
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
File: RFZsGig9VT7z9lb1ciOYTdp8NV8.mft (raw, json)
Hash identifier: cB+VOMf6QXydgV/eN1UFrhriN6qTnZGwpDqozux0uTw=
Subject key identifier: EE:0C:AD:B7:AA:CD:BF:C9:05:ED:BF:F6:55:B4:54:D6:D1:F5:8D:0C
Authority key identifier: 44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
Certificate issuer: /CN=44566c1a283d553ef3f656f57223984dda7c355f
Certificate serial: 019D382E1695BCF52C4C5526D57BBD0CE573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 06:00:37 +0000
Manifest this update: Sun 29 Mar 2026 06:00:37 +0000
Manifest next update: Mon 30 Mar 2026 06:00:37 +0000
Files and hashes: 1: RFZsGig9VT7z9lb1ciOYTdp8NV8.crl (hash: fSlyO7lRdsV/wP8+8FARJ/u764Nrrm/EyeDg/DGtrus=)
2: sg6tgAybBjXrNxu4j4vvtnhkeRs.roa (hash: znWkPFTjms0Q4dHid9C/SISTIFSJsDcguftIuJobD7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:16:95:bc:f5:2c:4c:55:26:d5:7b:bd:0c:e5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44566c1a283d553ef3f656f57223984dda7c355f
Validity
Not Before: Mar 29 06:00:37 2026 GMT
Not After : Mar 30 06:00:37 2026 GMT
Subject: CN=ee0cadb7aacdbfc905edbff655b454d6d1f58d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:eb:a8:45:44:52:54:bd:b2:0b:51:8e:4f:e0:
dc:0c:d0:5d:d9:fd:b4:8e:21:8b:72:f3:c0:3a:3e:
64:93:ce:5c:64:53:68:fb:6e:2a:79:4d:a5:10:46:
d6:aa:a7:38:03:29:99:01:66:39:f1:48:77:8a:d1:
2a:10:26:e5:b8:00:d8:56:8e:2d:bf:f0:7a:1c:46:
d9:d5:ef:16:9d:0d:72:d5:f0:0c:ee:75:b1:a4:94:
4c:4c:dd:4d:ac:16:31:ca:2f:25:36:d6:60:01:2b:
73:0d:f8:18:b7:20:18:64:38:a2:be:25:1c:21:a0:
94:a3:c4:15:9c:ed:28:68:bd:37:5e:b2:48:a9:55:
ff:1d:07:44:db:c3:ea:50:e2:f4:2b:1a:21:94:30:
cb:d2:ae:a2:a3:c1:9f:5f:ec:27:c4:b8:67:c5:51:
13:69:60:0a:9a:c3:e8:ec:52:ab:4b:6d:2d:6d:54:
68:d6:42:91:b1:50:6a:f1:ba:97:27:c9:6f:65:cf:
35:eb:a6:9c:9c:28:40:9f:a0:c1:9a:7e:e8:14:7e:
10:c2:4e:94:9c:08:00:57:c8:ce:98:bd:04:f1:34:
5c:cc:bf:0a:ae:7a:d5:56:22:51:75:10:df:91:db:
66:8d:16:46:cc:da:d3:e8:d8:12:6a:19:40:de:70:
e9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0C:AD:B7:AA:CD:BF:C9:05:ED:BF:F6:55:B4:54:D6:D1:F5:8D:0C
X509v3 Authority Key Identifier:
keyid:44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:7f:db:09:10:bf:4b:4b:e5:e3:2d:d3:40:57:bf:75:db:62:
64:c0:a7:17:b5:ab:1b:41:ae:02:3e:6c:84:05:a7:a5:15:d5:
da:b0:d0:91:85:1c:5d:63:49:d4:84:6d:5f:df:c3:51:3c:34:
82:ac:d1:1a:46:9f:d3:74:18:8b:77:3e:61:13:cd:95:dd:7d:
42:29:61:88:47:3f:8d:ef:5a:57:bb:d1:02:90:39:8a:a0:cf:
12:74:8b:56:eb:ee:df:dd:b3:ea:84:5f:13:06:b1:18:62:6c:
ef:98:4c:88:ea:f9:c8:b2:89:13:d5:c1:49:0d:4e:2d:be:3e:
c9:65:37:e0:19:dc:30:1f:e3:2a:14:87:a9:fe:cf:4f:2c:11:
b8:0d:d9:3f:86:b1:ea:f2:75:08:22:a1:3b:4a:3c:7f:4b:4d:
5e:47:aa:6f:b0:6a:52:f0:61:c4:0b:ad:20:c2:8a:5d:27:16:
72:ce:90:da:9a:cd:bb:f4:35:48:c0:7e:65:82:bb:9d:9b:84:
9a:93:48:36:2d:4c:b6:66:a2:cf:74:b5:17:b4:c8:8d:04:81:
68:bd:20:37:85:de:96:0f:82:73:d2:c6:fd:78:c6:27:87:ce:
33:9d:54:c1:aa:73:8b:dd:de:cc:75:9b:ab:30:fc:97:8f:aa:
d2:d3:df:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:40 2026 by rpki-client