Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft
File: RZzMG7ARYGhoBts1qTNRshs-YNw.mft (raw, json)
Hash identifier: RXapA3QxVqyvXjMwtwSaPihHEH7JJWzxO39TMeT9a3A=
Subject key identifier: AC:23:E4:B3:18:3F:C9:2E:11:82:7B:36:DF:48:16:A1:4F:F2:5E:FE
Authority key identifier: 45:9C:CC:1B:B0:11:60:68:68:06:DB:35:A9:33:51:B2:1B:3E:60:DC
Certificate issuer: /CN=459ccc1bb01160686806db35a93351b21b3e60dc
Certificate serial: 019D37C0B098859FD85043E4EED39FA9CC38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZzMG7ARYGhoBts1qTNRshs-YNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft
Manifest number: 1604
Signing time: Sun 29 Mar 2026 04:01:08 +0000
Manifest this update: Sun 29 Mar 2026 04:01:08 +0000
Manifest next update: Mon 30 Mar 2026 04:01:08 +0000
Files and hashes: 1: RZzMG7ARYGhoBts1qTNRshs-YNw.crl (hash: ru6tRAw3Aq2h3tn8HaQUY+EcmMWqxqj/aTRQAxu6OvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZzMG7ARYGhoBts1qTNRshs-YNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:b0:98:85:9f:d8:50:43:e4:ee:d3:9f:a9:cc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459ccc1bb01160686806db35a93351b21b3e60dc
Validity
Not Before: Mar 29 04:01:08 2026 GMT
Not After : Mar 30 04:01:08 2026 GMT
Subject: CN=ac23e4b3183fc92e11827b36df4816a14ff25efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:b8:13:b2:7d:1a:d0:1b:0d:c9:72:e6:52:
c2:74:28:8e:4c:cc:ea:f4:4f:40:d7:d3:7a:28:4a:
95:80:7e:b8:8e:64:f9:52:e2:ac:02:33:a7:78:09:
6e:28:c5:cf:14:9a:d6:c0:61:6d:e9:e0:9e:04:b8:
80:26:80:ab:bf:73:07:fc:2c:b1:aa:ef:57:9d:00:
34:78:22:1f:26:2e:e7:0e:3f:32:e0:af:67:58:55:
75:ec:4e:e3:e3:03:42:54:df:76:0d:2e:c9:40:ba:
d4:21:f6:b0:4a:a3:a0:76:e2:d3:b5:07:db:2d:dc:
e8:dc:02:88:a5:cb:f5:04:7e:51:72:2b:6d:5c:c3:
69:38:3b:47:e0:6e:9c:47:4e:a8:57:9c:9c:c7:f1:
83:45:cc:f4:e5:8a:d0:0d:e1:04:10:a7:17:67:0c:
0e:7b:ad:59:21:ac:dd:ed:d4:12:e0:0b:44:c2:25:
4d:6d:c1:dd:27:43:50:77:23:6c:47:e5:8e:aa:71:
e8:4e:22:14:50:6a:ed:30:21:e7:ba:8a:cc:ba:db:
d8:72:41:46:a6:9f:3c:aa:ba:0b:b7:a3:41:ca:06:
87:ba:78:bf:8e:e1:d3:87:57:5b:42:c1:13:bc:f6:
80:de:f8:56:cb:52:70:63:5e:06:8f:ec:3f:dd:d2:
71:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:23:E4:B3:18:3F:C9:2E:11:82:7B:36:DF:48:16:A1:4F:F2:5E:FE
X509v3 Authority Key Identifier:
keyid:45:9C:CC:1B:B0:11:60:68:68:06:DB:35:A9:33:51:B2:1B:3E:60:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZzMG7ARYGhoBts1qTNRshs-YNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e4:c2:a6:ba:a4:03:27:fa:2a:a1:82:54:9a:aa:be:55:a9:
92:a6:cb:38:b5:b2:52:fa:b4:69:3e:bc:d3:e7:8a:4a:e8:ed:
d7:67:6f:1d:ce:b4:01:01:73:c8:1c:0e:c7:b8:72:25:da:31:
ec:8e:e4:5c:1e:98:aa:14:3a:12:d0:77:a3:15:8a:0f:db:17:
67:f8:87:a9:fb:0f:0a:ec:00:fc:14:93:5e:3b:42:63:fe:4e:
b0:57:3d:86:78:ef:a2:05:71:c6:ad:0e:d9:63:ab:1d:c3:49:
e5:7b:1f:67:06:79:70:e6:57:3f:93:a8:1f:7f:a8:26:0d:ae:
fb:9b:41:d1:66:72:68:87:a6:fa:0a:32:48:15:c5:ca:c7:b6:
08:88:84:a1:70:51:99:1e:b0:4c:f9:18:3e:31:b2:6f:c8:35:
eb:0d:90:a5:1a:4a:c0:e7:4d:32:2e:b7:fa:ca:78:b6:b2:24:
ea:bb:fa:38:2c:f7:2c:16:db:72:fb:4d:54:62:21:99:7e:94:
9c:3b:fd:7d:70:17:df:a9:3a:7f:44:7b:79:1d:b6:f8:59:54:
cd:84:52:b3:a4:b7:08:2e:e7:db:63:3c:0d:5d:1c:1d:15:d6:
ff:36:47:bf:07:89:d9:ef:3f:66:e6:c9:5c:6e:a0:d6:77:1e:
17:c3:f0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:46 2026 by rpki-client