Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
File: RzC917vMVv6TebEYysfh-SBSp64.mft (raw, json)
Hash identifier: rosam3r3vdDg/yX6IpFdq7k6PzkIcaUuN7bO3bR/4bM=
Subject key identifier: 26:F2:19:FA:A8:C6:03:FF:A3:3E:15:E6:13:C5:2E:20:B7:CB:E5:D6
Authority key identifier: 47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE
Certificate issuer: /CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae
Certificate serial: 019D39E5F440A2159F7B47396B0B987245F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
Manifest number: 064E
Signing time: Sun 29 Mar 2026 14:01:04 +0000
Manifest this update: Sun 29 Mar 2026 14:01:04 +0000
Manifest next update: Mon 30 Mar 2026 14:01:04 +0000
Files and hashes: 1: O2TJIvTx_voT0YHcBveB5ME3HxU.roa (hash: iQiLUq3IFvglKvs6Hy5MwuxHRRp9rkkjwK4qxW0zxvg=)
2: RzC917vMVv6TebEYysfh-SBSp64.crl (hash: StGTIalMwPyHeT8D6cpB7Tx9duH1L6Qg5O9l7xLnKag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:f4:40:a2:15:9f:7b:47:39:6b:0b:98:72:45:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae
Validity
Not Before: Mar 29 14:01:04 2026 GMT
Not After : Mar 30 14:01:04 2026 GMT
Subject: CN=26f219faa8c603ffa33e15e613c52e20b7cbe5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1e:ec:3f:ce:d1:db:5d:9d:8c:fe:04:4f:f8:
c5:0d:5a:18:f6:5b:65:c7:d3:1f:eb:27:74:4f:7c:
17:c5:b0:4e:48:20:b6:4e:2d:1e:11:29:79:e1:03:
ce:b0:3b:1f:90:94:ac:12:5f:cd:ea:71:41:92:6a:
34:df:df:8b:85:68:9d:c9:6e:8a:2c:39:99:f8:fb:
6a:f1:8b:6f:e6:cc:7f:a5:58:c1:cd:38:b4:14:eb:
c1:6b:31:9a:d6:db:ac:c5:53:56:15:a6:44:ad:5b:
c4:0b:43:fa:f5:c8:c2:5f:ae:36:16:aa:cb:90:43:
c0:15:2f:71:2c:7c:2e:82:e8:31:9b:41:e0:57:2a:
e4:03:8c:b9:7f:3c:f9:47:24:4d:20:f2:ae:b3:4c:
ef:5d:1f:84:a7:ca:ff:78:71:8c:10:59:e9:68:9d:
5b:9b:0e:ac:c2:ae:c7:0c:d2:83:46:42:2d:a9:91:
91:3b:84:84:c6:50:61:2c:e7:29:d5:12:8b:e8:9d:
27:68:ce:f1:8f:96:6a:37:e2:db:35:30:3b:80:70:
16:f4:6e:5a:9e:0c:46:4b:fe:09:3c:62:49:0a:4c:
7d:83:c8:9a:56:9c:75:b2:c9:d7:39:0f:f5:94:cc:
ed:a3:fb:f9:d4:f4:1f:01:a6:15:4c:01:1a:a4:64:
22:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F2:19:FA:A8:C6:03:FF:A3:3E:15:E6:13:C5:2E:20:B7:CB:E5:D6
X509v3 Authority Key Identifier:
keyid:47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ae:da:d1:04:75:b7:6d:6c:2d:10:ad:4d:cd:11:ea:4b:ad:
e0:e3:84:85:0e:14:ce:d7:00:55:07:1a:37:99:c6:c3:97:0a:
c6:87:21:c3:64:26:b6:25:1a:20:a7:df:69:3c:b4:4a:ce:6a:
60:3b:36:c2:67:f6:b5:c4:57:35:ca:98:33:bb:a3:eb:bd:41:
0e:05:4f:02:c0:74:eb:52:83:56:5c:26:f5:bd:b8:d8:cb:90:
5a:f5:f2:a1:e8:a2:b1:f6:d7:76:4f:3a:a2:d3:ab:c1:a0:97:
2a:23:3f:71:8d:5a:c6:f4:4b:f6:3e:e1:2e:99:65:0f:04:6d:
49:e7:31:f1:ce:27:35:69:89:f0:03:7a:92:03:a7:03:4e:fe:
8e:7d:13:0b:84:eb:09:2c:22:fc:ef:d4:1f:45:83:b5:d9:e1:
cf:0d:0e:8c:11:2e:60:21:fc:5d:3c:b7:ea:b7:d0:05:8f:eb:
7c:2d:aa:66:5b:3a:83:b2:5b:23:79:c3:36:ce:37:20:b6:e3:
df:c8:17:94:f3:11:32:dd:96:dd:e4:06:7a:0a:12:1f:98:2a:
6d:6f:e8:90:43:c4:92:f2:d5:9e:8e:8b:4a:82:e5:2c:af:5a:
e2:52:d2:d5:81:f8:85:52:eb:bb:6c:03:32:70:0c:26:70:bf:
64:35:aa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:56:03 2026 by rpki-client