Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
File: z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft (raw, json)
Hash identifier: r525+UY1glN70SL3x7QMCCHBKTjaQYI75GF0n7e/t3Q=
Subject key identifier: 07:44:5C:DB:59:51:8B:D8:67:AE:29:F4:27:8C:63:D5:DA:C3:F5:8F
Authority key identifier: CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
Certificate issuer: /CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Certificate serial: 019D37F71C97AEF0056F2BA3C3A1391BBC9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
Manifest number: 0F2B
Signing time: Sun 29 Mar 2026 05:00:34 +0000
Manifest this update: Sun 29 Mar 2026 05:00:34 +0000
Manifest next update: Mon 30 Mar 2026 05:00:34 +0000
Files and hashes: 1: JBGVuhUTG1uAdA7PJ8q3Bl_1zg4.roa (hash: ivCG2MEHaxXIQCRs1tmfeUJ68Epqw/GmvfL4Qq82QIM=)
2: tt8_4epx4fUU-t0TnlM9j9Sy8Gc.roa (hash: LFx80Ot89ti4/nAcgN280XkSiewCdAO+iihbkS/s85Y=)
3: z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl (hash: yfmTcgndZTp6QPYTAwiIYA+FdRA055dLNoLDIcbG+pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:1c:97:ae:f0:05:6f:2b:a3:c3:a1:39:1b:bc:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Validity
Not Before: Mar 29 05:00:34 2026 GMT
Not After : Mar 30 05:00:34 2026 GMT
Subject: CN=07445cdb59518bd867ae29f4278c63d5dac3f58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:99:51:dc:31:47:2e:53:b9:1a:c4:50:77:
98:e4:71:98:ee:17:e7:b6:71:ac:a9:83:f6:77:b3:
e3:94:8d:95:0a:87:4a:6a:3d:89:14:a0:c0:9c:09:
30:e5:8e:9c:88:78:41:90:bf:ea:98:94:7f:fc:9e:
2e:75:8c:15:5d:f7:d7:f3:f6:94:24:7e:58:ee:d2:
36:8a:0e:1b:35:12:07:56:96:51:c5:c3:25:4d:0a:
bf:7b:10:42:5c:49:4b:84:4b:e4:a1:a3:60:98:9c:
a9:e0:a2:87:c0:17:39:79:99:e4:57:48:8a:0b:b1:
b2:aa:c4:a3:06:3d:27:2c:09:f2:c6:3b:2b:3f:ef:
97:e9:c1:74:49:cc:0a:f3:df:8c:ab:57:a8:5f:e3:
64:03:37:a8:01:8c:db:73:f7:3f:7f:11:e6:1f:cc:
87:e4:d6:64:78:5d:c0:6b:e7:fd:3c:d1:9c:f8:c8:
23:97:bd:75:ab:7d:20:b3:c1:02:2e:9f:1b:7e:2f:
a5:7c:2b:17:a6:80:e6:2a:4a:6b:07:d4:75:d6:ed:
1d:43:95:eb:9e:42:c4:ff:ee:59:03:d6:63:f1:cb:
2d:39:7e:2f:a3:a8:6c:ea:ae:33:6e:f1:a0:d3:9f:
7f:eb:4a:58:f7:a3:04:03:7d:7a:92:a6:d4:25:70:
18:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:44:5C:DB:59:51:8B:D8:67:AE:29:F4:27:8C:63:D5:DA:C3:F5:8F
X509v3 Authority Key Identifier:
keyid:CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9c:a6:f2:a5:72:59:8b:f3:08:22:db:47:4a:ce:e2:13:82:
c4:bf:98:4d:13:9a:c2:53:ab:bc:2a:f5:d7:81:f1:77:19:18:
ce:8a:d1:7b:12:0c:0f:d5:8c:5b:c1:ba:a5:8b:d3:62:ee:c2:
74:41:1c:38:ca:7f:e4:69:e1:20:10:58:03:f9:3f:0f:2c:b4:
16:0f:64:c5:3e:64:d4:a6:85:6c:fc:d7:07:77:54:68:1c:83:
15:8a:f8:5d:51:54:98:4b:35:47:89:8e:ff:da:b4:36:d8:87:
95:58:b7:ba:6d:ca:02:d1:1f:41:fd:fd:32:ad:2b:33:09:d7:
91:c4:79:5a:c1:0a:88:50:f0:dc:e2:67:35:09:d4:49:05:8b:
64:30:73:3e:1f:8b:ee:c1:96:51:96:10:18:7c:ff:83:c1:da:
ff:28:47:03:61:88:df:d2:0b:17:21:bd:b6:c1:0f:b4:65:26:
de:a8:14:76:06:a3:38:68:8d:e8:2d:e8:61:bd:ab:4a:36:88:
34:18:b0:ac:a6:f7:c3:1c:de:a1:ce:8d:f9:37:10:da:61:50:
43:67:2c:c8:9e:9f:0a:5b:13:6c:2c:65:d0:8e:0a:6a:5c:81:
cb:63:30:3c:ca:c9:4b:a3:6b:7a:2b:d6:87:8b:17:e4:04:6c:
f7:3c:de:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:21 2026 by rpki-client