Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
File: _z7T1NR7joJfv9B5SC96DCHcke8.mft (raw, json)
Hash identifier: LMnLFn8CUSahpeiS5V6XN7/ID7n1VoDHF6HJ1LInIdg=
Subject key identifier: 54:7D:C0:0A:9E:20:2B:09:C4:0B:5C:E8:67:21:34:89:40:90:46:FE
Authority key identifier: FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
Certificate issuer: /CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Certificate serial: 019D371B1F8ACBF4F743AFF2EE03A0866094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 01:00:17 +0000
Manifest this update: Sun 29 Mar 2026 01:00:17 +0000
Manifest next update: Mon 30 Mar 2026 01:00:17 +0000
Files and hashes: 1: 2fZ1bQhJblUq5fcVHhL0C_-Td54.roa (hash: pAu1H6XJd6QLNwtCItbi85jUBgZSBz8c5zchsEegiak=)
2: _z7T1NR7joJfv9B5SC96DCHcke8.crl (hash: xvC3twAv/JAMX9YHd3XUhIZGyeHkA0rbeI21Grt9a24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:1f:8a:cb:f4:f7:43:af:f2:ee:03:a0:86:60:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Validity
Not Before: Mar 29 01:00:17 2026 GMT
Not After : Mar 30 01:00:17 2026 GMT
Subject: CN=547dc00a9e202b09c40b5ce867213489409046fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:49:e0:eb:d1:60:6a:31:95:48:7e:dd:7f:3e:
68:07:17:01:33:61:ff:e4:2e:28:f1:46:d8:64:15:
8f:07:85:d6:50:fa:88:a0:ea:81:40:90:b9:f5:4f:
03:d7:7e:dd:4c:28:02:41:49:07:c8:01:d8:8a:0b:
0f:03:7b:6c:18:e2:71:05:0a:06:30:5c:e4:23:78:
d1:ef:d6:ab:b1:27:47:6b:0f:45:f4:80:8a:c1:a6:
08:9f:b2:9c:cd:97:4e:b6:13:1f:78:9f:c7:37:a8:
66:70:ff:76:58:2b:cc:74:93:ce:da:6e:04:f9:1d:
2d:88:04:bc:65:eb:c2:d2:79:4a:d4:c0:78:53:ef:
71:5d:78:fe:3c:72:97:5a:a4:26:08:a7:b7:60:2c:
3b:49:8b:41:33:3f:87:e1:98:8c:ba:e8:88:81:f4:
33:fc:c1:f3:94:d8:e8:00:27:d0:7a:fe:95:98:17:
5f:76:4c:c4:18:af:50:a5:f5:8c:03:a6:e0:13:f8:
a7:f2:f0:78:b0:6a:af:cc:0b:85:82:ed:12:27:36:
e4:7d:2b:3c:e3:87:7f:b2:aa:5f:1a:e0:8d:11:99:
9c:fd:13:ba:fa:b4:81:1b:7e:c9:8f:ad:bc:6a:0d:
b8:4f:89:26:7f:d1:4e:55:94:96:f9:90:14:97:c1:
60:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7D:C0:0A:9E:20:2B:09:C4:0B:5C:E8:67:21:34:89:40:90:46:FE
X509v3 Authority Key Identifier:
keyid:FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:be:d4:6b:11:1a:90:6d:df:ac:30:ea:f3:02:0f:e7:2d:9c:
0b:07:21:33:ea:b5:0c:de:63:a4:b4:28:1c:3f:0d:99:f1:ca:
1a:cb:14:1c:6d:2c:05:57:5d:6e:92:d0:b6:25:44:d5:fa:9d:
8c:74:2d:c2:df:bb:32:b8:05:05:76:43:a3:4a:f0:b7:42:b3:
d0:4f:d2:32:ad:7c:1c:54:e7:96:28:88:80:65:d9:c1:95:88:
f0:d5:ed:5f:f2:6e:4a:4c:36:45:42:db:0f:45:d6:3c:36:a4:
ce:f1:72:59:47:5f:a7:0d:c0:f7:3b:08:0a:49:9a:3d:f0:c8:
8b:b0:05:8a:49:0d:f1:78:c7:c2:f4:c3:31:1f:3b:b1:a6:84:
93:63:86:6e:14:be:5c:28:81:6f:af:cd:a9:13:05:42:44:34:
40:49:c3:87:1a:5d:15:b6:51:6d:9f:48:3b:e1:ed:50:c9:da:
48:67:3d:82:5b:7e:e9:41:98:71:d3:30:a9:6c:10:b4:8f:55:
12:cf:04:90:05:ee:3b:d3:8d:40:99:e0:e2:3f:70:29:00:72:
4b:58:4e:5c:1c:71:c7:71:61:92:25:d7:e0:e4:a3:f8:15:73:
1c:27:e8:93:78:34:54:b8:50:48:b8:bf:a1:8d:3f:86:72:f9:
e0:a9:4f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:17 2026 by rpki-client