Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
File: RzLsDpHbv5TdodZQRH0miXbWIJo.mft (raw, json)
Hash identifier: HuLn91mrDrUnbXVF7nCyCWe5CokwQ6svvTJR3XU17E0=
Subject key identifier: 98:F0:4E:16:28:89:B5:33:45:D7:B1:9A:03:6C:7B:1A:CF:6C:74:BE
Authority key identifier: 47:32:EC:0E:91:DB:BF:94:DD:A1:D6:50:44:7D:26:89:76:D6:20:9A
Certificate issuer: /CN=4732ec0e91dbbf94dda1d650447d268976d6209a
Certificate serial: 019CAAC67739C4AA06DA22828C469F5FB6D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
Manifest number: 0CFC
Signing time: Sun 01 Mar 2026 19:00:59 +0000
Manifest this update: Sun 01 Mar 2026 19:00:59 +0000
Manifest next update: Mon 02 Mar 2026 19:00:59 +0000
Files and hashes: 1: RzLsDpHbv5TdodZQRH0miXbWIJo.crl (hash: wq5YDoi5YWyAnu6n289SUx4bwmxSkcnuTzU8LDNi6ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:77:39:c4:aa:06:da:22:82:8c:46:9f:5f:b6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4732ec0e91dbbf94dda1d650447d268976d6209a
Validity
Not Before: Mar 1 19:00:59 2026 GMT
Not After : Mar 2 19:00:59 2026 GMT
Subject: CN=98f04e162889b53345d7b19a036c7b1acf6c74be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f6:a3:b0:b4:02:f3:8f:89:76:24:4b:60:d2:
60:88:06:14:45:05:61:b8:24:89:c6:6f:63:24:d4:
22:d3:f8:a7:66:37:89:6e:65:48:13:70:bb:60:cc:
d1:89:ae:2d:df:f8:88:e7:3e:2a:20:6b:cf:28:ba:
ec:68:79:60:d0:56:67:0e:5a:34:88:c3:d4:30:e0:
f0:5b:5a:f1:87:79:e6:27:94:b4:8b:11:09:bc:ca:
f7:49:64:86:47:3f:7f:dd:8c:fc:35:6a:32:e2:6a:
b6:5b:a2:f9:ea:37:06:32:c3:4a:1e:7b:cc:d1:c6:
3e:c3:e4:07:9d:a8:4d:e0:1f:0f:27:33:d3:cd:90:
c6:bf:50:87:b5:a3:03:79:34:18:ef:c1:b9:5a:a8:
7d:36:17:3b:01:92:68:31:64:2e:b1:37:ad:52:a2:
f4:7b:ac:06:73:ce:91:31:df:58:39:dc:4e:3a:29:
a2:56:54:ff:93:9b:b6:fd:bf:b2:34:f6:7f:27:0a:
04:0f:b7:17:fa:2b:bc:aa:36:6e:86:86:a6:3c:ed:
b1:77:47:e3:fb:21:75:04:68:ab:c5:c1:a7:dd:56:
5c:0f:41:35:4e:68:2a:f1:c2:dc:d0:8f:4a:2d:ed:
24:18:a2:52:07:b4:8e:94:cd:fc:9b:43:66:83:62:
a9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F0:4E:16:28:89:B5:33:45:D7:B1:9A:03:6C:7B:1A:CF:6C:74:BE
X509v3 Authority Key Identifier:
keyid:47:32:EC:0E:91:DB:BF:94:DD:A1:D6:50:44:7D:26:89:76:D6:20:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:83:4f:8a:01:3f:73:17:1b:43:90:32:b8:83:a3:84:65:fc:
36:5b:1f:09:64:81:0b:90:7f:a9:4d:03:54:23:6a:f8:57:b6:
7f:15:e9:1d:d3:be:9d:dc:e8:85:6c:d4:2a:31:29:54:23:8e:
51:60:e7:74:ea:9a:55:d0:d5:ac:75:fe:f6:e4:c5:ab:f6:a3:
b8:b8:8a:e4:d2:ad:65:f9:e2:0c:33:29:e2:a7:61:d4:c9:90:
67:85:4c:c5:05:69:54:7a:60:35:b0:41:b0:32:7a:5c:4e:eb:
72:b5:d0:b5:48:b1:c9:cd:e0:48:2d:95:9e:ab:fd:1e:3b:95:
c3:5a:a0:9d:39:31:f3:aa:43:3b:04:30:6b:63:71:13:b9:3b:
d5:d7:7c:ae:f8:89:02:e5:fd:9d:db:e5:28:c2:0d:62:7e:bc:
21:81:ec:eb:40:89:10:bd:62:eb:8e:fa:9f:6d:ff:ed:76:fa:
61:f9:e7:46:48:c1:bf:de:0c:70:99:4d:7a:54:29:05:dd:f4:
f0:e4:8f:d4:14:f5:88:10:23:ed:04:da:b0:af:a7:a0:7f:eb:
f7:df:3e:7d:92:c4:3c:e4:6d:f0:d8:02:d8:97:63:b6:6b:e9:
0c:dc:22:2e:3d:a8:da:0c:50:e8:46:82:4e:a3:3e:3e:cf:07:
93:ab:9c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:37 2026 by rpki-client