
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
File: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft (raw, json)
Hash identifier: Q0sy/CU/i1o+yjwnnfZS05Zxy2bIC5Ot+JEHKyRcnYM=
Subject key identifier: 2D:3D:2E:A3:B3:AF:32:A9:AA:8F:68:85:12:81:F0:9A:E5:0C:DC:30
Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
Certificate issuer: /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Certificate serial: 019CAD5973E5E8CF066D1D1E95CC6D8AEB72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 07:00:46 +0000
Manifest this update: Mon 02 Mar 2026 07:00:46 +0000
Manifest next update: Tue 03 Mar 2026 07:00:46 +0000
Files and hashes: 1: 60O0SRzjGsORJ1LBFnHv2U1PHTk.roa (hash: 3tf/Ui4ibWz+Ljka1guaW3+IweRIpdh9pYNIaOP6ChU=)
2: F09300GwdMIta1lj7Ul3pmpo6e8.roa (hash: ajcgZbaCsRlZup9MjYbC/n7SyiZtpZ4+r47ylzeWUgk=)
3: R4SqufV61FjY_qt6XBJL1xKD3Yk.roa (hash: oxpnmOAxuGivN4BOARVKb2erg4+PNj4PUrM7BceH1yo=)
4: jJ8Ja4wQj77UXskU4dYzizx-fO8.roa (hash: D/f3chU7o9XZeTFLsqkW7hmyKTnJCw4DJq8f3FXAw8c=)
5: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl (hash: 4AlQfqAr+FJ2GTXjDFPoDROOb+oVpA8RZ6LZC/SpWeQ=)
6: umCBjEn3NnVHg79eLHC3xk9rgS0.roa (hash: /fSksQdekqYTESP/mXyQvaIFQ1BWx6zsTRDj8qcB0V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:73:e5:e8:cf:06:6d:1d:1e:95:cc:6d:8a:eb:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Validity
Not Before: Mar 2 07:00:46 2026 GMT
Not After : Mar 3 07:00:46 2026 GMT
Subject: CN=2d3d2ea3b3af32a9aa8f68851281f09ae50cdc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:09:30:f2:9c:77:04:a4:85:ea:82:a3:7a:
fd:28:d6:fa:3d:f9:3c:7c:35:4f:10:60:d0:bf:54:
65:a4:e0:b6:8d:25:2b:86:8c:60:b1:16:44:e6:75:
0c:fe:27:bc:52:cf:bd:e6:1e:91:1f:d5:82:8e:9d:
57:91:c6:3a:0c:71:99:ef:f2:16:63:3c:12:37:28:
fc:bd:4c:b0:6d:9c:b2:36:84:1d:8e:82:c5:c3:16:
03:20:17:5c:80:48:b5:73:5c:02:55:e8:7b:37:87:
b4:dc:9b:75:e8:29:dc:8f:d9:a4:d6:5f:1d:69:05:
5d:58:61:f6:d9:fc:50:d6:6e:fb:c3:44:9e:da:4e:
ef:f0:e7:8b:ad:6f:36:db:73:cc:40:6a:5d:1e:2b:
d3:4e:02:b0:78:11:03:83:0f:b3:0e:36:d8:54:a2:
7b:cd:d4:6f:94:24:de:0e:a7:12:f3:05:07:33:83:
e9:14:11:0c:52:eb:8e:05:86:ed:79:ac:68:20:d5:
58:98:48:ba:b5:c8:05:4a:5d:b4:c8:e3:6f:90:14:
17:77:a3:84:84:45:57:25:c0:47:16:27:7b:b2:0a:
d1:f9:8f:c6:54:77:4b:9a:8e:52:b6:66:e1:1a:ea:
18:da:9c:2d:76:35:cb:6f:74:43:1e:94:11:ee:d8:
b5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3D:2E:A3:B3:AF:32:A9:AA:8F:68:85:12:81:F0:9A:E5:0C:DC:30
X509v3 Authority Key Identifier:
keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ca:2f:a8:e3:eb:7a:69:57:cc:b0:6e:0e:3b:63:00:dc:48:
f6:2b:be:1c:3b:07:fa:42:9d:29:5a:f1:eb:d3:29:37:b0:b0:
c3:e2:36:be:e4:80:7a:f1:d6:69:72:7a:fd:71:08:6a:bc:5f:
31:9b:95:5e:7a:e3:40:0d:ed:02:84:0c:3d:6f:ab:ca:c3:06:
5f:2b:0f:1f:49:28:6f:09:4c:bd:06:70:cc:a7:46:7e:b9:29:
c3:2a:87:52:d1:ca:2f:ac:2d:b3:6f:15:e1:42:e9:7f:47:7e:
5b:1a:52:dc:ee:05:31:d9:23:3d:3f:e1:d6:15:78:54:a8:cc:
bf:32:a2:b2:1c:0a:72:4a:fb:a4:d1:a2:f1:c0:98:71:65:eb:
d7:c0:b4:de:f7:aa:2c:d6:82:7c:c6:42:20:01:35:e3:6a:5f:
c0:e1:56:e7:a3:5e:f0:e4:ff:71:df:0f:01:eb:15:4d:c4:01:
3c:4d:4c:81:41:17:51:48:9c:38:5a:e7:74:fc:99:ee:b7:45:
d2:a0:9a:2b:62:77:0a:5e:e9:8d:14:ad:bd:67:5d:dc:f2:a9:
31:ec:45:4d:ed:0b:a0:91:0f:0e:0d:cd:12:61:f7:86:db:1b:
68:cf:9d:a2:8a:69:b7:85:67:c8:2f:2e:79:e1:a9:09:50:aa:
53:dd:69:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:27:33 2026 by rpki-client