before: Mar 1 17:01:12 2026 GMT
Not After : Mar 2 17:01:12 2026 GMT
Subject: CN=26b8adae0386acea58bb27fbc5f430d053aa6dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:54:c2:cf:a0:9c:be:37:8d:5f:22:5f:c5:8d:
b3:ad:07:d4:f2:7b:c0:4e:a9:46:9a:df:46:81:9c:
f0:a4:87:02:a3:17:66:ad:c8:58:ab:c4:e9:fd:af:
ce:16:89:94:e1:6f:3d:9c:07:d4:0d:65:48:29:91:
e9:7c:5c:aa:c5:c3:81:46:fb:0e:06:13:36:b3:8f:
a1:55:3d:25:ed:6e:a1:9e:9f:57:cb:c7:b4:21:05:
3d:b0:29:83:d7:21:13:d3:84:70:23:e2:52:19:dd:
30:68:62:bb:cb:db:bf:86:bb:cd:35:34:b2:4a:07:
90:0d:ae:4f:97:5c:e6:c7:a5:75:04:ec:c1:1b:04:
b8:9c:2c:f1:30:12:8c:0d:63:e6:aa:88:0a:2c:a2:
f4:89:a0:d4:3f:c1:d1:7a:91:d2:2a:aa:03:af:86:
4a:b7:d0:82:0f:0d:c1:80:ab:f6:ca:c7:64:45:82:
17:99:06:e7:e3:66:36:dd:48:ed:66:63:b7:81:98:
d3:82:1c:06:b1:60:31:56:42:0f:7b:a1:d9:f7:b6:
a6:8d:90:62:57:dc:1f:a1:27:5d:fd:dc:0a:b2:0a:
2f:ea:f1:01:cf:1a:00:cd:a6:bf:10:98:27:84:ab:
d3:2c:81:54:f3:fa:13:4e:44:d8:55:8f:28:97:f9:
fb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B8:AD:AE:03:86:AC:EA:58:BB:27:FB:C5:F4:30:D0:53:AA:6D:D2
X509v3 Authority Key Identifier:
keyid:47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:77:31:76:72:e2:fc:70:b9:ef:e6:e3:8e:19:c3:7f:b8:8e:
c4:68:7b:d8:77:f9:96:02:e3:0c:2f:a3:f2:27:54:07:71:a4:
60:2b:65:6a:95:8a:ee:fe:b4:6a:9c:9a:e2:22:02:7d:14:81:
76:2b:cb:f8:10:b8:f6:cd:e0:e9:7c:2e:7f:b8:bd:2d:69:f7:
8f:55:2d:79:f0:b5:78:74:e9:6f:e4:43:89:d0:9e:36:65:06:
fd:31:18:61:da:cc:a9:b1:55:41:e9:34:56:b2:ce:b3:e8:84:
c2:44:4d:7a:0f:8d:db:30:5c:0c:92:d0:ff:aa:88:d5:a7:3a:
28:ca:85:c4:af:bb:06:05:2c:6a:57:a3:e9:e3:a9:fe:0e:21:
1e:97:78:97:8d:e2:c8:39:2c:7b:87:2e:48:f6:0a:e9:42:23:
6e:13:89:b0:dc:a9:2b:51:6b:78:f1:8f:f0:a9:8c:41:b2:59:
f9:a7:cd:8f:8d:81:18:4a:77:6e:3b:38:b0:26:07:e9:b1:9b:
0e:9f:e6:a9:9c:c5:d7:23:2e:31:3f:8a:4b:66:e2:4e:cb:0a:
42:a6:7c:1d:e9:1d:c7:a3:49:6a:e7:e4:57:b9:46:2e:c7:8a:
f5:5c:75:01:be:4d:a4:d3:6e:2f:b0:a3:39:d0:4d:a5:fc:9b:
bd:b1:09:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:17 2026 by rpki-client