Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
File: e33o0TUz0eNrETWl0umm_zmFzaI.mft (raw, json)
Hash identifier: M3BXPMg3O/7P2vo+59cUOrBLuBNwi/GoH5sYRSLkQqw=
Subject key identifier: 5A:72:B8:DA:C4:2B:12:41:E5:A9:63:14:88:BD:AC:98:5B:5C:A5:C1
Authority key identifier: 7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2
Certificate issuer: /CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2
Certificate serial: 019CAB6AE378D576EEE72D22F856C26D2CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
Manifest number: 0837
Signing time: Sun 01 Mar 2026 22:00:34 +0000
Manifest this update: Sun 01 Mar 2026 22:00:34 +0000
Manifest next update: Mon 02 Mar 2026 22:00:34 +0000
Files and hashes: 1: GGptaUCk5HswofHGiRhoLDBrSsk.roa (hash: a8zAb+DGkHkBUoReMwMr6C/BLIezYKFQteBzpzxwQ3I=)
2: e33o0TUz0eNrETWl0umm_zmFzaI.crl (hash: T1ZNFMWIqXPjjjpI0Tbce+Yo+9a2bVY7YP8x9dJG/hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:e3:78:d5:76:ee:e7:2d:22:f8:56:c2:6d:2c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2
Validity
Not Before: Mar 1 22:00:34 2026 GMT
Not After : Mar 2 22:00:34 2026 GMT
Subject: CN=5a72b8dac42b1241e5a9631488bdac985b5ca5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:22:2b:79:63:bc:17:e2:64:39:b2:25:2e:
32:37:8f:be:de:a2:a3:03:84:e6:a4:db:c3:cf:69:
f0:2f:ca:e8:ce:de:d3:25:bc:8f:aa:39:6d:23:ca:
4a:f5:08:25:bc:b1:d8:9b:85:0f:ab:82:b0:5b:ea:
07:6c:4f:8d:54:ff:61:cb:c2:8f:78:6d:55:35:2e:
8c:a2:59:a2:66:05:b5:52:bd:d0:5a:45:b7:c1:da:
8f:40:cb:85:22:33:d0:74:89:d8:a5:75:37:46:19:
ec:5d:f4:a6:4e:e1:fa:b4:0a:e2:a6:77:ae:4d:1b:
64:08:0b:1a:87:48:31:00:1a:d1:2c:c4:e6:e9:69:
4b:35:fd:72:04:13:4f:13:54:c6:51:ce:b7:74:f7:
0f:3e:61:d3:bc:ec:47:8c:93:88:42:3e:cb:fd:ea:
3a:91:5f:3f:4f:54:96:65:c5:10:eb:ee:1b:ec:05:
1e:73:5c:73:61:0f:a5:48:c2:96:78:e9:8d:07:cb:
80:1d:2e:a8:2e:7a:f2:5c:7d:5b:fd:a0:9c:07:81:
28:f7:1e:c1:c0:43:cb:21:a6:a6:c6:0d:90:2e:ad:
44:14:35:63:08:ad:71:4c:ff:81:e3:95:97:68:76:
4d:2d:ae:96:45:f8:af:1a:79:86:23:d7:03:86:e2:
62:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:72:B8:DA:C4:2B:12:41:E5:A9:63:14:88:BD:AC:98:5B:5C:A5:C1
X509v3 Authority Key Identifier:
keyid:7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:67:3e:51:c7:87:8c:c0:da:4e:54:dc:5b:93:90:2d:61:c0:
a0:cc:4d:1a:97:9d:bb:b0:9f:f9:d0:a4:7e:99:41:5c:a7:cc:
1f:f5:4c:60:e7:f6:97:fb:5f:0a:21:da:d3:ea:6d:87:d6:54:
b9:86:6b:59:5f:d1:98:57:43:4b:eb:36:25:52:c8:0b:ba:62:
0f:75:79:65:06:39:26:57:ba:35:46:42:b3:fd:49:54:02:14:
09:e7:82:92:9d:8a:71:71:a3:d1:97:92:d0:48:64:cc:82:b1:
4a:d1:37:42:85:bd:30:83:b3:53:3a:c0:81:ed:9e:39:83:93:
bf:14:e5:5d:0f:58:e0:84:71:bb:07:19:cb:92:28:9b:10:88:
45:49:31:03:57:d4:0c:9c:be:5e:71:c9:f0:3e:08:af:ae:45:
33:c8:7e:05:db:3b:ec:4c:8b:bd:de:cd:93:85:29:58:42:ec:
08:26:f9:1f:aa:9f:8c:4b:09:e3:ca:05:f0:de:1f:70:35:5e:
40:1e:96:dc:af:dd:9c:ac:d1:36:fb:55:fd:db:59:0c:86:f0:
70:6d:9c:54:f8:9a:98:9c:82:af:7a:28:b3:da:b5:03:1e:0f:
48:1c:4d:9d:16:b2:34:c8:62:75:e2:13:fe:17:49:75:b0:b5:
d7:a5:f1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:12 2026 by rpki-client