Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
File: RZR46fHzCyT9FxmNHKyDW8Hk368.mft (raw, json)
Hash identifier: gyIf+0WWMa/6k/WajFz1Uiy3QsZyLkJ0ZumfxEGrML4=
Subject key identifier: E1:B2:B9:DC:21:AB:70:9A:7C:FB:18:8D:51:CD:33:F8:39:C4:AE:AD
Authority key identifier: 45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
Certificate issuer: /CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Certificate serial: 019CAA8F4D3B4EB0C9C9BCE11ECBA8C339DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
Manifest number: 08E5
Signing time: Sun 01 Mar 2026 18:00:43 +0000
Manifest this update: Sun 01 Mar 2026 18:00:43 +0000
Manifest next update: Mon 02 Mar 2026 18:00:43 +0000
Files and hashes: 1: 7QM2KeQ3Wn7b2DM_DaBA8kJny-8.roa (hash: 62/MDcXDz4G8cxXxwlkwD2glafSnz5PZXVYHbOFIM38=)
2: RZR46fHzCyT9FxmNHKyDW8Hk368.crl (hash: fP7uFpLDaOgKOGAMEJzg03vDRsgSuSqvkt6JXvZYv5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:4d:3b:4e:b0:c9:c9:bc:e1:1e:cb:a8:c3:39:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Validity
Not Before: Mar 1 18:00:43 2026 GMT
Not After : Mar 2 18:00:43 2026 GMT
Subject: CN=e1b2b9dc21ab709a7cfb188d51cd33f839c4aead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:ec:84:08:7e:12:af:f5:10:48:53:8e:a5:
c0:bd:58:b7:15:31:23:89:af:ed:d6:be:00:50:7e:
65:95:6e:06:8a:f4:61:4b:ed:38:a4:70:53:04:19:
d5:8d:36:0d:6e:b2:55:14:73:9d:3c:66:10:02:e7:
90:cc:5f:b9:1d:19:75:2f:f9:75:7c:57:a8:d2:d7:
70:62:de:5b:75:31:46:87:d6:49:1a:53:7b:53:52:
66:37:73:65:8d:7d:7d:61:d0:cb:ac:6c:eb:57:72:
7e:51:eb:db:0a:b3:b7:dd:91:15:8e:03:43:82:74:
21:87:4d:24:63:29:1a:80:ba:b5:83:c9:a9:8e:d9:
40:30:2b:fa:d6:0e:13:37:06:d5:42:72:3e:86:f7:
1e:45:39:df:7a:0c:9a:48:42:ff:eb:0b:be:e1:22:
d7:36:17:73:4b:84:42:c2:2e:bc:c8:e0:5e:3a:83:
b6:df:66:b7:c3:7f:a9:38:c6:33:70:08:d5:a0:77:
f4:c3:20:c6:6d:4a:fa:e1:44:54:f8:d0:1b:f4:bd:
bd:ed:fa:f1:59:5a:13:d7:3e:e8:fc:0c:6d:dc:a0:
74:2a:ef:94:15:85:bc:fc:6c:f4:d0:c8:d2:48:8f:
86:3c:98:77:e8:4b:3e:b5:1d:24:82:cd:01:24:8f:
3c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B2:B9:DC:21:AB:70:9A:7C:FB:18:8D:51:CD:33:F8:39:C4:AE:AD
X509v3 Authority Key Identifier:
keyid:45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:24:30:71:9d:eb:11:39:3b:99:d0:58:b6:48:8a:ea:0e:93:
05:94:41:17:db:72:a0:a4:0a:73:ec:a9:02:2f:d9:07:8b:90:
9e:3b:a1:c6:14:73:d7:dc:44:4d:76:e0:9d:50:d3:88:dc:af:
49:f8:5c:29:b1:32:49:27:32:c1:8e:ef:f5:95:68:0c:95:93:
46:f3:11:85:2b:9f:88:3e:13:e4:4e:c6:e5:b8:32:8f:79:f1:
74:b5:fa:df:8f:cf:67:98:b2:73:98:36:09:70:3f:da:71:c6:
09:82:61:db:61:04:ae:31:b4:17:b3:18:72:64:45:b5:e5:11:
df:43:53:b6:ef:14:6e:3d:b7:a3:b1:ff:14:19:8d:8e:c4:17:
4d:7f:2f:ac:78:6f:68:05:4a:89:b2:52:16:4b:1c:3d:c1:90:
94:f5:25:6f:ab:a8:57:d2:5f:fb:0e:76:98:48:4f:52:98:a5:
ce:15:59:64:0d:f7:f5:9a:3d:73:30:c8:aa:15:06:17:58:7a:
d3:a8:67:99:e2:94:5b:37:e5:3c:27:25:d2:7d:d0:3b:b6:93:
38:20:68:5f:68:84:10:4c:8a:26:9c:8d:9b:76:13:3e:62:54:
9c:10:b0:0b:bf:68:78:3c:a8:05:6f:ef:a3:8e:b7:2b:18:92:
db:c5:07:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:26 2026 by rpki-client