Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
File: z13l9P7Bb1FvC8TWMcJidmP5BfM.mft (raw, json)
Hash identifier: IV5DyzLU0VqQE5Ewpg9Z+faHoe1fTzFlVEw5nfnvMmY=
Subject key identifier: 2F:69:E8:3B:0F:B7:CB:D6:63:E4:BB:7F:39:2F:23:D1:38:8B:02:74
Authority key identifier: CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3
Certificate issuer: /CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3
Certificate serial: 019CAEA36EF038BCD4555994CC52C771C048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 13:01:12 +0000
Manifest this update: Mon 02 Mar 2026 13:01:12 +0000
Manifest next update: Tue 03 Mar 2026 13:01:12 +0000
Files and hashes: 1: 3QNCUyziq2NCQzag95T2-uqk5kk.roa (hash: p0EolByolBbZ5LQrfo9cgFCeGxE7C5y0TvaxEkMa+Dc=)
2: z13l9P7Bb1FvC8TWMcJidmP5BfM.crl (hash: Vr1XE0RRdKfODsafFFlPFyH+QsL0DxEM9WJbaQ1QAzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:6e:f0:38:bc:d4:55:59:94:cc:52:c7:71:c0:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3
Validity
Not Before: Mar 2 13:01:12 2026 GMT
Not After : Mar 3 13:01:12 2026 GMT
Subject: CN=2f69e83b0fb7cbd663e4bb7f392f23d1388b0274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f4:ca:92:ae:fd:35:3c:f0:c9:83:7c:0d:09:
73:9e:96:c1:45:97:f0:47:b5:92:74:ed:fa:35:df:
a5:30:f3:da:c5:1d:a1:92:28:24:b3:b5:32:da:12:
9a:fe:61:b9:aa:87:4f:e4:95:8c:b4:aa:b4:a4:73:
40:a7:fc:75:52:9d:cb:d6:df:51:c4:ae:5d:cf:27:
80:c4:bc:98:b8:b4:04:64:0d:3c:f1:01:51:56:c2:
28:99:0e:5d:5e:12:7d:a4:9f:fb:83:be:ac:37:20:
b8:d4:08:d9:ca:a6:81:c4:10:50:b7:cf:4e:ba:3e:
6e:2e:28:6c:4f:14:66:89:ee:a5:a7:94:b2:ad:d6:
d8:ac:af:33:26:c8:a4:bf:8e:e0:14:5b:bc:8b:24:
85:7b:f2:cf:70:e1:bd:d1:7a:f7:55:56:f3:5e:b0:
37:3f:a8:dc:90:24:1a:96:65:cd:bb:38:3a:88:97:
fe:d2:85:92:39:e8:7a:e4:9c:ed:0a:1b:3d:45:18:
4b:ac:3a:79:10:ca:d3:3e:4b:df:a1:42:07:55:1c:
46:79:04:90:b9:34:5a:f5:6d:81:9f:b5:a3:e1:c6:
52:64:24:16:a9:cb:c4:cf:bb:4b:dd:56:57:ba:59:
60:0e:57:dd:f1:1a:25:2f:8c:ba:39:2c:88:fe:90:
0b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:69:E8:3B:0F:B7:CB:D6:63:E4:BB:7F:39:2F:23:D1:38:8B:02:74
X509v3 Authority Key Identifier:
keyid:CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f1:a6:9d:b4:b5:ae:26:7c:c2:9b:31:bf:26:71:14:e1:f7:
ea:7d:67:9a:12:45:76:c7:8f:a2:c7:31:72:c1:e2:f0:98:f3:
bf:0d:62:0f:de:dc:71:6b:15:bc:e7:60:f4:8d:22:22:b5:e1:
15:40:62:88:48:f9:70:d8:22:cd:fd:ab:0f:fd:af:8a:c6:67:
32:7d:d8:0d:8d:f2:9a:d6:ef:5a:52:7b:8c:73:e7:0f:bc:da:
0d:30:c8:53:8a:c3:c9:d6:cc:2d:12:e7:76:6d:fb:93:30:35:
8e:e1:43:fa:8d:31:8e:66:3f:80:2e:67:59:9c:d6:2f:14:c1:
98:f9:26:7e:1e:48:81:dd:e6:d1:e7:d8:a1:16:48:5b:63:da:
ca:27:c7:b2:5d:bf:b8:0d:4f:82:b2:84:87:f8:31:36:f2:dd:
7f:bb:92:43:86:f3:33:4f:4f:4b:a0:33:4a:d1:05:f0:2c:de:
40:3f:cd:ca:5f:02:e7:c0:15:89:1d:09:c4:3e:2b:ad:e5:ec:
da:45:e3:aa:8d:b4:47:fb:20:85:c5:ea:66:b1:92:78:ce:cc:
c0:fe:82:7a:8b:8a:bc:70:14:89:52:76:87:49:94:f8:be:99:
1f:1c:a1:f5:3e:02:e0:70:84:b3:54:0d:22:07:d2:cf:33:be:
7f:5e:41:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:54:08 2026 by rpki-client