Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
File: dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft (raw, json)
Hash identifier: 5Q/8YiRICt63BCo6Od6O7CwUVvvljVGCAQRA8O/b6Fo=
Subject key identifier: EB:FD:04:DA:31:B8:CF:43:A7:62:87:E1:D3:3C:33:11:1A:1B:1D:A4
Authority key identifier: 75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
Certificate issuer: /CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Certificate serial: 019D37531869379359418DF42500808E3A48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
Manifest number: E2
Signing time: Sun 29 Mar 2026 02:01:25 +0000
Manifest this update: Sun 29 Mar 2026 02:01:25 +0000
Manifest next update: Mon 30 Mar 2026 02:01:25 +0000
Files and hashes: 1: 5vgf_9aZThkj_7VAzPV1SdycQ9s.roa (hash: WWuwQNMz2jPS1Lz9ZyTa8kKgvLVWvH3DolJRQpBYZVw=)
2: ZUFdt76XEIRqjB1ZsCU8KDPIIeE.roa (hash: +22Qmq4Y9pNmDRsynGIXRX9EtOmlc0lMrcEc8jeBxvw=)
3: dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl (hash: ogIpQUxWYcbY0i9nrt1TvhVgF2mE04Eyk1An9Ac+iuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:18:69:37:93:59:41:8d:f4:25:00:80:8e:3a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Validity
Not Before: Mar 29 02:01:25 2026 GMT
Not After : Mar 30 02:01:25 2026 GMT
Subject: CN=ebfd04da31b8cf43a76287e1d33c33111a1b1da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:92:a5:86:e7:1f:01:17:dc:fc:b1:78:71:42:
50:f5:5e:e3:38:71:e5:a0:51:38:0b:6f:cd:e7:2d:
e7:ef:2b:5d:eb:93:ac:7f:67:75:9e:ce:3d:5a:e4:
b1:85:3d:55:12:22:22:93:4d:77:88:48:91:46:57:
2b:9c:85:5e:f0:3b:af:21:3d:11:3b:7f:be:30:19:
aa:6c:7f:d0:53:f2:8c:15:4f:67:c6:96:cf:8d:b3:
83:68:07:b3:05:46:7c:b1:a5:4d:e0:7c:c3:0a:81:
c2:92:ae:fa:8d:85:d7:29:a2:87:fc:fa:d8:45:2d:
2b:fc:b6:61:5a:66:c6:b3:51:cf:81:bc:1e:b3:f9:
0b:84:c6:03:1c:77:13:a2:54:e5:1d:7a:6a:ed:ae:
cd:bc:ae:f9:80:63:2a:64:41:47:ba:70:a3:fc:ea:
7b:02:77:24:9f:b3:73:ac:f0:4d:95:73:61:cc:46:
50:64:e8:43:0a:b1:f8:0c:48:f9:c5:7c:05:a3:93:
4a:16:aa:3d:96:69:9a:19:ea:62:66:47:5b:47:26:
5f:d1:fc:bc:05:f5:dc:a1:c8:51:9f:f2:9a:5c:83:
c3:34:a0:14:47:78:6f:68:fc:7a:99:15:dd:fc:59:
27:7d:4f:c0:75:7d:f3:92:40:68:39:42:df:3a:7a:
90:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FD:04:DA:31:B8:CF:43:A7:62:87:E1:D3:3C:33:11:1A:1B:1D:A4
X509v3 Authority Key Identifier:
keyid:75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:46:35:93:50:0c:45:51:9b:4d:66:d1:bc:2b:3d:59:d7:b3:
55:da:ac:59:ce:03:18:9d:1a:ac:0c:44:d3:71:77:ed:57:03:
6a:ad:8a:30:32:5a:ed:7e:c0:78:84:ef:86:f3:35:17:68:ed:
ce:b5:bd:98:f2:94:af:c3:50:b6:38:3a:a8:d8:3d:55:7f:93:
bf:04:c6:de:02:5e:7d:97:14:fd:51:23:dc:39:37:31:39:c2:
6f:23:07:94:e2:d3:19:bb:9b:53:db:80:a2:c4:d0:c4:ec:78:
8a:ce:0a:ca:45:1d:84:a3:14:b7:ae:84:5d:0e:51:d1:3b:57:
03:2f:09:36:cb:3c:b1:31:c8:8e:2b:67:87:b1:d4:f3:7b:57:
f1:07:4f:ca:57:82:e9:a9:c7:70:e6:a5:ee:c6:c4:4a:33:ef:
41:5f:10:20:68:ec:c1:50:a5:ca:70:70:5c:27:fa:ab:2e:c5:
9d:e9:c0:e5:ea:6e:10:ce:37:5b:06:a2:68:02:d2:2a:3d:0c:
58:58:aa:78:b7:e1:aa:6d:9c:7a:d5:ca:3d:13:b6:69:25:bb:
70:a1:a0:1d:ef:0e:c6:05:bb:18:76:7d:ab:cc:28:51:85:6c:
91:ca:ed:00:56:9c:c7:17:ef:1d:c4:75:03:b2:96:46:1b:a1:
5d:63:fd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 03:54:56 2026 by rpki-client