Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
File: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft (raw, json)
Hash identifier: nkWdewqs4yDbLyvTRcnPj4Dd2c8//yvZEONd/CB5uuk=
Subject key identifier: B9:0F:F6:E9:B9:64:41:BB:90:80:56:6E:8C:E0:D3:74:5F:FA:50:F6
Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
Certificate issuer: /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Certificate serial: 019CAB342F93EC940B59E98326D8D6EB0715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
Manifest number: 0B11
Signing time: Sun 01 Mar 2026 21:00:49 +0000
Manifest this update: Sun 01 Mar 2026 21:00:49 +0000
Manifest next update: Mon 02 Mar 2026 21:00:49 +0000
Files and hashes: 1: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl (hash: yDv7Xe1XQpoE547fuFCLLO2RoXGD72RCGFYX+7lp6i8=)
2: KVXgF5z3zvUbDWDR9vEfB08gTrE.roa (hash: UHAb4fioT9YjE1AokUnZfVbvlTm8HooTgsw5q7QUcZ0=)
3: p_71hNByXrDuNYKSNzWqmsK9r-A.roa (hash: KH7XFzdKacxa7PKL/12r22Uz9GNXLSLW65hXt/t41hQ=)
4: wO6fRWt8N7XMvIeyLTRMhJ0-t94.roa (hash: HaZn3L1Ow7LzOKxqi0hwoJYvNFRFIKrjZGo6K0g1OtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:2f:93:ec:94:0b:59:e9:83:26:d8:d6:eb:07:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Validity
Not Before: Mar 1 21:00:49 2026 GMT
Not After : Mar 2 21:00:49 2026 GMT
Subject: CN=b90ff6e9b96441bb9080566e8ce0d3745ffa50f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:62:32:6b:b7:3f:97:ac:7b:3a:b6:1d:83:
bd:1f:7a:f5:86:11:b9:b0:65:e3:43:6e:4d:03:b1:
70:4a:07:48:6f:e0:58:0b:0f:45:4d:8e:08:7d:d8:
c1:54:08:0a:1f:82:93:cc:a9:0b:93:23:79:a0:be:
40:a8:e8:29:d9:f0:cf:5e:7b:a9:3e:25:16:15:7f:
c4:e1:5b:fd:5f:21:f5:fa:80:41:e7:69:ef:6a:09:
64:c7:91:ac:c0:25:dc:9c:4f:2f:fe:e7:ef:66:bd:
84:17:90:96:76:a2:00:32:af:89:6c:74:b6:68:0d:
27:c0:bc:5d:ff:be:cb:73:23:f7:c3:34:68:c5:e7:
ba:0a:13:89:2e:1f:3a:cb:66:c0:a5:c8:2a:b5:34:
0b:11:c8:b2:3a:1f:d5:8c:5b:e3:ac:f8:49:8b:09:
70:2e:fe:30:25:3b:af:f6:b1:35:7e:4f:e2:dd:ff:
4b:1d:cf:fe:8b:32:06:22:8a:fa:31:65:e0:7d:14:
16:f1:c1:e7:78:53:b9:a1:25:b8:92:80:3c:37:45:
69:ec:aa:b0:25:3c:fc:aa:52:42:eb:90:6e:4b:c9:
d5:c4:c2:7f:19:c7:0d:6c:89:2f:22:65:4e:26:c5:
78:01:90:6b:f0:dc:92:98:df:6b:86:1e:5d:f7:1b:
93:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0F:F6:E9:B9:64:41:BB:90:80:56:6E:8C:E0:D3:74:5F:FA:50:F6
X509v3 Authority Key Identifier:
keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ba:03:94:27:a8:5c:70:8f:1e:a4:be:50:78:59:12:6d:0d:
45:73:e4:1c:5f:d0:e2:39:4c:26:cc:c1:de:fc:e8:85:92:8f:
dd:0c:ee:e2:ea:2e:a8:05:57:ac:27:38:9b:4c:cb:07:33:d2:
3b:dd:1a:c0:38:24:42:db:c4:8f:6f:61:b7:cd:1c:4f:54:1e:
71:90:e6:d0:7d:c8:ef:85:ce:7a:32:3e:a2:38:64:5c:c2:51:
b8:17:3e:6c:ba:98:81:41:df:fd:49:6b:ac:1f:3d:61:a4:6d:
95:81:43:a0:31:f9:9a:6b:fc:f8:fd:e4:7d:d0:f7:2d:95:42:
02:28:ff:aa:43:1b:c9:63:1d:f0:17:f2:2c:82:64:93:ae:ad:
28:56:3f:38:3b:2d:a6:81:ca:6d:6d:88:7a:0d:1e:00:cd:8a:
28:ee:31:d2:ec:ee:a4:2d:54:46:a4:e9:f6:85:77:df:2d:e6:
80:ea:bb:d7:4f:fb:82:d3:67:07:5e:77:80:0f:e6:c4:d4:62:
4a:82:be:a1:5e:ec:e1:bc:d1:61:10:0d:3f:f8:de:ad:b6:b9:
cd:57:d2:c0:d1:0a:d0:f7:bb:ed:c9:44:c8:c9:74:a1:56:68:
76:6a:31:80:2e:da:80:05:47:6c:20:90:95:ab:26:ba:81:15:
4b:f1:ce:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:49:45 2026 by rpki-client