Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
File: RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft (raw, json)
Hash identifier: FKcPOtyjoznhPWwzeLFWv+PHHPzH2HbY7+l9LqT3wY4=
Subject key identifier: 36:5A:F6:48:A9:B1:8F:45:5B:C8:EA:0E:37:C0:0A:20:77:44:8D:0F
Authority key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
Certificate issuer: /CN=473469a966f4df3cf28171d87c74780fc472f979
Certificate serial: 019D37890180C7A8F101E888EAFE8E3E99DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
Manifest number: 0B97
Signing time: Sun 29 Mar 2026 03:00:18 +0000
Manifest this update: Sun 29 Mar 2026 03:00:18 +0000
Manifest next update: Mon 30 Mar 2026 03:00:18 +0000
Files and hashes: 1: DNxT4KfUnSN5D5Pb2TXRMl9CQRk.roa (hash: U4JVcc+2nFb5M82ma1QdMgZr3eKXlGDJ6qSOPbU6n2I=)
2: RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl (hash: 2Zx6LHXqceaB0JCdIYFuKef9XadAZsu7dajtUvCmPIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:01:80:c7:a8:f1:01:e8:88:ea:fe:8e:3e:99:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473469a966f4df3cf28171d87c74780fc472f979
Validity
Not Before: Mar 29 03:00:18 2026 GMT
Not After : Mar 30 03:00:18 2026 GMT
Subject: CN=365af648a9b18f455bc8ea0e37c00a2077448d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:68:d7:cb:01:17:4f:5b:30:45:d5:ed:7e:c2:
e6:1a:4c:89:3d:3f:87:26:6f:dc:40:18:45:51:1e:
b1:1a:89:22:88:25:a5:4b:0f:f0:4f:0a:fd:83:e2:
1c:ec:d3:12:fd:30:7f:34:af:17:de:e9:4a:f4:b3:
4c:ca:18:5a:90:2a:84:eb:6d:ac:d5:32:63:74:89:
1f:07:af:51:c3:3b:9b:00:c1:bc:d1:2f:3c:35:f0:
6c:65:06:cb:c9:f1:e7:1b:ff:fb:b3:ee:ff:35:a3:
98:7c:45:79:f8:8c:1e:08:b3:24:93:65:97:03:7b:
c2:46:f6:1d:04:dc:6a:d9:29:a9:13:d0:c7:05:1a:
8a:0e:bb:3f:76:19:96:93:4f:f0:7b:87:7e:e6:3b:
78:42:15:be:91:02:80:2c:7f:06:30:b4:7a:6d:3b:
11:68:54:82:d6:8e:e7:31:75:2a:af:3a:da:ce:f2:
a3:3c:43:69:bf:6a:44:ec:9b:7b:3f:eb:47:f0:88:
1f:49:16:33:c2:95:cb:1c:28:ab:53:6b:1f:62:8e:
95:92:2d:bc:25:a1:fe:bb:ad:e3:79:06:0c:11:85:
19:2b:63:a2:6b:5d:04:56:df:cc:58:a6:ae:72:06:
20:d2:e5:6d:53:5c:b3:c5:a5:28:65:68:c4:1c:de:
74:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5A:F6:48:A9:B1:8F:45:5B:C8:EA:0E:37:C0:0A:20:77:44:8D:0F
X509v3 Authority Key Identifier:
keyid:47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:dd:61:93:24:f1:86:23:a2:3e:61:a5:f6:73:d8:c8:c3:6f:
22:3d:db:be:64:3a:88:7f:a5:c6:bd:4a:37:fe:66:5e:27:d2:
a5:b9:94:e2:6c:f2:5d:43:2e:40:cf:83:14:40:91:4c:10:6c:
e2:95:07:7e:5f:c3:16:72:f8:c9:dc:42:69:bf:6a:f2:4f:c8:
0f:e6:33:e5:d7:5e:1b:8d:00:75:ee:b6:7d:97:c9:26:43:b6:
9f:2d:72:09:e7:6f:df:7a:21:4b:32:6c:1f:a9:d6:0e:0d:c0:
4c:9a:35:05:6a:ec:ca:e2:02:76:b4:ea:56:77:ab:49:5d:fd:
0b:68:78:ce:c1:f9:61:05:af:8b:1b:a7:6a:1f:71:53:12:9c:
16:c5:5d:ac:73:fe:01:e8:04:7a:61:c5:c2:0b:84:a1:3a:b7:
f4:f6:a1:8c:49:e2:d0:ec:51:1b:72:89:70:48:37:d3:eb:d8:
76:6d:dc:57:29:05:00:d1:0d:15:9e:d7:89:1e:22:6a:7c:9b:
1b:e1:e4:a6:a7:56:1a:29:4e:d0:ab:14:6a:5f:6b:07:f9:b2:
73:84:16:5b:d9:7d:06:6d:74:09:dc:94:d5:47:19:df:1f:85:
f7:1c:29:ad:68:f0:45:59:f6:1c:cd:f6:19:bc:a1:e3:a1:8b:
77:1e:c5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:25 2026 by rpki-client