Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/6cfb78-63bc-4820-b903-860c49d0eb6a/1/rzA4pxexVOHPpHEWgy2ibyiyowQ.mft
File: rzA4pxexVOHPpHEWgy2ibyiyowQ.mft (raw, json)
Hash identifier: kdNPjcngf5Cu6LXUx7QQ0LW92L59Bg6n8eAwPjTy0G8=
Subject key identifier: 4C:CB:C3:C0:93:82:AD:21:12:12:23:4F:FD:DA:34:C1:B4:33:78:10
Authority key identifier: AF:30:38:A7:17:B1:54:E1:CF:A4:71:16:83:2D:A2:6F:28:B2:A3:04
Certificate issuer: /CN=af3038a717b154e1cfa47116832da26f28b2a304
Certificate serial: 019CAD9015B087D7A32BE9694FB281A1380A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzA4pxexVOHPpHEWgy2ibyiyowQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/6cfb78-63bc-4820-b903-860c49d0eb6a/1/rzA4pxexVOHPpHEWgy2ibyiyowQ.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 08:00:26 +0000
Manifest this update: Mon 02 Mar 2026 08:00:26 +0000
Manifest next update: Tue 03 Mar 2026 08:00:26 +0000
Files and hashes: 1: pjZgFrUWO8BOoL-HaPMDCBP4Z3k.roa (hash: DJfWljw06kfL4VTqBzgexrUkOVmGrJBBRKqjdLiN9zA=)
2: rzA4pxexVOHPpHEWgy2ibyiyowQ.crl (hash: niXpQvNgNSjJUGWZQx2gbwz7xQZsq86+MJoA8MXnbvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/6cfb78-63bc-4820-b903-860c49d0eb6a/1/rzA4pxexVOHPpHEWgy2ibyiyowQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/6cfb78-63bc-4820-b903-860c49d0eb6a/1/rzA4pxexVOHPpHEWgy2ibyiyowQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzA4pxexVOHPpHEWgy2ibyiyowQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:15:b0:87:d7:a3:2b:e9:69:4f:b2:81:a1:38:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3038a717b154e1cfa47116832da26f28b2a304
Validity
Not Before: Mar 2 08:00:26 2026 GMT
Not After : Mar 3 08:00:26 2026 GMT
Subject: CN=4ccbc3c09382ad211212234ffdda34c1b4337810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fa:00:88:47:65:75:9a:c0:32:49:4d:45:3f:
84:43:99:77:e8:72:69:47:69:a0:b9:ca:6c:58:4c:
ad:1a:56:79:d3:c2:5c:aa:f0:78:86:ed:ce:cb:fc:
1f:23:08:fa:9c:ac:04:77:78:04:db:0f:4f:a4:8b:
a8:76:1b:03:96:18:7c:d9:a5:8e:66:41:f1:05:38:
d3:ac:a5:43:c8:54:cc:58:e3:63:61:0d:6f:8b:04:
23:23:a9:65:75:79:43:b4:46:7e:9e:74:b1:22:0b:
3c:20:4b:86:75:7b:0a:69:27:36:a1:ff:9a:91:40:
93:02:e3:b5:63:9b:ad:bc:03:2f:24:73:3e:1a:b6:
09:25:2e:4e:8e:bf:43:18:81:25:b1:38:86:33:42:
32:62:6d:26:c0:c0:2d:3a:f1:ed:33:33:80:72:58:
a1:b6:30:81:29:1b:b3:e3:69:fa:44:c2:dc:53:d1:
0f:3b:45:a9:be:2e:35:4d:43:f7:b8:31:c1:88:83:
c7:ce:08:75:c3:2e:9e:2c:f6:32:a7:ff:03:1e:bd:
87:13:6f:f2:0b:94:a8:ca:d2:c2:37:c3:bf:fc:1a:
30:ef:3f:fe:ee:5c:98:e0:be:5d:77:39:ae:2e:fc:
9e:80:1e:a8:be:5d:db:64:6e:57:b1:75:4e:af:06:
2d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CB:C3:C0:93:82:AD:21:12:12:23:4F:FD:DA:34:C1:B4:33:78:10
X509v3 Authority Key Identifier:
keyid:AF:30:38:A7:17:B1:54:E1:CF:A4:71:16:83:2D:A2:6F:28:B2:A3:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzA4pxexVOHPpHEWgy2ibyiyowQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/6cfb78-63bc-4820-b903-860c49d0eb6a/1/rzA4pxexVOHPpHEWgy2ibyiyowQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/6cfb78-63bc-4820-b903-860c49d0eb6a/1/rzA4pxexVOHPpHEWgy2ibyiyowQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f2:fe:c6:d7:0e:fa:f9:c2:0c:0b:d1:8c:72:56:e9:31:77:
91:95:d7:99:0e:60:0c:d5:f5:ac:d0:94:cc:76:39:19:2f:1d:
64:3c:0c:fa:0e:23:f3:81:45:18:fa:c6:70:90:f1:70:c2:80:
28:6e:8c:d6:6d:7b:61:83:02:2d:d1:14:6b:6d:cb:0c:c0:52:
68:cc:11:84:6f:0d:53:23:5b:61:95:a9:26:75:cc:19:00:2e:
e7:ab:73:e7:a2:ca:b6:94:b5:92:06:d9:76:c4:0e:66:a9:fc:
5a:be:6e:be:4d:b5:cf:01:3a:63:c6:ed:cd:d0:26:7a:0d:b9:
ff:fa:e0:d7:dc:04:bc:0e:a5:b3:d3:15:a5:ae:9d:b5:ce:d2:
12:38:15:6f:5f:ca:62:98:e1:1e:ca:59:22:13:06:2e:28:87:
d0:fd:b3:47:4e:75:8c:9b:d8:c1:83:c2:c5:a8:9b:a6:96:62:
a5:77:27:f6:67:cf:86:06:c4:99:3a:88:17:5e:8d:f6:7a:b8:
07:80:01:c4:10:ad:e7:b5:b7:e8:f6:4e:6e:fc:b8:af:f8:c0:
b1:86:2a:04:66:8e:5c:c4:24:1e:5e:29:3a:50:3d:9d:3e:57:
52:32:3c:6e:c2:e5:02:a4:19:15:44:6d:80:ea:a0:50:fc:3f:
f1:3a:14:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:26:11 2026 by rpki-client