Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
File: Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft (raw, json)
Hash identifier: LaOJhuS+HUryOmuOFnXa8pFlpDKIIjNJxczsQDaT3QI=
Subject key identifier: 6D:5C:48:F7:67:D4:81:91:CD:BA:07:AD:5E:91:80:9F:13:51:8D:8A
Authority key identifier: 47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3
Certificate issuer: /CN=473f498592457859f26fb5a610b7b51ef52413f3
Certificate serial: 019CAC46C08435B42B644830F3739FEABA8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
Manifest number: 09BA
Signing time: Mon 02 Mar 2026 02:00:43 +0000
Manifest this update: Mon 02 Mar 2026 02:00:43 +0000
Manifest next update: Tue 03 Mar 2026 02:00:43 +0000
Files and hashes: 1: Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl (hash: SJZMCg8h/Sna4s/r9gBFIx4tZQ27jt6WcdIx6WgnL6k=)
2: hSwUOwAMED0n18PsqXIxOxQYAlQ.roa (hash: DbjICHwW8+pnzPKc7pAGSBb3/bjUMmNtreKRXOAvuXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:c0:84:35:b4:2b:64:48:30:f3:73:9f:ea:ba:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473f498592457859f26fb5a610b7b51ef52413f3
Validity
Not Before: Mar 2 02:00:43 2026 GMT
Not After : Mar 3 02:00:43 2026 GMT
Subject: CN=6d5c48f767d48191cdba07ad5e91809f13518d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:60:52:1e:fc:ad:32:b8:60:a4:24:c8:35:4c:
3f:00:6b:33:83:5a:16:10:e6:82:61:bb:5c:d9:72:
a9:9c:5e:b3:a0:df:97:78:51:23:71:a6:f0:4f:52:
df:6a:56:72:8e:51:d0:48:94:73:69:d9:6b:a8:ad:
50:cf:7f:97:0a:48:f6:da:f6:d8:a4:2e:d8:20:7d:
63:5d:18:4a:ae:e6:62:f9:08:74:0b:b0:26:15:65:
bb:dd:3a:4f:fc:36:61:c0:6a:b6:22:1e:58:d7:b0:
1f:27:55:6d:89:f7:59:f5:55:b8:5b:e4:52:38:db:
32:2e:87:df:76:8c:e3:ac:b3:28:d6:b8:fc:89:04:
ba:1c:31:cd:ef:65:7c:70:29:b5:84:89:e0:f3:f0:
49:33:3b:7f:94:02:8a:8a:2d:4e:43:dc:a8:eb:78:
85:da:4a:4e:7c:d4:b1:35:1b:ae:b6:91:f2:ca:7b:
36:e5:b0:87:7e:99:98:fb:8c:5e:9a:20:c0:01:36:
ae:64:25:9e:4a:8e:c6:1e:63:79:7a:89:b2:1d:1b:
8e:ba:bb:e9:eb:83:c6:50:1d:c1:1e:85:c2:b2:f3:
06:9e:42:4e:21:ba:38:1b:1c:64:85:b0:09:6e:6b:
71:54:ce:ae:80:61:81:49:35:13:b4:f5:31:a4:c3:
e9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5C:48:F7:67:D4:81:91:CD:BA:07:AD:5E:91:80:9F:13:51:8D:8A
X509v3 Authority Key Identifier:
keyid:47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7c:bc:57:36:70:f0:d1:44:8c:06:b6:6a:1a:fb:ef:2b:5f:
2d:24:77:53:d3:ba:62:6e:ba:bc:62:06:91:7e:48:0f:f0:a3:
ff:57:99:ba:a1:7b:d1:75:50:54:25:52:9c:46:22:4e:41:52:
31:fe:9c:ca:69:ab:38:3c:1a:82:5b:53:41:81:c3:f3:7b:22:
7d:38:b2:4b:de:e3:c0:90:b3:54:f6:9a:d2:cf:55:b9:67:63:
e2:a0:60:6e:7c:88:7c:df:f6:68:2c:07:52:a4:b4:bf:86:fd:
e4:2b:95:e8:8e:b9:85:09:34:64:e6:94:dd:a3:50:f5:35:79:
0f:0d:35:b4:fd:86:a0:96:7b:b5:bb:8a:4b:84:d0:72:42:13:
63:34:90:d6:21:2e:55:1b:8b:1f:f4:5b:90:17:de:01:7d:7b:
c6:e9:c3:a9:49:40:8d:1e:59:ba:fb:1e:e0:24:a3:c5:a2:66:
d0:18:76:07:22:16:e3:68:53:bc:f1:62:52:81:af:7f:dd:d9:
b6:58:d5:c9:23:c5:39:85:24:0b:f5:25:f0:c2:95:b8:b0:29:
4c:c8:fb:22:da:b4:8f:76:21:04:be:b1:c8:51:49:09:ba:ef:
fa:b5:19:71:51:ac:e4:3e:e9:1b:1f:1b:45:57:30:22:20:92:
3f:5b:95:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:25:34 2026 by rpki-client