Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
File: RzC917vMVv6TebEYysfh-SBSp64.mft (raw, json)
Hash identifier: JW6SaZGgKJVh+WT/WcHYeO1Wn+ql23VcAurH+6x5G1o=
Subject key identifier: 6E:20:AB:27:5D:65:8B:03:1C:BF:2C:DF:C0:21:B6:80:6D:42:32:E0
Authority key identifier: 47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE
Certificate issuer: /CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae
Certificate serial: 019CACEBB332D1AAD9DB3E3632B7DD978579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
Manifest number: 0605
Signing time: Mon 02 Mar 2026 05:00:53 +0000
Manifest this update: Mon 02 Mar 2026 05:00:53 +0000
Manifest next update: Tue 03 Mar 2026 05:00:53 +0000
Files and hashes: 1: O2TJIvTx_voT0YHcBveB5ME3HxU.roa (hash: iQiLUq3IFvglKvs6Hy5MwuxHRRp9rkkjwK4qxW0zxvg=)
2: RzC917vMVv6TebEYysfh-SBSp64.crl (hash: FHd5AV+x+oD8axPSL/lW1lBDlmciQRA2E8rx9rLPCSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:b3:32:d1:aa:d9:db:3e:36:32:b7:dd:97:85:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae
Validity
Not Before: Mar 2 05:00:53 2026 GMT
Not After : Mar 3 05:00:53 2026 GMT
Subject: CN=6e20ab275d658b031cbf2cdfc021b6806d4232e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0b:74:29:a8:47:cc:b3:cb:1a:a4:17:9a:5e:
e0:02:09:93:36:96:ca:54:ee:a3:a7:59:50:5e:76:
55:ee:13:5e:ff:97:ec:1a:14:8a:01:33:b1:7e:9e:
a2:1f:ea:d3:63:80:03:e9:ee:50:8a:db:fb:06:66:
1d:27:64:2e:8f:2e:d2:d8:94:ea:42:43:51:18:dc:
6b:49:55:a3:07:4b:66:19:2c:db:f7:83:6e:46:7b:
05:26:c4:e0:9d:ba:8e:35:a1:28:3c:75:7b:6a:38:
ef:8d:e4:30:d3:19:21:30:67:33:a7:43:0b:32:21:
30:69:b5:d1:fa:3b:9e:34:2b:b4:29:c1:3f:93:9f:
3f:30:be:69:45:42:a1:ec:04:a6:58:91:99:56:e5:
84:86:0c:98:82:0a:b1:a0:d6:50:1e:94:2b:10:b9:
e0:15:b6:82:e1:42:15:ce:de:fe:23:1e:c5:e4:7c:
67:e2:6b:bb:7f:6a:96:89:61:e6:4f:3a:59:82:4f:
83:e4:40:4f:e0:4b:bc:18:86:fd:19:7c:a9:dc:e1:
0d:34:cb:4c:5b:fc:ed:c9:c3:0c:ec:5e:59:ab:4c:
1e:04:ae:15:fe:3a:bc:2c:0a:86:20:1e:69:9d:8e:
3d:4f:89:1f:05:39:02:7d:db:69:d0:79:e5:5f:c3:
33:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:20:AB:27:5D:65:8B:03:1C:BF:2C:DF:C0:21:B6:80:6D:42:32:E0
X509v3 Authority Key Identifier:
keyid:47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b6:50:6d:c7:af:6f:8e:b6:d6:bc:cd:c2:e5:3e:53:29:81:
04:bf:c8:0d:c6:65:cb:89:3a:28:e6:f6:f4:62:ac:72:03:1f:
