Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
File: dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft (raw, json)
Hash identifier: sn+esb/PkML3CNK2sRsCEEgUnUMNDfUOCbvFX5SwY4g=
Subject key identifier: 09:B0:BD:75:E6:11:42:1C:98:42:E6:9A:5B:18:4D:58:F9:B2:03:CF
Authority key identifier: 75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
Certificate issuer: /CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Certificate serial: 019CA86A13F9C6AAD96B529FA2894490F781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
Manifest number: 0C6E
Signing time: Sun 01 Mar 2026 08:00:49 +0000
Manifest this update: Sun 01 Mar 2026 08:00:49 +0000
Manifest next update: Mon 02 Mar 2026 08:00:49 +0000
Files and hashes: 1: cLTBY0x98iSs-6Cq3vbECPm_74w.asa (hash: 8w6sqSdlGvX1lbVCngXKKl24zTm7KhQKQzRK40Ycchc=)
2: dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl (hash: P8fR5es2Qy8gEA1QYMtTc3/EzCYgM74ltgVtrVZnkdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:6a:13:f9:c6:aa:d9:6b:52:9f:a2:89:44:90:f7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Validity
Not Before: Mar 1 08:00:49 2026 GMT
Not After : Mar 2 08:00:49 2026 GMT
Subject: CN=09b0bd75e611421c9842e69a5b184d58f9b203cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bf:9f:64:2d:b6:fb:90:1d:6f:e6:6f:7a:2e:
a2:9b:79:90:57:58:1f:7a:5c:cf:0a:8d:7e:11:9d:
64:11:33:a1:d1:d0:7d:ec:18:14:7b:f2:8f:db:6d:
5c:a0:0d:79:e8:34:8f:66:7a:19:7b:5d:a9:1b:b5:
78:35:7f:09:23:27:d2:93:6c:51:46:09:18:67:8a:
28:73:fb:84:74:70:19:34:93:8c:0f:00:3c:e6:02:
bd:c1:2d:35:f1:90:d4:99:8b:52:95:f8:2c:66:96:
e6:5f:d3:cd:4b:31:90:72:79:71:7f:5f:06:6b:d7:
62:92:dd:2b:f0:3a:b2:d5:9c:99:4b:20:aa:e9:26:
10:6e:12:0f:46:81:f4:57:01:04:c8:30:1f:3c:44:
b7:7a:25:27:b2:8d:ab:d5:09:5c:a3:24:89:57:61:
3c:7b:82:60:a9:b8:b0:25:e4:53:17:cf:14:91:c0:
48:af:c1:b5:2a:39:c4:8f:94:27:e8:ee:7c:25:bd:
8d:4c:cb:42:35:d4:e9:11:4a:c7:4d:c0:0f:2b:27:
8f:17:13:81:23:f2:f1:f8:f4:d9:10:de:7f:8d:3d:
d6:69:5a:37:ee:85:24:e8:58:bf:79:05:40:3c:fa:
77:d8:62:46:e2:ae:44:48:79:5e:ce:ba:94:70:0b:
00:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B0:BD:75:E6:11:42:1C:98:42:E6:9A:5B:18:4D:58:F9:B2:03:CF
X509v3 Authority Key Identifier:
keyid:75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ab:8c:11:df:58:33:f1:a7:67:52:ea:4d:38:ce:c2:0a:4b:
8c:89:5f:67:a5:d5:86:3c:90:1a:2e:ec:26:3d:29:25:08:3f:
da:6a:aa:11:3f:9e:fe:a2:dc:bb:a5:d0:90:7f:5a:e2:04:9e:
6c:76:1e:6a:73:e5:da:fb:8a:f4:bc:80:71:c8:08:d6:d1:04:
67:26:cb:f0:9f:21:0a:e8:ba:e6:0f:6d:70:80:0e:97:26:c6:
59:0b:38:21:18:3e:2d:66:d0:4c:81:79:12:38:f5:f2:ec:2d:
28:74:ed:ec:37:02:06:d0:0b:ed:ac:b4:b0:8f:24:35:e9:dc:
d2:11:7e:cd:f5:09:35:ed:7b:72:8a:f3:a2:35:55:12:ef:81:
0a:46:de:3d:0f:2c:bb:35:ab:1c:23:a1:33:02:e7:dc:d4:3d:
ff:49:14:81:00:9f:39:57:3d:da:e9:c2:0d:55:6c:20:62:c5:
d1:5c:af:3f:e0:ce:7e:03:b3:e7:21:10:87:ca:8f:22:3c:65:
df:56:33:4c:9f:e0:3a:77:7c:05:3c:ef:72:78:df:e2:7b:ae:
23:1a:fe:89:59:76:90:8b:10:13:40:33:7f:23:95:ae:27:62:
65:87:c3:b4:46:a1:33:83:c1:ee:87:c2:dd:ab:1b:1f:26:0a:
7b:d5:4d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:14:45 2026 by rpki-client