Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
File: RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft (raw, json)
Hash identifier: V95x8I5+nP0lsycKkBl47g+BjNcFHnJ6SJ69aIqX0mA=
Subject key identifier: C5:13:B3:41:67:1D:1D:FC:DE:CB:B1:AF:43:BD:A0:D6:8E:A9:04:1D
Authority key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
Certificate issuer: /CN=473469a966f4df3cf28171d87c74780fc472f979
Certificate serial: 019CAC7E525B3F01F5C9CDC081BC484AD21E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
Manifest number: 0B4F
Signing time: Mon 02 Mar 2026 03:01:25 +0000
Manifest this update: Mon 02 Mar 2026 03:01:25 +0000
Manifest next update: Tue 03 Mar 2026 03:01:25 +0000
Files and hashes: 1: DNxT4KfUnSN5D5Pb2TXRMl9CQRk.roa (hash: U4JVcc+2nFb5M82ma1QdMgZr3eKXlGDJ6qSOPbU6n2I=)
2: RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl (hash: 8wz8sjpxP9cxQRs8FMtEKJqKbJacRqLPnX6XtK3QY5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:52:5b:3f:01:f5:c9:cd:c0:81:bc:48:4a:d2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473469a966f4df3cf28171d87c74780fc472f979
Validity
Not Before: Mar 2 03:01:25 2026 GMT
Not After : Mar 3 03:01:25 2026 GMT
Subject: CN=c513b341671d1dfcdecbb1af43bda0d68ea9041d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f1:0e:82:19:20:6c:00:c9:e3:ba:9f:ee:8e:
dc:d0:7b:7f:72:cd:f8:83:f8:cc:ef:5b:1a:03:b0:
9d:27:d1:ea:dd:97:73:ed:f8:12:6a:07:1a:ba:00:
c3:8f:30:4f:fc:b8:60:cb:b1:85:d5:60:ad:31:99:
c4:2a:d0:0e:ea:1c:63:7d:df:17:a1:d7:ba:de:91:
a6:36:7c:76:31:da:9f:cf:83:e5:e1:ce:06:37:98:
de:c4:2a:b8:77:5b:b1:8d:61:37:98:38:cb:da:50:
a1:1c:7e:08:80:30:00:cc:75:28:ef:65:fb:ec:d1:
e7:9d:a0:07:e1:5c:3d:b8:2b:e3:6e:32:7d:95:c1:
24:ac:4a:2e:d9:7a:2b:59:8f:80:32:5b:2d:d6:35:
1c:85:c0:e1:d7:67:99:75:e3:d9:d2:61:c9:6c:be:
2b:c9:1e:1f:93:34:21:4b:27:85:32:8e:b7:f3:58:
19:f1:44:63:8c:e4:70:1f:f3:87:fb:c3:11:49:fa:
7d:60:71:6a:d8:2d:d0:01:7a:a6:fc:95:05:95:2b:
e0:1d:06:59:9b:96:ae:c5:87:28:02:3d:dc:4b:90:
bb:6c:fc:4f:83:8e:69:6f:0f:0c:91:05:6a:ed:b9:
41:e7:3a:80:02:8e:a3:39:9b:02:b4:79:3d:a5:03:
3f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:13:B3:41:67:1D:1D:FC:DE:CB:B1:AF:43:BD:A0:D6:8E:A9:04:1D
X509v3 Authority Key Identifier:
keyid:47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:16:ae:02:fa:16:de:fc:14:48:ae:4d:97:d0:85:2e:e8:82:
15:9a:b4:6f:6a:02:c6:da:3c:1a:35:65:f1:14:03:9f:a9:7d:
42:29:08:19:3e:b0:3a:20:69:4e:91:25:7b:32:75:fd:35:7f:
d6:6b:e5:35:36:e3:29:83:e3:a1:a3:fb:a9:28:ba:64:01:b5:
51:4d:e1:9a:cf:5d:69:a9:1e:6d:f2:9e:6c:6a:99:37:28:53:
8d:46:da:4b:e3:b6:c9:ca:34:e6:68:dd:e3:96:d7:c4:38:42:
42:1a:61:66:9e:c2:13:52:14:01:14:f2:8c:70:52:bd:aa:cb:
83:9e:c5:b5:c6:0a:a2:7d:9d:7b:95:1e:d8:17:23:80:1c:b9:
7c:eb:d4:58:a3:37:4c:3d:0e:f3:7d:fe:1d:e0:70:aa:cd:62:
ef:95:7a:d4:ea:21:56:52:25:25:c8:ad:ef:d6:94:ea:fd:cc:
a6:9f:69:33:26:ac:19:d5:54:94:84:32:87:4c:4d:ba:d0:33:
5c:df:9d:10:68:6d:e1:1a:32:21:88:b6:13:6b:71:fc:7d:05:
63:de:26:8d:74:1f:e9:42:46:c6:d1:af:26:a0:a1:42:68:57:
d9:aa:47:03:6d:26:0d:15:bd:3b:5e:53:85:e7:d1:16:6c:4f:
89:8e:8b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:17:03 2026 by rpki-client