Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
File: C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft (raw, json)
Hash identifier: essgjboNCEzczmRl+7jwYhTqBa9eYg/k4R+0tFMT6RM=
Subject key identifier: 24:61:5C:54:C5:E7:12:8E:4C:D3:47:F8:58:73:6A:11:55:24:D4:59
Authority key identifier: 0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
Certificate issuer: /CN=0bfa7348d6c1d7186328328720730f684fa20edc
Certificate serial: 019D38661AD3A2511395C5E7EBA7AA230E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
Manifest number: 1897
Signing time: Sun 29 Mar 2026 07:01:48 +0000
Manifest this update: Sun 29 Mar 2026 07:01:48 +0000
Manifest next update: Mon 30 Mar 2026 07:01:48 +0000
Files and hashes: 1: C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl (hash: lTjdzI+q9tXebbrh3Rt6EG4GrthDcUILziu/akI21Rs=)
2: c3J2WzKnBz8n6vexcL4R4WC_FbU.roa (hash: +v+CTa6TJGoOCG2ben4CXihFgljD0NuOUaaiNhNFVkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:1a:d3:a2:51:13:95:c5:e7:eb:a7:aa:23:0e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfa7348d6c1d7186328328720730f684fa20edc
Validity
Not Before: Mar 29 07:01:48 2026 GMT
Not After : Mar 30 07:01:48 2026 GMT
Subject: CN=24615c54c5e7128e4cd347f858736a115524d459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2f:fb:8f:11:93:6a:ae:06:67:2e:68:61:c0:
a3:a4:e2:97:42:4b:f3:12:ab:00:3f:3f:a7:c8:76:
2d:a4:2a:50:98:4f:18:16:2b:72:1a:af:27:0b:b4:
40:fa:70:ed:b2:93:3a:d6:9f:69:8a:6d:dd:51:9a:
51:f8:f2:27:8f:9b:88:da:36:85:6e:a6:03:cf:bd:
4e:f9:7b:1c:2c:47:55:f2:31:e1:7f:a6:d9:29:1f:
ee:71:58:42:33:b0:dc:c7:58:86:56:bb:3c:1f:3c:
e7:2c:ac:af:27:ff:30:10:51:bf:72:d4:87:c4:19:
60:81:fe:e3:2d:80:c6:b4:d4:51:27:2c:8f:d7:65:
f0:a7:76:5a:f5:69:00:21:b5:1f:a7:93:fb:fa:d0:
6c:39:a1:e1:0f:0a:1e:bd:7e:46:4a:cf:7b:cb:d0:
c8:42:33:83:ab:bf:c3:59:68:d6:b0:ff:ed:9c:b9:
13:cc:b2:09:1b:2b:42:f5:44:87:2c:65:b4:31:25:
f1:87:be:26:97:c1:c1:e8:b9:87:32:da:80:f2:54:
e5:a3:1f:e4:37:dd:df:69:65:c4:54:41:55:ae:aa:
b2:6a:2e:cd:b6:41:17:fb:95:78:22:f3:53:b2:7d:
18:76:02:f7:91:bf:f7:ea:7e:da:40:a1:5c:5c:27:
60:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:61:5C:54:C5:E7:12:8E:4C:D3:47:F8:58:73:6A:11:55:24:D4:59
X509v3 Authority Key Identifier:
keyid:0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ff:1b:64:8b:1b:45:ff:9a:e5:9e:9a:72:95:d1:fb:cf:97:
af:64:0e:e8:04:0d:4d:8e:61:e9:2b:be:b0:7d:2f:e1:95:79:
ee:41:28:39:7d:2d:e1:31:1c:f2:6f:17:40:92:4e:f9:48:8d:
e2:1c:29:1b:33:43:d2:19:bf:b7:e5:c6:31:66:ed:25:fa:0e:
21:a5:51:8c:8f:a9:43:aa:08:c9:9c:4b:6d:b1:6f:61:e7:d3:
06:0a:91:ce:5d:eb:80:ea:48:c3:c9:91:29:6c:9d:9d:29:58:
54:29:b6:a6:04:72:33:2d:c7:2d:7d:a3:1f:ba:b9:1e:ae:38:
43:6c:90:9a:88:24:a7:18:90:38:22:08:08:85:c1:e9:f8:40:
6b:1b:c0:8c:3d:5c:a9:cf:78:d0:20:95:ed:f9:a8:db:8f:21:
6d:69:31:48:c8:11:27:a4:9e:69:d6:0c:08:4e:7b:d9:91:f2:
ca:64:c4:49:2c:88:85:87:6c:c3:45:18:7e:4e:0e:af:5d:48:
e5:81:01:2e:b9:3f:d3:65:57:97:89:1b:7a:49:c7:89:d6:52:
b6:49:ba:02:19:30:18:16:92:c7:04:25:ef:bb:f3:51:7f:8f:
79:db:a2:f7:fc:e2:11:0f:6c:b1:7a:22:e3:f9:70:1a:23:73:
bc:86:5b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:33 2026 by rpki-client