Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft
File: z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft (raw, json)
Hash identifier: T3E1heSjuSFSP9CeCavWn1kfA3BDJumrrTrYUyj4jyA=
Subject key identifier: 09:1F:6E:75:9D:6D:EF:25:AC:10:79:B7:B1:CC:D3:A4:F6:3B:7C:62
Authority key identifier: CF:E4:69:4E:C2:4E:A7:15:DC:A2:D2:7A:32:1C:04:BD:0B:0C:90:BE
Certificate issuer: /CN=cfe4694ec24ea715dca2d27a321c04bd0b0c90be
Certificate serial: 019D3977B074D228F0E3A697D713B82023CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-RpTsJOpxXcotJ6MhwEvQsMkL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft
Manifest number: 0255
Signing time: Sun 29 Mar 2026 12:00:38 +0000
Manifest this update: Sun 29 Mar 2026 12:00:38 +0000
Manifest next update: Mon 30 Mar 2026 12:00:38 +0000
Files and hashes: 1: JkYAYVNwCur5J8bwJ80jkfME47w.roa (hash: CbSKEg/vIOH/qxG77B9ev+0u/ThhZsLHdvEQfupCLQo=)
2: qhCkwBj6GnED90E3xbK34LcjKis.roa (hash: sb4gZUUWKHHhpKTxH1X0qzK99oh2HCmziKT/wMaI3QE=)
3: z-RpTsJOpxXcotJ6MhwEvQsMkL4.crl (hash: /J4e+Jy8umsn0WA91L+E8G7nLqB8dkJfr36WbjbWiIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-RpTsJOpxXcotJ6MhwEvQsMkL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:b0:74:d2:28:f0:e3:a6:97:d7:13:b8:20:23:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfe4694ec24ea715dca2d27a321c04bd0b0c90be
Validity
Not Before: Mar 29 12:00:38 2026 GMT
Not After : Mar 30 12:00:38 2026 GMT
Subject: CN=091f6e759d6def25ac1079b7b1ccd3a4f63b7c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:10:c6:67:2f:2b:ee:fd:55:19:64:a5:e3:
8a:02:86:67:1a:3f:c1:fd:98:94:2b:62:de:33:35:
fd:21:bf:a5:ab:40:17:cb:b1:a8:bd:ec:17:10:55:
7b:b6:ef:3e:ce:f8:b3:ab:33:e6:2b:45:a7:4e:97:
74:5c:c0:1d:ab:56:0f:5f:e9:78:e1:77:bb:cd:d5:
30:09:f0:47:59:1a:3b:53:4b:a2:a9:cf:aa:b5:bb:
f8:ac:4c:b8:0a:15:fe:47:d5:ac:7a:ce:fd:3a:73:
ff:7a:e5:01:18:00:2d:0d:ca:eb:9c:b7:32:d9:11:
30:55:ed:de:5a:67:0e:c6:09:a8:d4:b0:4b:e6:8f:
12:c1:cf:fb:bc:65:8e:92:30:f4:5c:56:c4:08:b3:
74:f2:90:a9:f8:35:f3:7f:b4:eb:ff:56:45:d7:d2:
d6:a5:79:59:64:89:60:fa:f3:ea:4e:aa:55:71:3d:
5f:45:a1:26:10:0e:99:8f:cc:c1:08:97:9e:35:32:
2f:42:04:cb:16:1c:22:98:b6:27:16:73:2c:84:52:
4a:14:88:74:1a:13:ee:80:94:49:0a:57:14:4c:02:
fa:9e:71:81:a1:1a:9c:f0:7a:78:dc:c2:88:85:8a:
10:2e:10:52:3c:ed:90:71:27:fc:e7:a0:c7:7b:5b:
d0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1F:6E:75:9D:6D:EF:25:AC:10:79:B7:B1:CC:D3:A4:F6:3B:7C:62
X509v3 Authority Key Identifier:
keyid:CF:E4:69:4E:C2:4E:A7:15:DC:A2:D2:7A:32:1C:04:BD:0B:0C:90:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-RpTsJOpxXcotJ6MhwEvQsMkL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:42:24:05:af:01:15:e8:5f:e7:9f:3d:f6:62:93:35:33:67:
a6:cb:86:c0:79:3d:2c:89:a1:19:77:ce:e4:6b:b9:f2:e2:b3:
c5:e9:68:85:e6:fc:ae:37:c1:11:59:93:a5:e4:38:d0:1c:ee:
22:10:95:38:9d:9b:10:18:9f:2e:1c:59:b3:e0:be:ff:45:db:
f1:54:70:27:2d:21:41:b3:15:5f:71:f6:40:2a:60:f7:42:b0:
af:f9:19:ca:a5:28:7e:a4:78:a7:5c:68:7d:fe:e3:df:65:39:
8e:1c:40:68:0f:92:03:a2:b7:16:80:58:59:63:0b:7a:bf:9a:
f3:3c:ec:ed:2a:30:ba:02:0c:20:dc:46:dd:7c:7d:ce:50:36:
ca:d5:0b:7b:f3:71:0d:24:6a:24:8c:cf:25:2b:2e:a9:82:de:
f4:61:df:f3:b6:a4:c0:71:a9:5b:49:15:90:5b:89:7b:1e:2e:
eb:b5:c3:28:19:7a:45:3f:ef:f1:50:fd:a0:ce:0a:e8:5b:21:
42:4f:e6:9b:f8:d6:e0:6a:1f:cb:43:4e:53:8e:27:52:f4:ae:
4e:2b:46:b1:fb:a5:ab:04:da:ed:ee:59:59:28:47:d1:38:82:
68:e7:c6:b5:d9:8a:d9:bf:9c:5e:4f:46:c7:09:53:00:83:e7:
25:bb:f5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:09:26 2026 by rpki-client