Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft
File: Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft (raw, json)
Hash identifier: dj9b3f4P2MkDxw49j30MnAhFgZPjPH7UO+MnZVlA0SU=
Subject key identifier: DB:98:16:B0:29:7B:75:E2:6F:10:BE:96:1C:FF:B5:6D:8F:44:F0:F3
Authority key identifier: 46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12
Certificate issuer: /CN=464d733de81fbd486d442358e0c15370520f9312
Certificate serial: 019CAD5A3FCD74942681F5AEB5C3882D4662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft
Manifest number: 02E9
Signing time: Mon 02 Mar 2026 07:01:38 +0000
Manifest this update: Mon 02 Mar 2026 07:01:38 +0000
Manifest next update: Tue 03 Mar 2026 07:01:38 +0000
Files and hashes: 1: Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl (hash: yt944rAJyEwqz3OXEhHe0FtqOri8neABLFeJFhYFgwk=)
2: X2-StnXGjfI9wfKhZQp0793U3Io.roa (hash: l8ocH0IxQsjfL6ukdiPqqCpYZzs3R9sEM3Pe+2LGF84=)
3: _BGqcu40RXoTf10_8VGIOgqYEiw.roa (hash: EO0e4LrOi8gJaif6ib941Se3Fz7ZwcHJpJUxBOS6sjg=)
4: sYLKdeDOUeQxy_Kv2E_Cnj0I44k.roa (hash: 7UjSkmLEewaWHHfvbCaxDyZlIQWGWRAv2o5SfuX7IBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:3f:cd:74:94:26:81:f5:ae:b5:c3:88:2d:46:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464d733de81fbd486d442358e0c15370520f9312
Validity
Not Before: Mar 2 07:01:38 2026 GMT
Not After : Mar 3 07:01:38 2026 GMT
Subject: CN=db9816b0297b75e26f10be961cffb56d8f44f0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fa:7d:c5:df:82:16:4e:49:32:bb:eb:1e:31:
a5:7b:ec:7a:61:1a:04:24:f7:1b:c4:f8:85:3a:bb:
30:a0:40:2b:86:e1:a7:f1:bf:e5:1e:da:8c:43:43:
af:44:dc:e3:3c:39:35:8d:ab:ec:6b:5e:e9:42:5c:
45:5f:e1:a5:67:68:a6:11:c4:aa:21:8c:4c:b6:aa:
2f:ea:57:1f:94:80:eb:cd:fa:07:c5:ca:25:32:e4:
6b:13:9c:b7:b6:b2:66:6c:8d:e5:52:2e:7e:7d:91:
c7:af:7e:50:44:1c:5f:f1:18:05:29:a3:34:0a:1c:
43:cf:16:fe:32:db:07:27:b6:72:d6:86:8d:69:14:
92:4f:fe:22:ce:60:8e:4b:1e:e5:d3:9f:0c:e1:64:
0c:47:eb:fd:6f:9a:4c:60:58:d7:ae:32:81:30:6b:
5c:2a:3d:ee:50:9a:cd:8a:b3:19:0f:e1:16:c0:65:
45:0f:1d:21:84:0a:16:57:2e:70:25:5d:c5:7f:64:
f0:12:e7:cf:f0:a3:9a:65:90:91:e2:f8:76:ae:2b:
39:35:d8:d2:8a:c6:c2:61:3d:3e:e4:15:ae:39:4b:
0b:ff:15:f1:e3:a9:c4:2d:45:9a:01:73:d2:a4:0d:
01:a3:27:bf:26:60:d4:e1:85:5d:43:2d:81:c7:bd:
30:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:98:16:B0:29:7B:75:E2:6F:10:BE:96:1C:FF:B5:6D:8F:44:F0:F3
X509v3 Authority Key Identifier:
keyid:46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e9:13:ad:04:18:92:71:5c:a7:37:89:6a:58:4d:42:7d:1b:
dc:33:36:a5:06:d2:d7:8b:ec:ac:11:57:15:5c:97:7d:ef:b3:
81:a3:de:4a:06:57:3f:8b:08:98:55:6a:f5:84:a4:72:e0:79:
2e:7a:39:fa:8c:8d:2d:5e:a6:e8:6a:0b:ce:57:02:87:a4:bd:
c2:26:fc:7d:60:d5:70:33:f9:c9:86:d7:d5:7b:6a:71:e9:84:
bc:cc:bb:48:1e:78:5d:f6:e1:2f:46:f0:bd:ca:c1:5a:30:9a:
89:bc:44:55:47:84:73:c9:a0:b0:fa:00:79:f6:3c:88:17:e1:
4f:12:66:b5:ee:90:65:e4:55:23:0c:96:94:c8:8f:b5:b6:b3:
c6:9e:4f:4e:89:8c:9b:9c:fb:7d:d6:41:87:4d:ed:45:f0:92:
ea:ad:98:91:9c:63:f6:b3:12:69:fd:a7:35:ae:d7:e8:8d:b7:
7e:db:1c:4b:5d:20:1d:b9:da:8d:b3:e4:7a:c4:63:62:c6:b1:
ad:76:a1:8a:27:de:5d:bf:da:9d:9f:76:ae:d7:55:9b:a3:0b:
51:c7:85:e8:df:41:0b:7c:7d:b0:cd:34:89:f4:5d:78:05:8b:
25:47:f4:87:2b:78:6d:a3:d2:79:05:fe:f7:f5:bf:bf:8c:3e:
2b:ae:16:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:15:20 2026 by rpki-client