Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.mft
File: DEIZ0r8JtphczV1I_ZTSshuATsY.mft (raw, json)
Hash identifier: ausmhy/+70HUNE/MgiPosAX5k1SPbr1KTn4iZQzSfQY=
Subject key identifier: 1C:E3:E9:AB:D4:54:14:74:C1:17:0B:BD:E6:88:DF:ED:91:DA:F7:85
Authority key identifier: 0C:42:19:D2:BF:09:B6:98:5C:CD:5D:48:FD:94:D2:B2:1B:80:4E:C6
Certificate issuer: /CN=0c4219d2bf09b6985ccd5d48fd94d2b21b804ec6
Certificate serial: 019D3977B9BA1ED59125F812F364A63E6E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEIZ0r8JtphczV1I_ZTSshuATsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.mft
Manifest number: 95
Signing time: Sun 29 Mar 2026 12:00:40 +0000
Manifest this update: Sun 29 Mar 2026 12:00:40 +0000
Manifest next update: Mon 30 Mar 2026 12:00:40 +0000
Files and hashes: 1: DEIZ0r8JtphczV1I_ZTSshuATsY.crl (hash: fam2CJM8it5HZU2eGI+sy0XiTShTh7p62U7ATFYPnTc=)
2: GViLUpBKhpnABkhMhuMdD2J_oqw.roa (hash: 7Bdn6jISx+wiSsw/Erals+/gDIwz2wOl6w9gjca7wOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DEIZ0r8JtphczV1I_ZTSshuATsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:b9:ba:1e:d5:91:25:f8:12:f3:64:a6:3e:6e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4219d2bf09b6985ccd5d48fd94d2b21b804ec6
Validity
Not Before: Mar 29 12:00:40 2026 GMT
Not After : Mar 30 12:00:40 2026 GMT
Subject: CN=1ce3e9abd4541474c1170bbde688dfed91daf785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:be:7b:58:31:1e:90:80:af:65:c4:b6:7c:6e:
31:4a:e3:72:15:53:17:2b:d0:78:17:fa:67:6f:bd:
95:67:fe:1c:80:ff:d4:66:78:89:4e:70:58:88:91:
cb:8f:6a:e6:f2:de:0d:2e:13:e7:e5:33:ff:c9:12:
e8:1d:cf:79:57:af:64:95:17:b4:48:7b:a4:6a:5a:
1e:3f:55:b0:ca:19:dd:ae:b2:ae:f1:b1:11:c2:f1:
11:cf:03:8c:d0:9c:44:6f:67:74:44:c3:e7:eb:4e:
3f:ad:dc:f3:15:9e:0e:16:1d:a3:49:49:89:68:6b:
82:b2:7d:d5:03:c6:66:c4:0b:17:9a:e9:5a:0b:7a:
61:fe:80:8a:9c:58:d7:f9:3f:35:80:5c:ef:e7:4e:
cb:e1:d6:53:a5:de:99:ef:fb:31:a7:a2:d5:7c:d0:
aa:f5:d9:14:51:15:b5:7f:b6:bf:c7:66:49:41:6d:
89:2c:f0:64:22:da:85:76:c7:7f:c3:96:ab:80:f8:
1e:0d:f9:79:e2:6f:6f:c1:fe:19:7e:6e:9f:17:3b:
a3:22:52:8f:8e:c7:c3:e5:42:1a:02:ef:e3:c1:90:
02:ec:40:a7:9f:dc:09:2e:44:87:5c:5c:9e:8c:31:
f5:b7:9d:52:5d:b9:6e:d4:cd:4e:49:7f:f7:cb:d2:
08:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E3:E9:AB:D4:54:14:74:C1:17:0B:BD:E6:88:DF:ED:91:DA:F7:85
X509v3 Authority Key Identifier:
keyid:0C:42:19:D2:BF:09:B6:98:5C:CD:5D:48:FD:94:D2:B2:1B:80:4E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEIZ0r8JtphczV1I_ZTSshuATsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:be:6b:57:c3:d9:5c:29:1b:81:45:6a:cd:1c:3a:6b:63:af:
df:ec:79:9f:ca:89:05:e1:06:61:ee:66:f6:b4:fc:76:9a:79:
ee:de:03:78:96:a6:bf:9b:43:4f:4a:bd:09:fa:c2:e5:0a:80:
d9:37:4a:ba:94:5e:be:2b:e5:80:00:bb:56:5f:64:19:54:e7:
ce:87:b8:c2:e7:7c:64:24:21:5e:11:65:bd:09:f8:63:40:00:
12:0c:46:86:78:f5:a8:cf:99:5e:e5:97:40:da:15:c6:4f:1e:
48:b7:3e:38:51:4e:ba:6f:bf:a9:34:9d:55:c6:ed:f4:3d:1a:
08:20:c9:ae:6e:6a:a8:71:90:ea:b5:c9:a0:ed:42:7c:7d:29:
76:85:56:81:db:e9:f0:d1:ab:6a:5b:49:34:f3:26:db:e9:e6:
1f:66:de:94:47:06:5b:b8:ef:ec:01:ac:d5:91:b2:73:e8:3b:
01:e7:5c:7f:28:81:31:d9:05:ff:54:56:a5:a2:e6:90:09:05:
8c:f4:67:a2:2d:40:42:05:23:ca:bd:3d:24:31:a8:6c:9c:3c:
76:17:d7:c5:69:11:2d:74:9e:37:a4:83:b5:15:c7:8d:64:77:
ce:ab:a2:ff:63:71:04:39:e8:27:ae:35:96:da:69:f9:7e:3c:
9d:a6:20:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:28 2026 by rpki-client