Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
File: dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft (raw, json)
Hash identifier: 8X2uOehUgrYDy6w9XFldOopZU2/Bw0w16vN0oHbN70w=
Subject key identifier: 2A:1C:55:20:4F:A4:00:C2:49:0E:B9:E1:EA:83:EF:86:29:2D:A7:20
Authority key identifier: 75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
Certificate issuer: /CN=759d27ce072ca336d3afaab8879f94ec63455669
Certificate serial: 019D375226AEB7C02CDE1D3848AE3E864649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
Manifest number: 0950
Signing time: Sun 29 Mar 2026 02:00:23 +0000
Manifest this update: Sun 29 Mar 2026 02:00:23 +0000
Manifest next update: Mon 30 Mar 2026 02:00:23 +0000
Files and hashes: 1: dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl (hash: Tlz40593PHvhZI6p7r4KypyFVIO3lzlDIhDFmaGNAjI=)
2: fSa9ZsWpt6cpzETcA7PiodhwAl0.roa (hash: JZ8+GnG0s73YtbrymyZrp39I9Tjd+XU3bo06GAVoOFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:26:ae:b7:c0:2c:de:1d:38:48:ae:3e:86:46:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d27ce072ca336d3afaab8879f94ec63455669
Validity
Not Before: Mar 29 02:00:23 2026 GMT
Not After : Mar 30 02:00:23 2026 GMT
Subject: CN=2a1c55204fa400c2490eb9e1ea83ef86292da720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:25:b6:9c:b5:2b:fd:cc:67:4a:00:69:10:
2b:36:6d:82:68:0d:9b:9a:3f:3c:f0:c8:b9:ed:bd:
d9:20:ff:5b:5e:83:c6:c1:34:75:c6:86:c7:f4:43:
9f:b9:6a:ce:e7:e7:58:e5:2d:89:44:c5:0f:15:99:
88:67:a8:e7:fa:65:e4:71:fc:29:e2:68:c3:64:13:
5a:50:c4:03:c4:36:2d:e5:f5:60:86:e4:54:2e:b2:
ec:ca:f0:38:01:b5:6f:bf:c8:0b:02:85:b8:61:b4:
ae:28:55:e4:a7:61:d8:af:df:43:fe:64:46:11:75:
89:4d:c4:50:42:0a:57:c7:df:3b:02:d1:7b:65:12:
6e:fd:82:9c:59:91:4d:8d:bc:80:87:f0:ea:16:41:
c0:76:e3:7b:3f:e1:66:a0:bb:1b:4b:0a:82:ab:1a:
f1:e0:15:8c:f9:0a:36:dc:59:72:ae:c6:a9:85:66:
2c:ec:3b:3e:be:06:09:d8:f5:71:89:04:cf:cc:50:
85:d5:55:ff:fa:e5:9b:f0:c1:77:44:c9:a2:24:84:
a6:87:59:83:4d:41:c6:46:9f:28:38:4e:43:fd:5a:
44:c6:a2:a8:f7:d5:51:8e:c1:28:0c:fa:d4:79:5f:
38:a0:68:f1:fd:6e:4e:4e:59:5c:95:54:96:24:45:
13:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1C:55:20:4F:A4:00:C2:49:0E:B9:E1:EA:83:EF:86:29:2D:A7:20
X509v3 Authority Key Identifier:
keyid:75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f4:c2:7b:14:4c:4e:98:28:36:ed:b8:b0:96:29:8f:15:98:
a1:84:1b:c7:92:a2:39:2a:9c:3d:79:1c:a8:8d:44:70:a7:bf:
ab:a9:11:11:0d:92:76:55:bf:88:43:1a:30:25:80:16:d2:c4:
ba:53:43:ab:62:b3:2d:15:0c:e0:7d:72:35:f9:12:eb:31:2a:
a1:a5:2d:74:a9:f0:b1:c0:89:fb:df:4d:9f:9e:10:bc:4d:b1:
69:b6:a7:af:8d:04:fb:56:5b:74:4e:2b:c3:20:4e:4d:21:6a:
d6:a9:c1:33:7c:d7:ca:5e:ff:f7:81:4b:03:72:4e:70:ff:98:
fa:d1:00:98:0d:71:50:22:30:a1:53:1a:4e:43:78:c8:7e:4b:
5a:1d:de:98:57:e0:bb:9e:b7:c1:e5:ac:17:a5:86:76:98:69:
91:35:39:89:15:fa:37:52:25:7c:1e:e7:55:f1:2c:1e:e8:19:
6f:02:71:50:1b:6e:40:18:fe:ec:e1:78:87:ae:b9:0d:e5:9c:
e4:5e:d4:02:89:d1:02:98:d4:68:2c:a2:5e:e7:6a:2f:b3:3e:
69:45:9a:2d:f0:d4:fc:07:f1:c7:45:4a:c7:03:05:5d:25:88:
9c:bd:c5:00:51:2f:15:b4:5a:eb:91:37:8a:37:65:4f:f1:6a:
64:11:d1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:58 2026 by rpki-client