Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
File: dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft (raw, json)
Hash identifier: jnEJx1xv0rKrb5Yx1sUO5NEmc8u4OwGz5EoF956dmE0=
Subject key identifier: D3:94:87:98:4C:9C:94:6C:C8:4E:09:6B:8D:34:45:79:0D:A6:90:34
Authority key identifier: 75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
Certificate issuer: /CN=759d27ce072ca336d3afaab8879f94ec63455669
Certificate serial: 019CAC47071C2A9B4DA9D701B8C820815768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
Manifest number: 0908
Signing time: Mon 02 Mar 2026 02:01:01 +0000
Manifest this update: Mon 02 Mar 2026 02:01:01 +0000
Manifest next update: Tue 03 Mar 2026 02:01:01 +0000
Files and hashes: 1: dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl (hash: h8hnkwejHOwSWdc3QJAcBVrmZZ3Xiw3WyliLhKnmWAs=)
2: fSa9ZsWpt6cpzETcA7PiodhwAl0.roa (hash: JZ8+GnG0s73YtbrymyZrp39I9Tjd+XU3bo06GAVoOFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:07:1c:2a:9b:4d:a9:d7:01:b8:c8:20:81:57:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d27ce072ca336d3afaab8879f94ec63455669
Validity
Not Before: Mar 2 02:01:01 2026 GMT
Not After : Mar 3 02:01:01 2026 GMT
Subject: CN=d39487984c9c946cc84e096b8d3445790da69034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f1:92:c7:21:a6:39:f9:fb:71:34:4f:a0:55:
a8:c1:3c:89:d3:db:ff:b3:75:12:43:af:11:60:ae:
3e:de:4c:a6:55:48:37:66:25:09:a8:8f:26:d8:ad:
a7:8c:4a:76:12:8f:ad:b0:2d:5d:04:e4:9a:cd:94:
27:c7:91:93:17:fa:0d:c6:49:4d:6a:ca:b5:4a:16:
7f:cf:81:5a:46:60:fa:cb:e1:46:12:d6:75:66:a1:
bb:d7:9a:50:1c:1f:f9:82:85:8c:93:ce:e2:0e:b8:
70:40:b2:e3:9d:83:18:0b:41:b9:a8:3c:bc:fb:4e:
a2:2f:92:f0:64:ee:4e:44:69:f1:02:f9:26:52:74:
5b:54:eb:00:94:8f:c1:68:63:ad:91:bc:f0:04:d4:
bd:ff:5a:0d:33:5d:61:2d:2c:dd:f1:d4:13:8e:51:
82:e5:a9:91:6a:75:83:d8:e4:6d:7a:d2:fe:70:62:
ff:b8:93:7c:c2:74:f7:32:d9:19:19:b6:d4:ed:db:
5a:d1:dd:14:ac:9a:a0:bf:e4:72:87:0d:b7:10:3d:
bf:e8:12:f8:f6:3a:69:18:f6:f3:3c:6b:c0:27:97:
91:e6:6a:80:47:bd:2b:3b:1c:6d:b6:06:ff:48:34:
6e:50:0b:41:fe:6f:19:17:49:ba:99:69:84:58:7e:
ed:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:94:87:98:4C:9C:94:6C:C8:4E:09:6B:8D:34:45:79:0D:A6:90:34
X509v3 Authority Key Identifier:
keyid:75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:24:f7:a2:55:25:ac:96:29:a2:2c:29:46:c8:cc:22:ca:f2:
93:58:38:1c:17:fc:9d:73:a5:83:54:9f:77:3e:f0:40:10:90:
e8:5c:2a:c5:e8:71:fd:5c:d1:5e:3c:7e:b7:70:95:8e:cd:f4:
6e:81:df:0a:40:2b:9a:42:74:85:4b:49:1c:bc:df:56:a8:70:
83:19:e3:a8:85:ce:52:e7:ab:29:79:d0:28:23:db:9d:41:d8:
72:0d:20:af:8c:90:a9:91:3e:69:d4:37:05:dd:31:38:93:68:
e9:b4:b4:2c:34:19:15:65:40:3a:1c:38:5f:1c:ba:d1:de:62:
d9:d9:b2:78:ba:35:91:8d:30:6a:c3:e0:c6:13:1b:82:83:f1:
b4:12:d0:f2:bd:0b:94:a0:f4:d1:47:05:c2:df:0e:4b:35:5f:
70:be:ef:52:a1:43:5e:b4:af:45:9e:34:9a:93:66:27:ed:1c:
04:95:c2:75:d8:27:00:55:21:cf:ad:d6:07:60:84:76:0a:37:
9e:e8:df:94:3f:73:5c:94:17:73:00:48:08:50:d6:ef:b6:46:
40:28:85:26:82:eb:21:c4:e9:33:11:a0:7e:27:ba:82:3f:4d:
43:2e:44:e6:a1:c4:22:47:b1:5d:4b:5e:b3:62:44:0f:11:21:
bf:e2:6a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:39:23 2026 by rpki-client