Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
File: RZsv0AU73X53dTmNsWO-6HckeKU.mft (raw, json)
Hash identifier: OPeLu/d1+w17HVNshv7LtMEHA8wRMyN+PBBoH3iLEyQ=
Subject key identifier: 3D:BF:EF:F4:54:B0:35:84:51:16:89:F7:AB:68:0C:0B:E5:FE:9F:AD
Authority key identifier: 45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
Certificate issuer: /CN=459b2fd0053bdd7e7775398db163bee8772478a5
Certificate serial: 019C97E4CE7076E3E207CC4A0B406635EED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
Manifest number: 1840
Signing time: Thu 26 Feb 2026 03:01:20 +0000
Manifest this update: Thu 26 Feb 2026 03:01:20 +0000
Manifest next update: Fri 27 Feb 2026 03:01:20 +0000
Files and hashes: 1: 1HXGb5-BWji6FxKqR9J69GxxjeY.roa (hash: +4VLoXs2I/t3CPnVmm9jbZnZFGbEot/glqmRqD+Blr8=)
2: RZsv0AU73X53dTmNsWO-6HckeKU.crl (hash: ji160Pkf0pPlsM1JWJS2UYGulKcHFoho4tZ4+bGxeJg=)
3: WQdZNfyoXAF_mZl28cfENCrtIMs.roa (hash: U3LDO+4WO64Jt5h3Mz2CbjqUHfSHcu4yyw0WNvXOY9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:97:e4:ce:70:76:e3:e2:07:cc:4a:0b:40:66:35:ee:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459b2fd0053bdd7e7775398db163bee8772478a5
Validity
Not Before: Feb 26 03:01:20 2026 GMT
Not After : Feb 27 03:01:20 2026 GMT
Subject: CN=3dbfeff454b03584511689f7ab680c0be5fe9fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:11:20:a1:f5:fb:38:f7:04:a5:e6:8b:da:c2:
65:df:00:9b:8d:c4:49:91:b8:f1:d3:d6:1b:8f:be:
44:b5:77:36:2c:43:14:ed:bc:83:9e:fb:96:b9:1e:
1d:7e:b7:39:68:91:cc:4c:0e:c1:53:20:fb:96:db:
ba:84:e9:2b:66:dd:17:2a:fd:c5:36:9f:6d:7c:35:
93:d5:0a:58:78:2d:87:62:aa:20:7f:68:95:de:eb:
73:b9:d1:b2:b7:1f:1b:92:f1:98:42:23:9e:5a:80:
d9:43:c0:91:9f:53:0b:cc:a4:7c:79:6a:75:4b:e5:
10:5a:36:52:ef:ec:16:0a:ba:c1:07:07:a8:81:57:
fd:6d:71:8f:f1:46:4d:02:5d:a6:fb:88:38:1c:9e:
3a:94:44:63:52:a6:43:e6:ff:14:fb:c1:41:fa:04:
da:5f:de:6f:bc:03:c5:6f:b3:c4:4f:21:57:06:cc:
ac:ca:1c:07:3d:7d:ea:e4:c1:93:df:42:ab:2b:b0:
95:7f:25:c4:d0:e5:ad:52:34:2a:97:09:57:ca:4b:
8f:65:ce:5e:cc:4c:8e:e4:ce:42:ec:35:46:1e:5f:
27:62:67:d9:6e:6e:31:22:c7:39:97:da:51:3c:ea:
0c:78:c6:7b:50:63:2f:8a:82:80:3c:bb:11:2f:0a:
be:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BF:EF:F4:54:B0:35:84:51:16:89:F7:AB:68:0C:0B:E5:FE:9F:AD
X509v3 Authority Key Identifier:
keyid:45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:1f:d8:7f:00:4c:97:3f:72:22:b4:76:1f:a1:22:9f:f0:3f:
bf:53:14:8a:a9:cd:f6:9c:1c:a1:97:28:06:ca:bf:4a:11:03:
d9:ec:7a:d6:1b:96:6e:89:8d:a6:16:fd:29:79:e3:a7:d0:44:
89:e9:31:c1:25:fb:b6:48:17:9a:da:df:6f:a0:1d:85:11:e7:
91:6b:2d:ce:01:66:95:b6:0e:5f:14:7a:42:6b:d6:9b:ba:34:
29:ee:5d:e8:49:41:69:cd:32:a0:9f:d1:52:3b:af:22:77:16:
6c:c2:91:7c:82:a0:ca:21:04:2a:4c:40:50:0f:b3:ce:ab:30:
3c:1e:3f:51:8b:4a:17:52:25:a6:a5:75:e3:15:db:20:3c:3e:
5c:17:c9:00:f6:95:fc:89:67:6e:ab:4c:f3:78:27:93:4a:b2:
5f:d7:36:af:28:a7:6c:95:8f:a9:bd:9c:bb:a9:89:4c:cb:20:
5d:e4:72:db:eb:a1:cb:d9:91:2a:a1:3f:1e:c3:88:8f:5c:45:
fd:85:79:a6:73:34:41:6e:a0:4f:60:be:a9:97:05:e5:22:49:
3c:c5:79:70:46:20:a4:02:a8:2d:34:da:97:2a:e8:9b:0b:a7:
f6:6f:c4:62:22:90:a4:5e:d0:65:99:e0:a4:90:6e:ab:81:aa:
ee:08:7a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 10:38:26 2026 by rpki-client