Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
File: rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft (raw, json)
Hash identifier: hQSuVfb/PmpD7xebl3A62fLMNMwyfwq7lsaTZzctjyY=
Subject key identifier: A1:34:36:A6:50:3C:90:79:DD:B7:33:51:42:37:80:30:13:12:79:95
Authority key identifier: AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF
Certificate issuer: /CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af
Certificate serial: 019CAF7EA9A80E43244F5C9B2E1624839B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
Manifest number: 02FE
Signing time: Mon 02 Mar 2026 17:00:39 +0000
Manifest this update: Mon 02 Mar 2026 17:00:39 +0000
Manifest next update: Tue 03 Mar 2026 17:00:39 +0000
Files and hashes: 1: 15iMLkZijLxFQhyhHpyZVO_Pbh0.roa (hash: 4vg9pvNIz6AeHAhcqTYuN2xhMEHA7ity8ku3fgSFNxI=)
2: rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl (hash: hixLhh/loH9fGJQn9QAdcZXcR/lu6158Juj2neVKt2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7e:a9:a8:0e:43:24:4f:5c:9b:2e:16:24:83:9b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af
Validity
Not Before: Mar 2 17:00:39 2026 GMT
Not After : Mar 3 17:00:39 2026 GMT
Subject: CN=a13436a6503c9079ddb733514237803013127995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:72:80:40:02:f9:f6:09:43:15:c9:52:15:9a:
5b:f9:9e:4b:bc:a9:c8:75:ce:8c:8f:67:80:74:38:
93:cc:8f:3f:46:d9:85:24:a5:18:03:29:b0:a7:3c:
0d:34:77:48:f7:dc:e9:8c:ea:30:8b:7e:3a:33:ca:
bc:74:b7:71:23:35:38:4a:04:9c:b2:07:7c:0e:45:
d4:ff:1b:fa:a4:96:3b:cd:31:39:99:34:3e:bf:86:
ae:dc:b3:ef:9a:e7:6f:a4:6d:22:c1:82:38:0e:7b:
b3:11:74:72:a5:39:51:35:11:30:e0:79:de:25:96:
5b:e1:26:60:f1:96:9c:77:51:a5:b2:b4:8c:f4:a1:
6b:82:a6:72:3b:07:34:10:09:3d:f1:53:37:a5:b0:
33:97:eb:aa:b0:f7:9e:2f:13:09:fd:6d:76:84:7b:
b5:6e:3b:c9:83:3f:b2:57:3d:ff:6a:95:2a:83:cb:
4b:dd:28:0b:13:04:8c:60:fe:b1:b8:b7:9b:3d:7d:
d5:d6:45:f5:31:6a:b0:57:91:b3:f1:e6:68:93:96:
52:3d:3d:97:c3:c1:d5:79:3a:cc:e1:72:7f:50:8d:
5a:79:85:76:2f:1f:2b:e5:50:8d:22:e6:f9:6c:f0:
17:75:d1:d5:d0:b2:f6:91:b0:cd:34:ee:e9:74:42:
43:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:34:36:A6:50:3C:90:79:DD:B7:33:51:42:37:80:30:13:12:79:95
X509v3 Authority Key Identifier:
keyid:AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:08:3a:e6:e4:3e:8a:e6:56:e5:fa:03:3d:8b:13:0f:8f:bd:
43:45:0d:5f:23:24:ec:af:27:e6:4f:46:05:2a:c7:88:c5:64:
98:5a:ce:20:a9:72:36:1c:76:c1:b4:bf:e0:e3:6e:74:ee:48:
4c:6b:d1:75:30:6d:93:94:75:79:1e:45:ef:83:5d:e4:0e:ef:
8c:0e:f6:76:98:bb:96:75:e3:11:5d:ae:86:4d:76:8e:30:03:
29:78:72:6b:a6:aa:6b:68:e7:6e:e8:d1:35:68:d2:04:4b:f3:
a0:87:c9:02:25:54:64:a1:2a:b0:3f:57:f1:03:e0:f2:e8:c4:
46:5f:6b:98:03:59:62:5c:71:8d:24:b5:2c:17:85:04:32:f1:
bb:96:01:40:81:16:1d:ec:25:2a:c3:5f:c4:e0:84:1b:3b:f8:
7a:b5:cf:7e:34:6e:cf:21:f9:e3:ae:3d:4e:30:db:5a:d1:a2:
0d:6e:a3:ef:f1:4b:52:86:07:72:c1:31:c2:da:4f:0f:29:e8:
8a:49:81:eb:6b:66:53:0d:8a:50:03:a2:eb:c9:29:4e:71:42:
a3:9a:75:dd:69:ae:3e:cc:fd:d0:da:87:53:7c:db:a5:a6:82:
5b:7f:df:c5:ef:7c:b7:29:8b:4e:16:36:ab:63:8a:ba:2a:16:
4f:0b:57:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:43:26 2026 by rpki-client