Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
File: z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft (raw, json)
Hash identifier: A1aaYjq5aY15FeF0qwgCkYJVACOIOY/3FPhPlFGnjqY=
Subject key identifier: ED:06:41:8D:88:D6:D0:86:0B:06:83:9C:E4:73:B8:59:72:B0:FA:75
Authority key identifier: CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
Certificate issuer: /CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Certificate serial: 019D3752B54B921C5DE4E05E71107D1A2760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
Manifest number: 0CE1
Signing time: Sun 29 Mar 2026 02:01:00 +0000
Manifest this update: Sun 29 Mar 2026 02:01:00 +0000
Manifest next update: Mon 30 Mar 2026 02:01:00 +0000
Files and hashes: 1: 6Jo867Q7kI_xg37Z2hR0Zp-bKLA.roa (hash: nuQ+eCxmU3VLRBrNEQL/R2CLOaS7uJaHx+gJkQcGWrE=)
2: bpCdtlID1rH2DrjVzMcBmork2aQ.roa (hash: BSKDPkYhU8I5fR9wBcNo+U5cc/fHr2mCsZj2Lep7Q84=)
3: z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl (hash: T6GxiY64SNbOhOIdgX3BfeVunBwg0VasxHbh0WBNHYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:b5:4b:92:1c:5d:e4:e0:5e:71:10:7d:1a:27:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Validity
Not Before: Mar 29 02:01:00 2026 GMT
Not After : Mar 30 02:01:00 2026 GMT
Subject: CN=ed06418d88d6d0860b06839ce473b85972b0fa75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e2:72:6f:a3:85:c5:c7:dd:f8:cc:43:d3:c5:
19:e3:26:65:d0:dd:79:10:98:d4:40:59:7b:58:dd:
36:78:83:f5:c2:d3:32:79:f1:02:34:cc:7f:6c:4c:
84:fd:ee:90:24:f0:d3:3f:39:d4:e6:a6:b5:fa:48:
56:5f:fd:65:3c:c8:93:a1:98:34:e0:84:45:f7:f1:
c6:1b:af:3d:86:05:5a:cc:8c:ce:3b:c7:45:42:41:
b5:e4:e4:83:93:60:11:53:d7:1e:88:54:49:fa:a3:
0b:77:63:1a:cc:65:04:3a:35:06:8f:78:a0:9d:73:
c2:29:fb:9b:48:81:b0:16:ba:3a:45:f5:a7:bf:a9:
bb:1a:5f:50:dc:74:5b:b5:65:b5:db:59:46:3a:e9:
a6:b9:77:8d:66:d5:7c:1d:3c:75:bc:20:64:9e:bc:
c4:d3:68:c7:24:37:dc:d1:dd:a1:ac:7b:d3:0f:8a:
d0:c6:2a:eb:46:4d:82:41:f3:d4:9a:f4:7d:d9:8a:
49:cc:e6:d4:ba:d8:21:5b:c6:f4:c3:68:6c:e6:bd:
3f:1f:b9:b4:2d:44:7c:df:01:ec:db:e1:7c:b4:d4:
b8:02:0f:88:e9:90:8a:c8:d2:eb:40:8f:5a:a8:8f:
89:79:c6:30:12:73:b3:ee:58:0d:be:73:a5:c6:93:
73:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:06:41:8D:88:D6:D0:86:0B:06:83:9C:E4:73:B8:59:72:B0:FA:75
X509v3 Authority Key Identifier:
keyid:CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ac:42:6d:8b:34:e9:e2:20:c0:fc:11:9d:a4:9e:dc:5a:71:
69:74:ef:92:4d:01:e7:8d:b7:ec:79:25:49:45:95:88:e0:27:
ee:c0:88:36:f5:42:83:e4:d1:ce:72:e6:b1:b3:c5:3c:16:b0:
36:94:41:15:3c:98:0a:cb:b5:aa:65:52:1f:0d:80:a7:f2:aa:
38:c6:3f:9f:c5:79:21:c4:48:f6:94:2f:49:1b:80:2a:c8:0c:
b5:8d:ed:fb:73:e3:02:0c:1a:a5:41:2d:b9:70:30:28:30:97:
63:8c:1c:89:af:3b:5a:31:52:18:a0:5e:3d:cd:4f:ef:0e:73:
83:6d:71:4a:f2:20:51:37:10:ac:59:9c:4f:1a:9c:25:60:f3:
ab:3a:04:11:12:c8:71:42:b1:e4:6d:8d:b1:cb:db:ec:53:b9:
fc:2f:6d:73:6f:98:e5:61:19:6f:95:a3:03:d8:11:b2:7d:b7:
f2:ba:e3:bf:42:f2:9e:2f:39:90:8a:f8:71:4d:83:02:cc:74:
41:36:11:a1:bd:58:88:24:61:71:9f:74:52:6e:e5:ba:8c:c1:
73:bf:4f:11:52:5e:21:ce:14:d2:32:f6:a3:7c:8b:af:e2:0f:
50:97:e6:ae:31:1a:58:4b:68:71:30:32:cc:73:95:dd:46:f6:
89:2a:37:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:22 2026 by rpki-client