Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
File: rrwz1bpYUjTMzvilethsoer8SqI.mft (raw, json)
Hash identifier: eCm70qPYD27NcTqZKV3WLQfMJDJee0NuxrOULylbO+I=
Subject key identifier: D6:AB:F1:4F:0A:37:F3:D5:99:CF:37:CA:95:84:31:4F:6C:AF:2C:66
Authority key identifier: AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
Certificate issuer: /CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Certificate serial: 019D3865B003E29E1C3E28328F221A60B4BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
Manifest number: 083B
Signing time: Sun 29 Mar 2026 07:01:21 +0000
Manifest this update: Sun 29 Mar 2026 07:01:21 +0000
Manifest next update: Mon 30 Mar 2026 07:01:21 +0000
Files and hashes: 1: E907k5QYJtLiwC_jK3iFvXI9RdI.roa (hash: snQqBx0r+DlkIlsrsM46ddsGDow3XlKtABIHB2rzqdc=)
2: rrwz1bpYUjTMzvilethsoer8SqI.crl (hash: echvyBGCyVo7aDv4b+p+NqvlL2492F6ctqX2SNRTKrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:b0:03:e2:9e:1c:3e:28:32:8f:22:1a:60:b4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Validity
Not Before: Mar 29 07:01:21 2026 GMT
Not After : Mar 30 07:01:21 2026 GMT
Subject: CN=d6abf14f0a37f3d599cf37ca9584314f6caf2c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d6:b3:43:75:3c:b7:cb:9e:78:c8:83:12:9e:
dc:68:3f:47:72:38:ad:fe:e2:53:28:d6:cb:ae:f9:
e7:0f:23:b8:6f:5c:8a:1a:ba:d7:f5:58:0b:34:60:
ec:79:c6:1a:45:26:d2:aa:a1:13:bd:77:80:a0:f6:
eb:61:04:db:15:9d:3e:83:83:38:e5:2d:34:75:e2:
e6:06:12:c9:6a:3a:d3:c0:40:ff:13:5c:9e:6a:b1:
3c:ac:e2:54:68:5e:f2:86:52:74:42:6e:4e:93:39:
48:6e:a0:bb:c4:d6:69:c4:20:78:33:02:11:1d:d7:
7a:a1:eb:27:2a:79:19:ab:a9:3e:44:6b:82:46:cd:
28:06:83:8f:a1:e9:11:5c:c2:f8:9d:ac:ea:57:d2:
dc:25:ba:c3:c9:2b:3f:12:6a:6d:b5:88:e0:d0:d7:
75:c8:64:bd:ca:61:73:29:71:44:7b:6f:03:b9:a9:
72:19:c6:25:5d:a5:df:9d:74:d0:c0:e0:c2:21:ea:
43:4e:de:35:c3:68:4c:af:83:1e:c7:f4:52:8d:0b:
3c:0e:f3:a3:73:37:36:67:3c:72:e9:34:a4:18:46:
aa:8a:0b:89:7f:1f:3c:a9:35:72:5e:ce:0d:0e:52:
3b:26:1a:bb:97:7b:aa:ac:ae:36:41:84:b5:7a:e9:
12:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AB:F1:4F:0A:37:F3:D5:99:CF:37:CA:95:84:31:4F:6C:AF:2C:66
X509v3 Authority Key Identifier:
keyid:AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c7:75:14:74:e8:19:fa:eb:1a:c3:18:c6:2d:a9:a3:1c:ac:
7d:ce:51:cc:29:df:7f:15:78:18:99:9a:bc:43:64:30:55:2d:
29:c4:b1:7e:53:1b:dd:88:2e:14:d0:09:5b:5f:ba:75:14:e2:
2e:f3:6e:0a:0a:a4:02:22:6a:6b:6b:65:49:82:14:3b:23:5e:
85:fd:44:79:a3:25:e4:7c:f5:f8:7f:31:a6:8b:75:45:88:48:
e9:1a:5d:92:95:ff:98:3a:f3:72:fa:ae:a7:9c:52:de:8b:9e:
08:e1:71:7b:36:61:b1:51:ca:e8:fa:f2:98:ec:6b:0f:f0:ab:
60:76:cc:84:3a:93:3b:ae:5b:fc:18:e1:cf:79:92:f7:ee:23:
a6:dd:70:07:35:47:2c:87:ae:08:80:42:1c:7f:63:db:7b:8d:
80:e2:b6:50:4f:f7:5a:1b:af:b8:bc:7e:ec:13:af:07:fe:92:
6d:09:68:88:0e:1e:a7:c8:63:03:e5:4b:30:84:10:b3:4d:2d:
0b:06:9d:94:f1:fc:42:49:9b:6e:fa:70:39:3b:06:89:a7:1a:
7f:be:36:41:b5:c5:c8:ab:f9:33:19:97:bf:84:16:56:c2:4e:
ee:3f:47:65:11:ec:56:ee:84:cb:ef:75:0c:04:49:3f:9d:22:
42:54:00:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:27 2026 by rpki-client