Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
File: rrwz1bpYUjTMzvilethsoer8SqI.mft (raw, json)
Hash identifier: 0a8+AN8lS8kK/25NV+y1PUTTCHiIXumz2M+EZdlzOOY=
Subject key identifier: 8C:C1:1A:12:35:BA:8B:BA:21:F6:1A:8E:2B:FD:E6:A0:FE:83:8E:CE
Authority key identifier: AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
Certificate issuer: /CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Certificate serial: 019CAD592F31016102E0944EBC4D384DD039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
Manifest number: 07F3
Signing time: Mon 02 Mar 2026 07:00:28 +0000
Manifest this update: Mon 02 Mar 2026 07:00:28 +0000
Manifest next update: Tue 03 Mar 2026 07:00:28 +0000
Files and hashes: 1: E907k5QYJtLiwC_jK3iFvXI9RdI.roa (hash: snQqBx0r+DlkIlsrsM46ddsGDow3XlKtABIHB2rzqdc=)
2: rrwz1bpYUjTMzvilethsoer8SqI.crl (hash: kQbPxo5DKb0gmXYc31BYPL7PKFZA5hCLQ/Nsmek7vkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:2f:31:01:61:02:e0:94:4e:bc:4d:38:4d:d0:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Validity
Not Before: Mar 2 07:00:28 2026 GMT
Not After : Mar 3 07:00:28 2026 GMT
Subject: CN=8cc11a1235ba8bba21f61a8e2bfde6a0fe838ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:c5:41:2d:88:4a:2f:3c:6e:94:f6:ad:a4:
77:2c:9e:95:26:be:45:72:62:22:d7:6e:16:c9:2c:
9f:73:94:97:c3:47:65:27:b2:8e:3b:36:d1:1f:52:
bf:e9:60:2b:27:db:ab:f7:2d:88:5f:8f:a7:02:22:
9a:f8:89:ee:27:69:53:05:de:ac:23:2c:d9:f5:40:
92:07:17:7e:59:a7:ce:ae:cd:7d:83:d4:e1:2b:cd:
87:91:30:9d:f9:ef:21:ac:65:94:d9:a3:77:9f:74:
cc:a1:31:b3:8e:c7:e5:3b:3b:42:fc:1f:12:c7:7e:
49:b1:e6:9f:0e:6b:3c:1f:9a:02:08:51:5e:87:45:
c2:be:37:46:26:d7:c0:a0:0c:51:9e:34:38:af:c4:
2c:0e:23:0e:e8:4d:a4:65:a5:9c:c4:fc:31:6f:47:
be:67:0e:83:05:8e:b7:2f:3a:b9:fb:4e:70:f7:22:
bf:68:6a:91:df:fc:e3:74:1a:79:4c:4a:58:2d:9e:
22:c8:5d:af:15:4f:e2:39:ba:51:db:91:a8:41:1d:
1f:40:da:13:99:7c:67:a5:0f:58:dc:ee:5c:9d:c7:
8a:ca:c0:11:3e:b2:4b:e4:4a:8b:e9:70:37:1d:f7:
a3:b1:98:92:94:92:18:0a:0c:c2:dc:4d:13:bd:b5:
c5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C1:1A:12:35:BA:8B:BA:21:F6:1A:8E:2B:FD:E6:A0:FE:83:8E:CE
X509v3 Authority Key Identifier:
keyid:AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:17:2a:bd:55:01:70:d3:13:3a:92:4f:75:5a:a8:4e:62:b9:
d8:3c:12:fe:f5:b9:45:64:07:b4:8d:e2:a4:a5:13:cd:0b:38:
e3:9c:a6:5e:d0:f9:0e:0d:4b:76:07:d4:80:f2:9c:de:af:9d:
7b:44:8c:67:5d:ca:9f:89:88:99:21:72:9a:eb:3a:db:6a:36:
58:22:07:1f:bb:d7:80:b3:50:67:5f:22:90:60:ef:4e:7c:7e:
a1:6e:ae:0a:60:04:9d:d8:ae:e1:50:d5:ec:e9:e2:9f:65:3d:
cd:2d:70:09:25:6b:7c:90:39:40:2e:02:2a:35:1f:48:f0:2e:
a2:d0:f2:3a:29:36:39:8b:8c:9f:43:7b:68:bf:66:ad:fc:13:
83:4d:59:b7:9c:4b:df:5f:5e:48:81:b0:43:de:e5:85:55:9a:
ee:c2:94:2e:a3:00:0a:4f:51:6d:25:9c:bd:53:17:d1:01:7d:
06:b0:10:d4:1e:16:c0:41:0f:28:ef:86:6f:0d:87:4b:bd:46:
21:fa:65:ba:d2:13:32:39:3a:b9:0c:2c:b3:c0:cf:0d:68:15:
33:41:20:68:64:a5:60:f2:1d:c9:a7:9d:02:36:e9:58:7f:bd:
d4:b0:17:6f:87:a3:cf:56:0c:1b:c5:17:56:f1:dd:16:d4:4c:
67:45:b2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:48:11 2026 by rpki-client