Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
File: c_JZnZXskZMn_2h0LWxJwqalSIg.mft (raw, json)
Hash identifier: q/2LVGr1DVX6i6VVjgxaTrGnF2bt0Hj25lGNJm7s9GQ=
Subject key identifier: 03:66:58:78:DD:BC:CD:EB:F4:7F:CF:82:6B:B4:5F:7E:84:55:0E:6E
Authority key identifier: 73:F2:59:9D:95:EC:91:93:27:FF:68:74:2D:6C:49:C2:A6:A5:48:88
Certificate issuer: /CN=73f2599d95ec919327ff68742d6c49c2a6a54888
Certificate serial: 019D3865C2B276A7E5C9FA03FB87473CC4F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 07:01:26 +0000
Manifest this update: Sun 29 Mar 2026 07:01:26 +0000
Manifest next update: Mon 30 Mar 2026 07:01:26 +0000
Files and hashes: 1: c_JZnZXskZMn_2h0LWxJwqalSIg.crl (hash: Gkgd15L9KXKlujwnk4nH0j8CrQyS8Vvj6HEEF2hk66w=)
2: lWnR0ekIz7F2D525B-XOkrpQ0YQ.roa (hash: TEzMU5Zsy6F06BlZcKBW0crSHPdy9jGsr3EscjQ6Tys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c2:b2:76:a7:e5:c9:fa:03:fb:87:47:3c:c4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f2599d95ec919327ff68742d6c49c2a6a54888
Validity
Not Before: Mar 29 07:01:26 2026 GMT
Not After : Mar 30 07:01:26 2026 GMT
Subject: CN=03665878ddbccdebf47fcf826bb45f7e84550e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:25:24:4b:ea:6f:1c:66:c9:70:44:3e:cf:f9:
93:61:d3:e7:ca:de:68:b8:42:40:20:42:73:de:25:
a8:02:92:b7:a3:64:eb:36:e8:ff:f4:67:61:56:31:
de:81:ae:7d:7e:76:ff:99:28:bc:02:ca:3d:77:ed:
5d:29:b1:ce:f7:62:35:78:33:ec:9f:0b:d9:81:56:
a9:5a:7c:b4:c7:95:70:25:40:a7:dc:37:1b:19:43:
30:f4:49:7a:27:1d:3d:5f:d6:3d:ce:40:2b:c7:df:
43:4e:36:20:06:ba:af:92:e7:6d:11:6d:8c:3e:47:
0a:ac:7c:23:69:ee:f7:7b:67:97:ae:d1:4f:82:51:
a1:07:7a:c7:3a:94:de:6b:0e:a2:a7:a9:72:02:51:
55:7b:a0:08:ee:48:9e:f4:b9:c0:d5:5c:5a:fb:bf:
d1:d7:07:84:8c:ad:5d:44:ac:fa:c8:3a:3f:c8:c5:
69:df:4c:72:45:79:3d:da:71:87:b8:64:ae:f3:4d:
f7:f6:98:0a:f0:a7:be:ad:ad:cb:d8:31:9b:32:37:
f8:3e:e3:35:8a:6b:aa:f7:92:43:b1:d0:96:e3:76:
02:18:5d:80:73:7f:18:02:87:91:c2:6e:57:07:a0:
37:8d:92:3b:40:1b:92:45:76:13:b6:9d:f7:4f:61:
7f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:66:58:78:DD:BC:CD:EB:F4:7F:CF:82:6B:B4:5F:7E:84:55:0E:6E
X509v3 Authority Key Identifier:
keyid:73:F2:59:9D:95:EC:91:93:27:FF:68:74:2D:6C:49:C2:A6:A5:48:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ac:67:ce:97:ce:9f:8d:af:ef:5c:18:09:87:05:a4:ef:25:
6e:e2:03:ac:03:97:79:09:2e:9f:78:1f:ea:89:10:f6:3e:d3:
81:07:f7:a4:0f:85:f4:e5:8f:46:c9:b6:6e:3d:e1:45:2b:3b:
e2:30:b7:8c:c7:b2:02:78:91:d9:32:81:a7:8b:37:bb:61:99:
54:e4:f8:aa:f8:29:40:e8:a6:44:22:f2:2d:c6:9e:a0:f8:a7:
1a:f1:a4:32:62:c9:fb:97:26:6a:35:7b:c7:38:14:b7:5b:76:
d1:e1:02:6e:3a:62:37:4c:25:f7:76:51:94:d1:4b:6c:00:5e:
a4:c0:c6:f5:01:63:88:76:22:56:a3:f7:9b:a9:c7:58:9d:52:
22:94:9e:c2:c1:d5:39:e6:87:e8:ea:3e:a6:76:1e:ae:37:9c:
4b:6b:c7:97:d2:cd:d6:fc:0c:b8:f1:f2:a6:dc:83:6b:e5:0a:
f7:d7:3c:2f:e5:ce:8c:29:a1:fb:5f:bd:61:03:0b:5a:ea:8e:
36:4e:05:59:0f:92:67:90:5b:e5:c6:08:c2:c7:a9:b8:03:47:
5c:09:fd:51:a8:df:96:bb:87:fc:11:ce:a8:b6:7d:cc:75:87:
af:8a:8f:6c:d5:fd:bf:bf:22:3e:d4:d6:5e:86:91:b1:f9:d1:
8f:e2:b0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:30 2026 by rpki-client