Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
File: rSzfJ9neZesk5c_J0xDkyKAwFGA.mft (raw, json)
Hash identifier: q0pZB00uZEGb/TLoaudQHxNB0hpY9z3Ur6rLhM1z1R4=
Subject key identifier: FE:9C:0C:D8:69:41:57:26:7B:44:D7:6B:2A:A5:FA:FA:C8:35:FE:A9
Authority key identifier: AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
Certificate issuer: /CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Certificate serial: 019CAA8FCBF04A5395BD1A274E78FCB1498E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
Manifest number: 0E4F
Signing time: Sun 01 Mar 2026 18:01:16 +0000
Manifest this update: Sun 01 Mar 2026 18:01:16 +0000
Manifest next update: Mon 02 Mar 2026 18:01:16 +0000
Files and hashes: 1: ecknfRAIvluVmZ7la5oiT_2luz4.roa (hash: HiuC3Vr01IHEO7h5/vdTPtdaVoDtm8DnoIetX64bo4k=)
2: rSzfJ9neZesk5c_J0xDkyKAwFGA.crl (hash: 5nk083B5fioIsdh98sIXy/c7IGSi2uAujrDg7KbKhSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:cb:f0:4a:53:95:bd:1a:27:4e:78:fc:b1:49:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Validity
Not Before: Mar 1 18:01:16 2026 GMT
Not After : Mar 2 18:01:16 2026 GMT
Subject: CN=fe9c0cd8694157267b44d76b2aa5fafac835fea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d7:a1:4a:8b:3e:9c:67:d5:28:eb:ae:dc:3f:
2d:ae:ef:38:c0:ec:8f:38:91:26:63:e9:78:ec:5b:
55:d7:00:c5:b9:82:8d:13:f4:91:be:43:88:9a:85:
c6:2d:14:e7:a0:7a:68:b4:bc:c6:bb:da:9c:3e:59:
92:39:58:12:4c:46:24:0f:a7:1c:c2:80:7a:4e:59:
d3:29:ba:c9:96:5d:a0:e7:cd:31:30:29:ff:15:01:
7c:4c:6e:7f:ce:53:e2:60:6a:6b:de:8b:0c:b6:83:
38:f2:12:f4:a8:3a:1d:cd:aa:a1:d6:8c:e8:eb:be:
35:65:ca:5b:86:da:d4:96:93:ee:1a:ba:88:c6:b8:
fe:9f:2a:f2:ce:20:b5:b8:25:b5:12:61:65:53:34:
06:73:fe:ae:2f:fd:da:76:f2:75:a8:1a:38:08:cc:
10:27:86:3f:6a:2b:8c:ce:02:9c:a0:c1:0f:7e:b3:
a7:9e:3c:ca:24:19:ea:e1:74:ae:60:5b:47:96:c5:
ed:d6:95:a6:76:09:39:b8:d6:26:95:b8:24:a1:1d:
50:44:e4:e5:3d:43:5d:1b:39:91:78:f5:d8:16:e1:
23:64:1c:76:c0:27:5b:7a:40:6b:0b:c2:74:06:7a:
2a:71:af:04:42:0f:ac:96:ff:a3:82:f7:6a:9f:4a:
b6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9C:0C:D8:69:41:57:26:7B:44:D7:6B:2A:A5:FA:FA:C8:35:FE:A9
X509v3 Authority Key Identifier:
keyid:AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c6:e8:40:ac:30:df:84:79:38:58:9c:d6:c8:1c:4d:a4:03:
9b:65:c5:66:6c:cb:b9:30:13:4b:79:3e:f5:a4:82:09:5f:41:
cb:3e:f2:55:a4:52:37:ab:f0:ad:8b:c2:a6:46:34:77:72:3c:
37:04:58:d4:4e:f2:80:7e:94:3d:b8:e9:03:da:9c:11:b6:d9:
50:fa:79:34:8f:3f:b8:0b:2b:79:b5:e2:ae:21:9a:98:b3:b9:
1d:2a:c9:a4:1c:ff:42:37:71:f1:b4:f1:07:40:2b:85:89:97:
61:02:53:b7:59:31:50:2c:2c:23:17:04:e6:bc:5f:05:fd:74:
55:fb:87:80:80:f2:3f:84:62:28:f6:da:d9:2e:61:51:fc:b9:
b4:a0:6e:be:b6:64:55:86:26:c5:e4:70:df:cb:3b:e2:e4:2f:
6f:65:63:33:9d:4c:2e:a2:3b:da:45:ea:6b:f0:f6:74:c5:da:
8c:87:57:0c:62:d3:dd:22:b9:cd:9d:1f:3a:52:b1:5b:39:2c:
32:f1:37:3c:b3:66:23:2f:4f:2d:b5:d9:43:fc:6e:aa:cf:b5:
b1:07:71:f3:e5:00:fd:bd:a4:aa:aa:5d:93:59:14:9e:65:b5:
18:63:eb:c4:36:6a:66:7e:69:92:ec:be:d3:c7:b7:77:fa:e2:
89:6e:c8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:20 2026 by rpki-client