Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
File: Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft (raw, json)
Hash identifier: nqDJ2LVfv6f3dDeCNvP32pncbmQzuYRaLSeDbXvM6vE=
Subject key identifier: 7C:AB:6F:07:6E:54:4C:CF:B3:54:CC:93:B2:14:50:08:14:79:9F:2D
Authority key identifier: 47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3
Certificate issuer: /CN=473f498592457859f26fb5a610b7b51ef52413f3
Certificate serial: 019D3940E79C2496B38B1C4ACEC1A666BED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
Manifest number: 0A03
Signing time: Sun 29 Mar 2026 11:00:48 +0000
Manifest this update: Sun 29 Mar 2026 11:00:48 +0000
Manifest next update: Mon 30 Mar 2026 11:00:48 +0000
Files and hashes: 1: Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl (hash: Wbaa4B7+fwZuZjGI7z/hZYUhZiCaObsh07xwmsxrsa8=)
2: hSwUOwAMED0n18PsqXIxOxQYAlQ.roa (hash: DbjICHwW8+pnzPKc7pAGSBb3/bjUMmNtreKRXOAvuXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:e7:9c:24:96:b3:8b:1c:4a:ce:c1:a6:66:be:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473f498592457859f26fb5a610b7b51ef52413f3
Validity
Not Before: Mar 29 11:00:48 2026 GMT
Not After : Mar 30 11:00:48 2026 GMT
Subject: CN=7cab6f076e544ccfb354cc93b214500814799f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c7:60:89:34:cb:6f:46:e0:61:05:09:87:ac:
8f:25:f1:cd:4e:e8:bd:b1:0b:ee:15:18:3f:02:fa:
d7:4f:05:1f:98:8b:cc:0a:fd:92:7d:2b:e6:90:d5:
bd:3c:30:6d:17:03:f9:ec:86:52:9c:f4:13:03:dc:
5b:a4:e5:df:bf:b3:cf:f3:83:2d:d4:41:71:cc:14:
8a:d9:ee:84:6e:be:fd:ca:43:9d:f4:4d:fc:de:e8:
c1:af:76:70:17:1c:66:ee:dc:63:96:27:f4:0c:bd:
66:b9:75:9f:eb:ff:4d:1f:f4:6b:07:2d:4c:ff:5e:
ae:3f:49:fe:fc:f1:ce:ec:77:90:12:c5:23:81:0d:
72:62:6a:a6:77:56:00:90:ee:42:3a:4f:7f:04:9b:
66:40:51:fb:90:c7:7e:ed:5d:37:75:2f:cb:29:c3:
0a:5e:ee:f0:2c:ee:4e:a5:c4:56:5e:35:74:68:ae:
03:54:85:bb:e0:a7:bb:9c:8a:f3:c1:d0:b9:b5:2d:
91:a2:2e:0e:db:0e:6f:29:b0:30:c4:9f:4b:34:b9:
b8:de:05:c7:1b:2a:c9:66:8a:54:04:c8:03:67:31:
95:de:1e:c6:35:bf:7e:e5:3c:35:2a:84:b7:f7:b0:
07:4e:6f:26:df:31:f7:86:df:8b:63:5d:ed:d3:93:
79:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AB:6F:07:6E:54:4C:CF:B3:54:CC:93:B2:14:50:08:14:79:9F:2D
X509v3 Authority Key Identifier:
keyid:47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:cb:26:38:07:ae:8b:11:65:6d:c9:f8:ae:92:61:8e:05:10:
9e:fc:a7:71:4f:2a:23:bb:6d:ea:26:2f:d1:48:c1:46:25:d8:
5c:76:6a:af:24:a9:b3:ed:3a:57:17:f1:fb:9c:0f:07:5d:e0:
18:a0:f8:44:cd:54:4b:e6:d6:ad:ee:6e:9b:e8:5b:18:24:ed:
99:08:f9:0e:ef:59:d0:4f:b3:46:f2:37:4f:d5:ff:64:42:0f:
45:5f:8a:a5:1d:0b:0d:a4:2f:91:d4:dc:ec:11:fc:58:ba:e4:
ed:bc:f0:2d:ac:53:61:85:a9:d8:6d:91:b1:28:a2:ef:e3:c4:
e4:fd:f1:38:e6:3d:cb:a9:a2:cd:f5:fc:97:bc:42:4e:ed:d7:
cb:99:04:aa:8f:d6:11:16:7d:84:3a:06:23:2e:21:c0:d6:23:
07:8b:fd:6c:25:45:e8:62:76:d7:21:e6:e1:59:82:0b:be:4f:
81:2c:b9:a1:d2:53:5d:f5:ab:79:5b:01:09:3f:a7:d7:f0:be:
f7:03:e1:90:cd:31:b5:70:a1:97:d1:6a:14:9b:f9:5d:1c:dc:
70:38:7a:11:f3:0b:ac:1d:03:c9:78:f0:c5:57:09:56:1a:a4:
a2:20:2d:c2:53:22:f3:a2:41:04:ee:30:c9:df:26:4e:4d:e9:
b5:a8:f1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:18 2026 by rpki-client