89:64:53:e4:46:00:df:da:6b:58:64:03:0d:97:e9:95:50:17:
81:6a:12:16:31:95:39:8e:81:20:3b:d7:3e:d3:2b:b4:dd:9f:
a0:e7:43:b8:fd:45:5e:b5:49:ed:6c:73:d2:70:b0:53:2b:dc:
90:67:4e:36:50:d4:6d:b2:17:c7:95:b3:4b:a3:d9:c1:e9:c8:
f8:0d:a6:8e:eb:b3:71:7a:7d:d8:0b:45:e3:32:7d:42:7a:b7:
5c:c8:d1:ca:37:55:78:68:fa:93:3d:b0:40:3c:83:15:2b:07:
aa:c6:98:2a:b8:95:e5:10:c0:d4:2a:b6:24:70:06:23:11:c7:
bd:38:8f:d4:58:4b:37:3d:8d:a7:0c:07:ef:dc:c2:37:c5:32:
32:88:5c:26:45:07:15:0d:88:83:4e:84:a6:23:39:4a:5a:7b:
f4:a0:ef:ed:4a:40:56:c2:0f:c8:ba:16:bc:3f:46:61:33:9d:
7d:4a:29:bb:48:e1:89:45:e4:8f:4f:ed:a6:55:52:c1:89:56:
d0:c2:38:03:f5:81:d2:d7:c3:8e:7e:c0:ab:05:32:fc:fe:07:
b9:ee:77:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys67My0arZ2z42Mrfdl4V5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MzBiZGQ3YmJjYzU2ZmU5Mzc5YjExOGNhYzdlMWY5MjA1
MmE3YWUwHhcNMjYwMzAyMDUwMDUzWhcNMjYwMzAzMDUwMDUzWjAzMTEwLwYDVQQD
Eyg2ZTIwYWIyNzVkNjU4YjAzMWNiZjJjZGZjMDIxYjY4MDZkNDIzMmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogt0KahHzLPLGqQXml7gAgmTNpbK
VO6jp1lQXnZV7hNe/5fsGhSKATOxfp6iH+rTY4AD6e5Qitv7BmYdJ2Qujy7S2JTq
QkNRGNxrSVWjB0tmGSzb94NuRnsFJsTgnbqONaEoPHV7ajjvjeQw0xkhMGczp0ML
MiEwabXR+jueNCu0KcE/k58/ML5pRUKh7ASmWJGZVuWEhgyYggqxoNZQHpQrELng
FbaC4UIVzt7+Ix7F5Hxn4mu7f2qWiWHmTzpZgk+D5EBP4Eu8GIb9GXyp3OENNMtM
W/ztycMM7F5Zq0weBK4V/jq8LAqGIB5pnY49T4kfBTkCfdtp0HnlX8Mz+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4gqyddZYsDHL8s38AhtoBtQjLgMB8GA1UdIwQY
MBaAFEcwvde7zFb+k3mxGMrH4fkgUqeuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpDOTE3dk1WdjZUZWJFWXlzZmgtU0JTcDY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mZjljZjYtYzY5MC00YzQ0LTlmNjMt
ZGIxYjYzYTBhOGMxLzEvUnpDOTE3dk1WdjZUZWJFWXlzZmgtU0JTcDY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9mZjljZjYtYzY5MC00YzQ0LTlmNjMtZGIxYjYzYTBhOGMx
LzEvUnpDOTE3dk1WdjZUZWJFWXlzZmgtU0JTcDY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrZQbcev
b4621rzNwuU+UymBBL/IDcZly4k6KOb29GKscgMfiWRT5EYA39prWGQDDZfplVAX
gWoSFjGVOY6BIDvXPtMrtN2foOdDuP1FXrVJ7Wxz0nCwUyvckGdONlDUbbIXx5Wz
S6PZwenI+A2mjuuzcXp92AtF4zJ9Qnq3XMjRyjdVeGj6kz2wQDyDFSsHqsaYKriV
5RDA1Cq2JHAGIxHHvTiP1FhLNz2NpwwH79zCN8UyMohcJkUHFQ2Ig06EpiM5Slp7
9KDv7UpAVsIPyLoWvD9GYTOdfUopu0jhiUXkj0/tplVSwYlW0MI4A/WB0tfDjn7A
qwUy/P4Hue539Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:52:08 2026 by rpki-client