Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
File: cZSbR98xPLq5RS2pj8xjdgipCb0.mft (raw, json)
Hash identifier: ksayIljTxdT/i2xNhCfJR5vLWf0SRyOkb3WRch095fk=
Subject key identifier: 99:DB:F2:73:DF:AE:7D:B0:18:10:42:21:F5:80:F3:0D:EC:04:CF:59
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 019CACB4984F45BE7BBF381C0E153F1DDB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
Manifest number: 1869
Signing time: Mon 02 Mar 2026 04:00:42 +0000
Manifest this update: Mon 02 Mar 2026 04:00:42 +0000
Manifest next update: Tue 03 Mar 2026 04:00:42 +0000
Files and hashes: 1: 4QGNMsc5EGKo58Zw8Ral2zodI2I.roa (hash: YULKFII3+bo9JTIVj/N+lbxzQak7k1SW83B1ho5/0B8=)
2: 7nQSU3KcKFGzNpk1S9m7Pg_R3QA.roa (hash: hhvez6L7iOSamemiziLCMKx9JI55MAZ7ghp/mQWgqbI=)
3: cZSbR98xPLq5RS2pj8xjdgipCb0.crl (hash: 4jlBCOKdtmGuw4hTFVvY9K6CqyZeZITI1XzWAB8YBR4=)
4: iqsTReQX-wslFa4ZJjVVBZ1O16I.roa (hash: HHgLFIJy8JtakXSElLjUicZ/9YwRa/+1lz1+D14ujGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:98:4f:45:be:7b:bf:38:1c:0e:15:3f:1d:db:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Mar 2 04:00:42 2026 GMT
Not After : Mar 3 04:00:42 2026 GMT
Subject: CN=99dbf273dfae7db018104221f580f30dec04cf59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:22:90:2c:19:54:7b:bc:45:07:4a:fb:a8:60:
6d:a5:86:bf:a3:28:99:b0:79:a0:20:9b:24:e8:0b:
3a:c2:e1:2c:aa:64:7d:06:2b:f4:2d:b7:32:4f:8b:
48:56:0d:6a:7c:0a:ed:5f:70:3b:61:61:d9:f8:ad:
ee:a9:1c:d2:84:a9:b9:4b:b7:7a:50:38:4f:4c:73:
6f:94:12:b0:32:5f:87:3e:f6:5e:94:2d:9b:34:2d:
5e:55:64:27:09:28:8a:6f:0b:cb:95:68:61:fc:75:
69:b5:ab:e9:c5:19:1a:9e:35:48:7a:54:16:9b:be:
9d:d8:e1:f5:b7:ce:54:0f:3a:88:bb:47:ac:e7:ed:
75:28:86:d6:0d:09:89:5d:a8:80:ee:a0:44:47:c1:
98:11:da:07:2e:68:e7:77:ef:54:2b:7f:a8:47:c4:
d1:94:03:56:36:b0:73:95:53:d5:fc:65:80:46:0d:
3c:e2:21:b8:28:97:76:1d:ce:e8:21:21:3d:24:61:
a7:a7:44:bc:03:d4:a7:9a:57:07:52:9b:4a:9a:ee:
0e:42:31:ee:a5:ef:a4:09:80:54:7c:ef:41:ab:f1:
48:8e:e5:f0:9d:3a:0b:50:c0:e4:aa:3f:85:36:ae:
78:e8:17:3e:3e:ef:e7:05:03:6e:d8:ab:a8:62:b0:
25:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DB:F2:73:DF:AE:7D:B0:18:10:42:21:F5:80:F3:0D:EC:04:CF:59
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:76:70:ce:d7:e3:4d:8a:8d:8b:37:15:5c:3a:83:a2:24:48:
1c:c7:da:c4:ee:6b:c7:51:e7:41:20:84:17:03:6a:1b:49:0a:
5c:5a:26:ad:bf:00:32:31:99:62:df:86:ef:d7:da:c9:41:e0:
4e:77:71:f1:03:f5:3e:40:f6:d7:95:f2:63:dd:0d:f3:b5:1a:
d7:64:9b:16:4b:d9:ab:c1:66:41:77:77:77:c5:88:6f:72:34:
db:5f:e5:e1:a5:b8:db:f0:08:1d:57:17:d9:02:83:07:7a:e0:
d8:59:4c:89:84:02:5f:9b:6b:b9:d1:94:1d:9d:3f:b7:3b:97:
81:06:3b:9b:08:ef:8a:0d:96:75:71:72:b1:df:d1:27:f4:4a:
c1:15:fd:29:f3:89:cd:b0:41:29:19:12:1f:4d:cd:74:46:1a:
21:e3:05:3a:80:2a:8c:20:22:9d:fd:c4:cd:d4:66:08:a0:4d:
2b:da:51:f0:b2:29:ea:7a:1b:36:59:5c:d9:3d:91:25:e1:e3:
21:9d:64:55:dd:24:ed:51:83:8d:71:b7:77:80:57:ad:0f:66:
56:4f:f7:70:9e:04:a8:a4:fd:2a:93:ba:a7:9b:00:b0:fd:e6:
3b:b7:fe:59:0e:8f:64:42:2a:8d:c3:e7:77:dc:12:87:9e:7f:
3c:e3:a6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:45:04 2026 by rpki-client