Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
File: z173qHDUsUjrHU9P5mbtUFSt6uw.mft (raw, json)
Hash identifier: /GNDR2n4rD2PVieCmjLPiTbuXZkX52Y2jDf2t5uDA2k=
Subject key identifier: DA:F2:4E:B3:5F:01:45:A5:53:49:62:B9:C6:00:F5:55:1E:7D:8F:0B
Authority key identifier: CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC
Certificate issuer: /CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
Certificate serial: 019D12340C8CA036DFA0146C8EB456560E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
Manifest number: 0FF2
Signing time: Sat 21 Mar 2026 21:01:34 +0000
Manifest this update: Sat 21 Mar 2026 21:01:34 +0000
Manifest next update: Sun 22 Mar 2026 21:01:34 +0000
Files and hashes: 1: WcEXb1FwWuq7CmZIR_j833VQVLg.roa (hash: YwtVclxxnke6RUqR5TUDz5Eu+w+6DwiJjWOIUuWJONU=)
2: bfREzEwR-EXPjAe3wBGoI04LV-k.roa (hash: 769fYTMFcVF5MUU/DGKAsF33sj2AY85ZIEX4Env7vD8=)
3: z173qHDUsUjrHU9P5mbtUFSt6uw.crl (hash: BjE3PxASP8i+01VMBFlqxHRiCLRX3I8x7PUDJO92A+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 21:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:12:34:0c:8c:a0:36:df:a0:14:6c:8e:b4:56:56:0e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
Validity
Not Before: Mar 21 21:01:34 2026 GMT
Not After : Mar 22 21:01:34 2026 GMT
Subject: CN=daf24eb35f0145a5534962b9c600f5551e7d8f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:25:c2:38:b1:f8:63:be:a1:b7:3d:d4:ed:7a:
92:36:93:5d:7d:66:db:58:5b:a7:f4:b4:26:fa:04:
81:a7:3d:31:72:42:22:d6:35:96:d2:8d:8d:68:5c:
af:ed:77:89:1f:fa:06:8a:1d:7b:6f:82:c2:aa:89:
8e:36:bb:93:64:24:2d:15:c9:95:e8:fd:91:1c:8a:
37:aa:1f:8d:eb:92:14:03:26:3c:19:1d:0a:1f:20:
dc:37:3a:96:b5:ea:ff:48:30:c3:1b:42:38:57:95:
3f:73:0e:a7:0a:4d:b4:29:f4:44:9f:ed:81:35:28:
f1:15:51:41:5b:7c:86:b1:7c:2a:8c:ce:38:4f:e1:
33:4a:07:1e:ab:90:ef:11:7f:20:24:fc:85:c9:58:
23:00:8c:0b:90:94:74:b2:8f:9b:ee:a1:eb:33:00:
0b:e0:29:0f:e9:7e:69:27:ab:b2:00:24:80:40:35:
64:55:d2:f3:76:15:9e:4e:ff:e7:3a:08:a5:f0:d9:
76:7c:5b:3f:22:95:24:30:45:fd:16:70:78:3f:20:
de:0d:0a:72:93:ae:69:18:41:d4:73:ea:dc:33:c0:
9a:ae:e0:82:7a:8a:ef:cd:96:2b:6f:9e:d2:6c:8f:
f4:27:8c:4a:b1:be:49:b7:26:07:39:6f:91:fb:dd:
ae:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F2:4E:B3:5F:01:45:A5:53:49:62:B9:C6:00:F5:55:1E:7D:8F:0B
X509v3 Authority Key Identifier:
keyid:CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:79:e3:05:31:8e:2f:1f:a7:c9:97:80:30:ee:6b:c7:1e:1b:
99:f5:a3:80:69:30:77:56:6d:b5:8c:36:89:b2:3f:1a:96:fb:
ef:29:c8:be:1b:23:79:fe:7f:7f:ad:56:67:93:d4:14:d1:c6:
e4:b9:20:6d:90:9b:aa:d5:5a:f0:14:3a:44:8f:ef:96:12:4d:
99:12:3f:e4:21:82:d7:59:b9:0d:01:ba:95:0e:f3:87:09:79:
01:82:72:bf:5d:b7:2c:14:b3:f6:b5:a4:e1:82:2f:c2:f0:66:
c6:98:43:e5:08:26:24:76:96:f1:e6:40:ae:23:56:a6:2c:a4:
0b:d8:2a:74:95:23:b4:6e:e8:bc:11:7b:64:a5:51:62:7e:99:
e7:01:3a:27:9d:30:56:21:bc:9b:cd:d1:73:2d:17:a3:88:d5:
f3:f5:3e:ce:a9:b6:f7:c1:5f:e9:87:a6:d6:08:99:a3:c0:69:
d9:37:43:a5:f1:cb:6e:bb:75:91:e2:ff:4b:73:56:8d:83:c9:
14:47:dc:de:3e:c5:7a:42:6f:c9:06:35:be:16:b8:d0:d7:8b:
1c:b0:35:23:27:ae:3c:3e:66:61:4d:2f:25:6b:58:dd:d2:53:
f1:aa:e9:34:63:3a:35:98:11:7b:e9:93:cc:af:69:27:43:44:
f3:5b:27:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 05:52:55 2026 by rpki-client