Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
File: rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft (raw, json)
Hash identifier: b+e+CS9LRmC3VMc/kM1SCvNUNFDypJkmDl/K0AFvnj0=
Subject key identifier: BB:63:8C:4F:E5:34:6E:3C:6F:DB:F7:6A:1C:F6:2D:DB:F1:92:39:4A
Authority key identifier: AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF
Certificate issuer: /CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af
Certificate serial: 019CE59159FCE177DC54634E2173131B66D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
Manifest number: 031A
Signing time: Fri 13 Mar 2026 05:00:33 +0000
Manifest this update: Fri 13 Mar 2026 05:00:33 +0000
Manifest next update: Sat 14 Mar 2026 05:00:33 +0000
Files and hashes: 1: 15iMLkZijLxFQhyhHpyZVO_Pbh0.roa (hash: 4vg9pvNIz6AeHAhcqTYuN2xhMEHA7ity8ku3fgSFNxI=)
2: rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl (hash: d9akRgidKXwk7iB+50cWFklB3bfCKWhl82iJzTgBr5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:59:fc:e1:77:dc:54:63:4e:21:73:13:1b:66:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af
Validity
Not Before: Mar 13 05:00:33 2026 GMT
Not After : Mar 14 05:00:33 2026 GMT
Subject: CN=bb638c4fe5346e3c6fdbf76a1cf62ddbf192394a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ff:2e:1d:b9:9b:d3:15:16:8b:64:48:20:e1:
3a:75:28:2f:16:e3:92:f9:8b:c3:a3:f7:b0:c7:ee:
80:a5:63:b1:73:c0:12:ac:23:87:8f:20:ba:56:ba:
17:cc:78:3e:0b:9f:45:38:df:e1:9e:76:cc:45:cc:
a6:ce:f8:bc:86:b8:ac:77:52:ea:3b:f6:35:17:5f:
84:e1:eb:f1:41:e1:f8:4d:e9:59:85:7c:5f:7e:39:
5e:7f:82:12:05:e0:35:7d:41:b3:07:2f:67:16:5d:
cd:96:78:7d:ec:8d:f1:06:af:4b:72:7a:65:76:bb:
a3:f9:dc:89:3c:32:61:c6:6f:0d:98:c0:f2:d7:46:
39:bc:b8:c1:f8:ca:11:38:b0:1a:5f:03:58:23:a8:
99:29:1a:0d:f2:e4:bb:9c:b9:06:62:ac:f8:42:ae:
e0:ff:b0:cc:20:2d:2c:2e:fe:83:fa:d8:97:9a:f7:
3d:03:af:68:99:9d:b2:de:07:e5:c1:2a:da:4c:f0:
ff:32:a7:58:5e:c2:11:ad:18:c5:62:62:fe:54:74:
39:90:fe:12:ab:78:e8:0b:ca:94:91:f7:e5:d4:d0:
65:d2:86:92:d0:10:49:f5:68:8b:6f:8f:33:f6:14:
03:16:82:88:f9:ae:30:3f:6f:a1:f1:10:a5:ea:93:
c5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:63:8C:4F:E5:34:6E:3C:6F:DB:F7:6A:1C:F6:2D:DB:F1:92:39:4A
X509v3 Authority Key Identifier:
keyid:AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:01:99:04:25:34:06:71:a1:5b:42:10:ee:c6:f6:e2:3e:e2:
34:11:5c:14:1e:f1:92:19:07:02:55:8d:7a:20:5c:c3:2a:d8:
6b:0a:90:0b:9f:15:24:cf:ca:27:81:fb:ad:cf:8c:fe:5f:5b:
ca:cb:84:56:db:b0:2c:c4:9d:91:93:72:90:55:00:bd:ce:f0:
d9:86:0c:05:21:9f:b2:da:17:27:42:fc:3a:ea:e2:8c:8f:21:
57:cc:d1:20:30:ab:f0:a4:77:a8:04:ce:a8:8f:42:d8:2d:f4:
81:b4:19:3a:a3:56:20:d3:3d:97:d8:0b:43:d0:3f:f6:6f:9b:
5d:29:82:33:ab:b4:cd:0d:49:0c:a0:b3:2b:ff:4a:f7:1d:aa:
ab:5d:fd:31:18:f3:c5:11:48:b5:b0:ca:83:5c:9e:b3:f7:16:
a3:21:d1:24:5f:48:e6:08:05:5e:be:74:34:fd:2a:d9:ec:1b:
83:ed:ac:3b:91:3e:ea:ca:77:b5:f9:30:ba:b1:a6:d1:38:12:
b0:14:dc:89:c3:cf:75:c8:09:38:0d:e1:fe:66:f6:8e:8d:8c:
ee:ee:4f:ea:24:33:b8:ea:64:66:40:e3:17:f1:0e:3d:9c:be:
f1:33:46:36:97:f1:5b:56:3f:14:19:31:82:3f:27:c4:c4:10:
f1:69:25:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:58:39 2026 by rpki-client