Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
File: _Z99xQlavbRF0YmFfTEBqK7info.mft (raw, json)
Hash identifier: fyWOIb4KXdXU4nkfQO75jjjuQ7hAitqIJPkUVIGSmfk=
Subject key identifier: 4E:AC:57:26:39:41:6A:1D:E1:A7:D2:7D:1A:57:0C:08:F9:E1:AF:A6
Authority key identifier: FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA
Certificate issuer: /CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa
Certificate serial: 019CAC46A9C1DEE49D3379A242D15A7394A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 02:00:37 +0000
Manifest this update: Mon 02 Mar 2026 02:00:37 +0000
Manifest next update: Tue 03 Mar 2026 02:00:37 +0000
Files and hashes: 1: 1CsIbYboFfXpu9s0vWDMRaV6Mz8.roa (hash: aw9rHGkSfZiIUgRqcbBY40U13wLpn52XPqFkofANffo=)
2: _Z99xQlavbRF0YmFfTEBqK7info.crl (hash: Fn5onWMpJ7t99lrnNDKXtW4mdE0G4+s3MdZY9C9ue9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:a9:c1:de:e4:9d:33:79:a2:42:d1:5a:73:94:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa
Validity
Not Before: Mar 2 02:00:37 2026 GMT
Not After : Mar 3 02:00:37 2026 GMT
Subject: CN=4eac572639416a1de1a7d27d1a570c08f9e1afa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e5:dd:97:8b:69:9a:23:b4:7a:64:be:ed:73:
53:58:57:b3:c3:ba:9a:89:20:56:9e:3c:5a:0f:3c:
47:b3:e9:9e:1f:93:29:77:72:42:68:ef:94:b8:b2:
f0:f0:9b:8c:76:3a:54:60:9a:0b:c4:46:1f:6b:34:
c4:a6:d6:2f:56:59:73:4a:fd:76:47:ee:fa:80:dd:
92:ba:29:80:ba:26:c8:61:7c:e9:41:d6:4b:34:f1:
53:40:2f:73:c6:7b:9b:d5:7c:d3:f6:81:ec:f6:7e:
e6:56:38:69:20:e3:a5:21:b3:0a:e6:20:0f:d5:db:
1a:cc:5b:b7:72:e2:34:90:3b:0e:ef:2d:5d:b3:72:
81:f2:00:be:44:80:a6:3d:1b:c1:3c:89:0d:7a:d1:
29:4e:90:83:a4:34:47:dc:fc:69:7a:3e:29:88:a2:
07:66:a7:03:59:dc:38:21:4f:f1:6a:e7:18:0f:52:
c2:11:6b:33:bc:d8:49:ce:4f:f6:4a:8f:17:3e:f6:
19:ea:95:e9:60:84:c4:3c:3b:b7:7e:0d:aa:ee:fe:
0a:f6:98:f1:16:95:9d:8f:b7:dc:92:c6:53:b5:1e:
04:da:91:56:45:27:8f:08:98:ec:ce:63:15:b3:72:
52:4b:75:8b:d6:01:39:d5:60:9b:bc:c0:76:ba:32:
57:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AC:57:26:39:41:6A:1D:E1:A7:D2:7D:1A:57:0C:08:F9:E1:AF:A6
X509v3 Authority Key Identifier:
keyid:FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:e7:ec:2f:63:2c:32:9b:f0:7d:b6:31:01:28:28:f1:97:7b:
d3:7e:a2:3a:36:fe:d2:5c:ba:7d:e7:d7:c5:e9:e3:23:4c:c5:
6f:64:f3:cc:9d:14:5d:a9:31:6d:5a:96:ee:30:14:ac:ea:62:
02:ed:16:d4:b6:9f:70:1e:f1:66:b4:63:8a:d0:e7:65:05:15:
21:1b:7e:5f:3d:18:50:6d:58:a2:4d:74:2c:83:43:3c:8d:d2:
91:37:27:ad:44:4d:64:ec:e6:5d:67:bd:b6:37:8d:5d:da:44:
d4:96:c7:f9:fe:9f:b1:7b:8c:bd:48:b1:f9:fe:9b:bb:6e:8c:
08:b2:5a:a2:38:6a:43:48:63:6c:0f:0e:f1:f0:b2:ee:ad:72:
29:43:df:8f:de:a4:c6:da:a9:e4:de:3b:de:7a:df:8e:85:06:
d5:e0:ff:ba:bc:d3:07:0d:01:e5:2e:c3:8d:8d:41:34:c8:81:
b2:c5:8d:03:25:a1:aa:a2:5e:66:1e:7e:71:e2:26:13:49:94:
6b:ed:e7:ab:3c:8c:4b:f5:12:82:6d:4b:7f:60:71:a4:ea:ac:
91:2a:9c:59:a9:60:b9:95:c7:37:cb:79:d8:74:9d:90:ec:25:
9d:76:6b:f8:8d:83:c8:61:e0:86:ab:d3:85:be:00:75:76:c0:
8f:46:99:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:57 2026 by rpki-client