Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
File: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft (raw, json)
Hash identifier: kzvquNCjLGMyUcmA9nozfPB1WcVa5qo2cFlDi0hgn/E=
Subject key identifier: C4:A1:F1:84:58:49:B7:5C:F8:C5:F8:37:E9:F1:91:16:AF:49:8E:E8
Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Certificate issuer: /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Certificate serial: 019D37C07F29817A5BF3E82052E4BA9A04FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
Manifest number: 1125
Signing time: Sun 29 Mar 2026 04:00:55 +0000
Manifest this update: Sun 29 Mar 2026 04:00:55 +0000
Manifest next update: Mon 30 Mar 2026 04:00:55 +0000
Files and hashes: 1: DXKA0kXE0N5ZtPOR2Oy4LAcB_4A.roa (hash: Sj3LYG5kwveQsf1vohBBwmgJI5eBDcD/U3wifQsq2hI=)
2: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl (hash: 4AQUI7jKywS92Y1Goftx+q2AJe/zRopTTEF9KQ7isKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:7f:29:81:7a:5b:f3:e8:20:52:e4:ba:9a:04:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Validity
Not Before: Mar 29 04:00:55 2026 GMT
Not After : Mar 30 04:00:55 2026 GMT
Subject: CN=c4a1f1845849b75cf8c5f837e9f19116af498ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5f:25:b3:2a:9d:c4:18:31:e9:99:f6:62:94:
73:9f:79:91:96:83:5e:12:f0:e4:38:e6:cd:30:7e:
c1:9a:aa:3e:98:65:5f:5f:b4:b2:38:a5:c7:50:f4:
8c:87:77:be:a0:fc:8a:e6:bc:3c:e7:57:97:01:99:
6b:28:51:65:8b:6c:a4:15:ec:db:38:34:e5:8b:74:
63:0f:d1:14:6d:1e:16:cb:a5:87:d5:c8:3b:2c:c2:
22:2f:db:27:dd:cc:0c:b3:67:df:cc:84:34:f3:5c:
4b:58:9e:ef:25:86:3e:15:ca:db:4e:0f:5a:49:15:
ad:3b:db:fe:1e:45:31:ec:84:28:9e:44:7a:f8:9d:
3d:66:d0:66:a1:c1:5c:1c:e1:d1:56:68:ec:65:f1:
70:53:88:56:6f:38:e9:48:18:88:a3:74:5b:c9:1f:
f0:eb:76:24:e9:9c:76:32:2d:33:82:2e:9f:5b:35:
c3:e1:f4:bf:d0:49:a8:f4:35:ae:6e:3d:4e:b7:c2:
29:07:57:6a:0f:c8:5f:ec:cf:9b:f5:d1:52:80:9e:
a6:df:01:d2:f1:c5:40:98:ba:f3:9d:de:58:91:82:
62:e9:e6:1e:db:53:f5:fe:b3:c8:a0:74:20:89:41:
6b:97:b9:46:01:e8:54:8b:37:fa:c9:8e:37:a7:dd:
68:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A1:F1:84:58:49:B7:5C:F8:C5:F8:37:E9:F1:91:16:AF:49:8E:E8
X509v3 Authority Key Identifier:
keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:33:bc:d4:76:14:27:dc:dc:ee:a3:2d:0a:47:e7:bf:fc:f3:
e5:c4:f9:eb:56:c6:82:3e:15:52:f6:6f:0c:a8:75:57:2a:cb:
65:78:dc:03:bd:06:6e:98:00:2e:38:ec:7d:e6:40:1f:5a:71:
7b:44:92:77:f7:60:21:a1:3d:9f:15:7a:6e:c0:2b:8b:9a:fd:
e9:1a:6b:68:5e:85:93:d4:81:7e:e4:fb:36:65:50:07:2c:3c:
e3:70:c4:cb:2a:e1:48:61:ef:b5:fe:74:16:c2:7d:d4:a4:52:
bd:d7:d9:b0:52:49:fe:b5:1a:ab:49:7d:13:91:b1:8f:f5:62:
d1:56:59:cc:46:ab:06:e9:9f:d5:78:75:d0:bc:36:69:e5:a3:
31:61:5d:ab:e9:cf:54:fe:ed:80:f9:a8:13:d2:12:28:75:4b:
50:ee:2a:7c:4a:5d:77:38:71:d3:16:79:6c:a8:72:26:ea:5e:
de:35:64:2b:48:fc:a1:51:02:59:2b:dc:e7:17:bc:36:07:27:
8a:e7:4b:f7:83:9e:f2:a1:d1:63:f8:6f:3d:85:15:c8:cc:be:
0c:9d:76:34:a8:30:1e:a8:9d:41:84:d7:08:f4:4b:61:a1:ee:
2d:52:f9:ea:5f:e7:17:7a:aa:18:12:ee:93:61:2f:69:a0:28:
6d:be:d0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:50:58 2026 by rpki-client