Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
File: RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft (raw, json)
Hash identifier: ahfF/XwtA/IERtLtSK++d96KvFSM7S05oZVmcyHDB5c=
Subject key identifier: BC:8B:60:5C:E1:BD:28:80:1F:AD:56:85:73:CC:7D:FE:C4:55:E3:DE
Authority key identifier: 45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
Certificate issuer: /CN=459ad2ece3e5911093d964753b656459c9bc05a7
Certificate serial: 019CC93ED57021167AE9ACD8BA88D4ADE2B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
Manifest number: 10DC
Signing time: Sat 07 Mar 2026 17:01:04 +0000
Manifest this update: Sat 07 Mar 2026 17:01:04 +0000
Manifest next update: Sun 08 Mar 2026 17:01:04 +0000
Files and hashes: 1: RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl (hash: do7b0cvSqY3bgwFN6Y6tRG5rxFWroOERug8vURL/HGc=)
2: oxM4weLdM3j7jrYJT8BJG0W0cJ4.roa (hash: JzjynEnEp0mde9J1/ZPR8Pa7VycJrBNUsALJMI999+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:3e:d5:70:21:16:7a:e9:ac:d8:ba:88:d4:ad:e2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459ad2ece3e5911093d964753b656459c9bc05a7
Validity
Not Before: Mar 7 17:01:04 2026 GMT
Not After : Mar 8 17:01:04 2026 GMT
Subject: CN=bc8b605ce1bd28801fad568573cc7dfec455e3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:9c:5a:c3:ea:2b:b8:af:61:d8:e2:4f:58:bb:
70:a3:2e:84:0b:4a:0c:f4:c8:71:63:1f:39:3c:7d:
01:56:64:72:75:26:74:b0:ba:f7:eb:4d:7c:b7:75:
39:9b:41:ca:c4:9e:83:0a:30:42:f5:26:c4:b5:fa:
1b:96:1e:3e:6f:eb:11:3d:59:22:16:7e:a1:af:52:
ff:ed:d4:e2:d5:26:8b:01:31:ef:b4:6d:26:a5:48:
a8:ce:28:9a:67:12:04:e6:5a:bd:77:4a:de:e2:fb:
47:03:c3:0a:f2:04:d5:11:ac:e5:a2:39:84:8a:3b:
5a:40:4d:69:8f:c8:5f:02:b4:1f:d5:de:05:52:6d:
17:6c:35:56:41:86:3e:58:94:ca:16:88:fb:17:2f:
d9:f0:60:2b:be:15:3d:03:35:c9:af:f6:23:df:f0:
99:c7:04:c0:6d:8c:9f:b0:2e:26:14:c8:12:ef:38:
97:cb:39:96:95:96:8b:2c:33:6b:ae:eb:8f:dd:14:
79:4b:86:f6:12:5c:64:e6:47:c9:30:fc:9b:5d:1d:
66:6b:f5:6a:3a:e8:4d:5e:f0:88:df:ee:32:b7:5e:
8c:f9:15:c1:e5:9d:15:e4:1a:12:f3:03:d4:c3:d8:
07:82:59:77:27:fe:c8:b3:72:91:37:af:95:af:98:
92:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8B:60:5C:E1:BD:28:80:1F:AD:56:85:73:CC:7D:FE:C4:55:E3:DE
X509v3 Authority Key Identifier:
keyid:45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:54:3a:99:c1:83:e9:8b:a3:aa:91:20:80:d9:7b:73:8d:15:
ca:4c:13:b9:e3:c1:b4:bf:11:33:7f:28:dd:d8:ba:d3:c6:db:
25:49:67:6e:db:af:cf:cb:fa:76:8f:40:bc:40:7f:56:31:6f:
66:fd:3c:db:93:f3:08:d0:1b:da:e7:38:ca:09:4b:cb:47:3d:
67:c9:67:33:e4:14:08:61:05:e4:52:43:54:1c:a8:2e:3a:0e:
52:f8:52:03:9e:fc:9f:68:ad:ed:e5:7a:32:2a:f6:c1:16:2c:
f9:47:cf:8f:b2:76:aa:47:e0:79:a4:a0:3a:31:aa:96:4b:b3:
17:08:fc:79:7b:d6:ef:c3:82:98:11:b6:a7:2b:54:74:f1:f9:
2f:5f:6a:f0:17:01:58:e5:11:8b:81:cd:d7:88:da:24:01:a4:
87:9b:bf:0b:17:bb:38:43:a8:05:6d:04:9b:da:3d:f3:29:85:
9c:cc:50:13:0f:bd:2d:74:02:6b:0a:58:6d:a3:d9:59:17:e4:
25:70:6c:36:1d:55:7c:fe:5c:71:a9:21:c4:9f:3a:4a:54:58:
32:09:44:7f:f7:aa:d8:e3:f9:f3:2b:fb:07:c6:c8:98:48:3c:
e9:35:90:35:f9:1b:54:03:c4:47:13:55:6c:33:e3:e9:bd:ef:
25:2e:41:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 21:01:06 2026 by rpki-client