Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
File: aZbfqRr5HsxjhBKLGMUDoywoNxM.mft (raw, json)
Hash identifier: MZXaRL5vCgnHCNRYDqEsalrLEX5QIoj6WMqzOTnQYd4=
Subject key identifier: E5:9F:DB:B5:9E:5F:A2:80:D3:89:8C:74:3A:79:5F:74:EE:CE:1D:60
Authority key identifier: 69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13
Certificate issuer: /CN=6996dfa91af91ecc6384128b18c503a32c283713
Certificate serial: 019CAAFD8F6E7209D51581546524DC198CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
Manifest number: E1
Signing time: Sun 01 Mar 2026 20:01:09 +0000
Manifest this update: Sun 01 Mar 2026 20:01:09 +0000
Manifest next update: Mon 02 Mar 2026 20:01:09 +0000
Files and hashes: 1: Vyqhid55byeG8LolohKo-3zBV4k.roa (hash: 11dk3jNFxCUzgdfOzDadI8TnuPaxlnCKPPEDYhwIvBY=)
2: aZbfqRr5HsxjhBKLGMUDoywoNxM.crl (hash: HZrR2QPd8/3nrwq/Dnu+qPpSlLbSqbvbbvKehixBdRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:8f:6e:72:09:d5:15:81:54:65:24:dc:19:8c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6996dfa91af91ecc6384128b18c503a32c283713
Validity
Not Before: Mar 1 20:01:09 2026 GMT
Not After : Mar 2 20:01:09 2026 GMT
Subject: CN=e59fdbb59e5fa280d3898c743a795f74eece1d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:33:b2:dc:1c:32:b1:51:3b:ba:91:32:10:3c:
80:24:94:bf:57:af:f2:d4:25:95:82:7b:e8:5b:88:
65:1c:e2:09:3a:19:3f:3a:2a:89:4d:2b:f3:42:7b:
5a:15:cf:28:fc:5a:cc:22:1f:82:db:4d:59:f7:8d:
be:3f:da:36:38:ad:f9:0b:6c:bf:ba:48:15:b6:2f:
97:bf:1a:c6:e4:4c:a2:16:54:a0:f7:0c:06:6d:74:
b2:38:99:91:91:06:14:62:95:fa:90:0c:4a:6f:e5:
5d:55:e3:57:e1:9a:43:98:4d:7c:7d:72:09:4a:e8:
4f:53:d2:08:8b:bb:be:7e:2a:fa:f2:20:3f:ba:10:
a2:9f:15:a0:4a:fc:aa:c3:01:a0:29:0a:63:4c:ef:
ef:03:a5:53:83:95:8f:cf:5c:26:01:01:65:d6:df:
7d:78:85:bd:ae:0a:d7:21:60:a9:dd:1f:19:77:63:
c5:47:2c:e3:f9:48:5e:a1:9c:b7:d7:99:e6:99:06:
d3:71:cd:0e:e4:43:db:55:50:0a:83:8a:fa:f5:0b:
ae:51:4c:f0:f2:ba:3b:88:6d:ab:13:cf:f7:11:09:
f5:3d:97:11:6d:9a:96:35:8e:1f:bd:4e:30:2c:c4:
e2:70:7d:53:21:d3:09:58:c1:6f:a4:6d:77:b6:89:
60:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9F:DB:B5:9E:5F:A2:80:D3:89:8C:74:3A:79:5F:74:EE:CE:1D:60
X509v3 Authority Key Identifier:
keyid:69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ec:9d:67:dd:4b:d2:e8:5a:b5:7e:1a:26:e7:3a:a5:e8:05:
9e:e4:21:3e:63:e2:e8:c3:f7:d7:79:49:0d:ae:f1:e2:cc:9f:
4e:bd:62:59:55:cc:53:c9:50:ca:d1:72:3f:d3:df:a6:57:56:
54:04:e4:55:7d:5a:12:6b:fd:99:f9:85:2c:5d:ce:6d:e8:95:
45:6a:3f:28:9c:ef:82:49:4a:f7:59:91:50:09:bb:fe:05:e4:
e3:17:da:23:5c:9e:fd:02:ee:8c:19:f4:ae:2f:3a:f7:a9:12:
1e:2f:fd:72:6a:b4:28:4e:ab:d3:c0:bc:8d:9b:ca:30:70:03:
25:6f:64:b5:3b:f7:9e:e3:cc:c8:4f:9e:13:10:84:11:6a:88:
50:a4:d8:14:13:e4:74:2d:d2:a6:6f:99:c8:c3:1f:86:49:a7:
60:f8:af:1f:1e:7f:15:00:8b:4c:32:c2:f2:7c:77:4e:e6:7d:
68:60:f4:70:8c:dc:57:15:ec:84:77:fd:6c:c0:14:17:82:58:
a0:ce:d2:23:31:88:03:c9:d8:24:ea:e7:69:07:9f:36:23:21:
9b:eb:35:d4:2a:e1:e1:8f:6b:0f:f4:ed:db:b4:b6:56:a7:44:
1c:92:b9:5c:03:d4:f6:da:c6:91:74:c2:71:eb:58:3a:b9:4e:
02:0d:df:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:27 2026 by rpki-client