Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
File: RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft (raw, json)
Hash identifier: DyJOBlsR6VspiWTzvtgwuaq52ULKf39toe45iANVnNA=
Subject key identifier: 01:53:26:F5:3C:B0:5D:75:12:08:E5:83:6A:80:8F:B7:30:64:C2:3F
Authority key identifier: 45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
Certificate issuer: /CN=459ad2ece3e5911093d964753b656459c9bc05a7
Certificate serial: 019CAA58FA4F54E5E3DFA081D6A09A4A2BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
Manifest number: 10CC
Signing time: Sun 01 Mar 2026 17:01:23 +0000
Manifest this update: Sun 01 Mar 2026 17:01:23 +0000
Manifest next update: Mon 02 Mar 2026 17:01:23 +0000
Files and hashes: 1: RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl (hash: I9poVvYSqrhnyXycNWf7ooT7UmRCli4/hZCA51kIkwA=)
2: oxM4weLdM3j7jrYJT8BJG0W0cJ4.roa (hash: JzjynEnEp0mde9J1/ZPR8Pa7VycJrBNUsALJMI999+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:fa:4f:54:e5:e3:df:a0:81:d6:a0:9a:4a:2b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459ad2ece3e5911093d964753b656459c9bc05a7
Validity
Not Before: Mar 1 17:01:23 2026 GMT
Not After : Mar 2 17:01:23 2026 GMT
Subject: CN=015326f53cb05d751208e5836a808fb73064c23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6a:62:73:a2:a0:2d:5d:d8:82:e8:b6:28:51:
ce:eb:4f:b6:b8:17:c6:cc:c3:27:35:5e:f7:ee:70:
c3:08:01:c7:9d:44:c7:06:95:90:cf:b3:8a:5d:2f:
61:08:cc:9d:da:d6:6d:23:4a:62:e4:d6:4a:89:56:
86:04:5f:35:37:d7:5c:97:45:34:3d:84:ea:b0:10:
a4:d1:ae:f7:d4:b9:32:d6:88:a9:06:a3:f8:30:c9:
5a:9e:14:1e:35:f1:22:86:2e:95:8c:0a:d5:18:86:
6e:79:c1:37:cc:fc:ac:1f:7c:a3:31:34:0f:1e:af:
7d:b0:b7:18:06:1f:09:be:90:8d:a6:06:e2:52:95:
6e:07:8d:06:81:80:9e:ab:f1:70:fd:95:fe:b9:02:
c6:62:52:b9:75:33:ff:59:64:dc:6d:a5:cc:e4:15:
2d:7e:b7:a4:46:96:57:17:1e:db:b6:75:a1:eb:8e:
43:34:99:ca:08:f5:45:1b:f9:30:8b:c6:6a:01:d3:
d9:19:a6:91:14:60:fc:08:45:ee:b0:e7:1e:b0:5c:
7f:24:fd:61:3f:5a:8d:6b:1d:51:ca:26:48:86:a3:
04:ba:5c:f0:b9:bc:d2:43:a6:bd:2e:ed:85:f1:c1:
f2:ad:c0:ba:29:34:3e:7b:6d:35:63:d1:b2:bc:87:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:53:26:F5:3C:B0:5D:75:12:08:E5:83:6A:80:8F:B7:30:64:C2:3F
X509v3 Authority Key Identifier:
keyid:45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:48:17:39:02:48:83:77:46:cb:3b:be:54:14:65:8d:2b:7f:
c6:1d:4a:18:8c:21:76:80:b5:d6:16:79:f5:aa:ae:fa:62:1d:
e0:47:0e:7f:bd:81:44:e3:df:5a:de:71:f4:56:2d:10:01:63:
49:b2:43:a4:e0:aa:c1:86:e7:cf:80:9f:02:90:91:c6:dd:c1:
05:bc:50:c1:8d:1c:65:5f:89:49:f1:42:88:34:96:5b:cc:01:
77:e1:6f:04:df:05:8a:db:d5:2e:94:2a:ee:5e:43:a0:36:a3:
94:42:15:b9:47:67:cb:78:eb:2b:c7:3b:db:bf:d1:65:d0:ae:
f3:c9:6b:1c:17:e5:f1:5b:89:21:d1:80:35:8a:28:3b:3c:dd:
a7:0d:0e:5d:23:de:91:f7:91:4c:b4:93:6d:9f:02:53:78:4f:
8f:b2:dd:db:8d:51:84:74:50:3e:32:19:fc:4f:73:49:4e:d2:
bc:92:f7:44:3c:ee:a1:bf:98:e7:08:3c:98:f5:dc:09:07:6b:
e7:4c:1a:b0:fb:5e:33:56:a4:c5:2d:32:8f:fc:8c:74:41:f1:
a8:fa:ed:bf:34:77:12:14:cb:59:2e:fb:24:41:bf:98:58:e6:
ba:ec:d7:b1:86:64:73:ed:3b:8a:a8:e4:d6:46:60:28:a3:60:
23:27:e6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:27:51 2026 by rpki-client