Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3a44a2-7f37-4ef5-b034-a4fc67e1c2fb/1/dZ27tMoEMpvFCdbdHNULk1atiQY.mft
File: dZ27tMoEMpvFCdbdHNULk1atiQY.mft (raw, json)
Hash identifier: BZE2zcIxyCJL8zvD2s0MZV40/yQP3JHjgTQX6L1Bmlk=
Subject key identifier: AB:2D:A9:C5:53:BA:FF:83:53:5F:3F:87:6B:A3:14:A6:22:4F:C7:05
Authority key identifier: 75:9D:BB:B4:CA:04:32:9B:C5:09:D6:DD:1C:D5:0B:93:56:AD:89:06
Certificate issuer: /CN=759dbbb4ca04329bc509d6dd1cd50b9356ad8906
Certificate serial: 019D36E4A441795C60C6233283491B5613CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ27tMoEMpvFCdbdHNULk1atiQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3a44a2-7f37-4ef5-b034-a4fc67e1c2fb/1/dZ27tMoEMpvFCdbdHNULk1atiQY.mft
Manifest number: 0216
Signing time: Sun 29 Mar 2026 00:00:47 +0000
Manifest this update: Sun 29 Mar 2026 00:00:47 +0000
Manifest next update: Mon 30 Mar 2026 00:00:47 +0000
Files and hashes: 1: 5UQnHrIssl-L3tEs4ZaCR-OpgzU.roa (hash: aHEZnc6yTe0TRFc35pEnWkxNreWvfEne2GzfuKDiaPI=)
2: dZ27tMoEMpvFCdbdHNULk1atiQY.crl (hash: nUv9V9i2LfrgMRyl5yz2KBSNgPHURm30KGb1PIOaLUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3a44a2-7f37-4ef5-b034-a4fc67e1c2fb/1/dZ27tMoEMpvFCdbdHNULk1atiQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3a44a2-7f37-4ef5-b034-a4fc67e1c2fb/1/dZ27tMoEMpvFCdbdHNULk1atiQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZ27tMoEMpvFCdbdHNULk1atiQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:a4:41:79:5c:60:c6:23:32:83:49:1b:56:13:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759dbbb4ca04329bc509d6dd1cd50b9356ad8906
Validity
Not Before: Mar 29 00:00:47 2026 GMT
Not After : Mar 30 00:00:47 2026 GMT
Subject: CN=ab2da9c553baff83535f3f876ba314a6224fc705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4f:6d:e5:bc:f6:34:e8:80:c7:7c:9c:f3:92:
c6:17:42:f5:02:3d:86:af:d8:61:b9:93:67:86:91:
4e:b2:89:06:8b:1c:bf:97:56:27:f1:b6:b0:d0:69:
6e:33:80:a1:5c:16:1e:ec:e0:97:14:be:01:59:25:
f1:b8:df:21:44:e7:50:02:b9:1f:15:8e:fd:f0:35:
c9:67:c5:fd:60:59:40:80:a0:e3:28:0b:6f:d7:0e:
ec:a2:1e:94:9c:79:5e:c7:96:29:6d:ef:9a:78:fc:
bd:53:26:d2:5b:1f:8d:97:c1:4c:91:bc:f5:d0:78:
b5:02:cf:f3:d1:01:f3:44:a9:1d:da:06:f6:e7:50:
b5:ce:ee:29:dd:ce:d0:4c:71:71:d4:c7:cc:56:5e:
83:06:4e:44:fa:9e:04:0a:ad:5f:14:ef:42:66:39:
d2:c9:44:9c:4f:04:c6:77:fd:74:e5:f7:6d:c9:a4:
29:14:6d:6e:3c:32:64:57:b8:b3:67:35:92:76:de:
fe:f9:98:aa:ee:8f:cb:6d:a9:9a:89:07:0c:61:cd:
76:c0:4e:bf:ab:90:fb:fe:33:95:5f:1b:e9:45:cf:
38:3b:ac:89:80:e3:7e:8d:00:a9:20:d1:9d:c3:a4:
e7:c1:6b:67:d6:fc:6d:dc:a9:20:7e:9a:4a:cb:2e:
37:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2D:A9:C5:53:BA:FF:83:53:5F:3F:87:6B:A3:14:A6:22:4F:C7:05
X509v3 Authority Key Identifier:
keyid:75:9D:BB:B4:CA:04:32:9B:C5:09:D6:DD:1C:D5:0B:93:56:AD:89:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ27tMoEMpvFCdbdHNULk1atiQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a44a2-7f37-4ef5-b034-a4fc67e1c2fb/1/dZ27tMoEMpvFCdbdHNULk1atiQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a44a2-7f37-4ef5-b034-a4fc67e1c2fb/1/dZ27tMoEMpvFCdbdHNULk1atiQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:71:8c:02:61:26:95:ea:8a:b3:75:19:0f:7f:79:49:f7:74:
e8:0a:f6:82:ac:2b:88:e8:e7:4f:13:fc:cd:8d:5f:62:41:2d:
75:4f:d3:ef:cd:ac:e0:af:dc:87:3a:fc:b8:d9:56:9b:fc:60:
28:81:c2:99:02:4f:61:3a:67:79:aa:07:e8:cd:09:77:6c:49:
8f:f3:2a:9d:b8:2b:08:71:9e:ca:76:d2:72:ee:8b:fb:98:c9:
53:af:c7:1d:31:98:8d:bc:60:4b:d9:1e:d9:b6:a9:c8:6f:76:
be:98:23:40:5f:9c:fa:3e:1b:22:a7:1f:7a:82:76:18:5f:af:
72:e5:13:49:0d:20:2c:e8:0f:4b:9a:b9:21:fa:49:42:8c:2c:
97:0c:c1:8d:8b:da:7f:15:e4:83:58:79:59:a5:f4:ae:43:13:
c8:47:99:95:78:02:68:23:13:aa:7c:48:0d:64:22:c2:80:70:
b8:6a:49:5f:ad:0b:f6:06:a2:0b:d0:f4:79:5a:69:5b:c1:09:
09:6e:81:ae:38:67:a9:51:35:5e:12:4f:6c:68:a9:5d:0f:61:
84:b2:ed:89:55:54:d0:3b:80:67:18:04:e3:73:7f:30:39:64:
ee:d4:49:83:b4:ba:aa:24:48:35:45:7b:6a:ef:12:cc:56:0d:
04:59:97:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:37 2026 by rpki-client