Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
File: zESRVYzSSHXbUkJzQQUC_a46Z4I.mft (raw, json)
Hash identifier: Nj2FAh3X+TboboveO+d22aQBH9MxU1XHgl0QW2r5DtU=
Subject key identifier: 55:8A:03:83:98:D3:A1:8E:1C:9E:FD:F8:0F:40:0D:B5:8A:D4:78:2C
Authority key identifier: CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
Certificate issuer: /CN=cc4491558cd24875db524273410502fdae3a6782
Certificate serial: 019CACB46AD4672ED8D7B713B282A9031E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 04:00:30 +0000
Manifest this update: Mon 02 Mar 2026 04:00:30 +0000
Manifest next update: Tue 03 Mar 2026 04:00:30 +0000
Files and hashes: 1: 1FToxn8IaILCIZFR28ymjf3izQw.roa (hash: n66yLkILpzoSdA5/n4UY3B4CIambhY+CnJWm7sQK/vQ=)
2: DC4AzN_0lOxSBQIYOX8yhhq1bkc.roa (hash: hlLBSZz49suArVA71e6KdvynwmbN3saCnQaMyNCoI1M=)
3: zESRVYzSSHXbUkJzQQUC_a46Z4I.crl (hash: 1I0/vaQGKyfOjkjVumcDHYRCHkXE9zkFhrDBzoVkt3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:6a:d4:67:2e:d8:d7:b7:13:b2:82:a9:03:1e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4491558cd24875db524273410502fdae3a6782
Validity
Not Before: Mar 2 04:00:30 2026 GMT
Not After : Mar 3 04:00:30 2026 GMT
Subject: CN=558a038398d3a18e1c9efdf80f400db58ad4782c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:17:e4:b8:9e:18:dc:ce:9b:a7:c4:6d:c2:27:
5b:76:1a:dc:e4:2f:25:8b:0f:75:5d:58:e0:48:95:
fb:08:c9:4b:f7:ca:aa:4b:dc:77:dd:fd:2b:8c:af:
44:45:3c:b6:ee:ee:8a:09:62:38:94:4a:5c:53:bd:
c2:52:fe:ae:2a:31:c5:27:94:be:0d:06:bf:f9:76:
9f:f7:fc:21:5b:c3:de:cf:95:4c:e9:d2:19:6d:07:
90:eb:ec:31:6a:46:bf:6f:3a:36:9e:5d:b6:65:71:
28:2e:16:44:cc:2f:9e:31:7d:3f:5f:14:56:20:e6:
56:cf:51:a8:e8:d8:5d:81:25:bb:92:af:45:c9:2a:
92:70:2a:5f:a6:b1:dc:42:f9:d5:03:dc:48:97:31:
b5:f0:22:07:27:32:40:2d:3f:7f:0d:c4:63:7e:18:
9f:69:51:f2:36:55:a3:2f:2b:7a:97:f3:0c:f5:77:
32:ed:9c:3d:33:1c:44:ca:92:47:13:ab:10:f5:3d:
3c:5d:b3:20:4c:9b:47:f6:ea:e4:11:32:43:3d:7a:
dc:bf:d3:92:31:a2:9e:f1:a6:44:56:a7:27:33:73:
b9:5f:6b:3f:d6:65:21:3d:ae:1c:92:97:b1:79:95:
c0:44:a8:e6:95:e5:da:54:6f:86:4c:19:fb:ec:71:
7f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8A:03:83:98:D3:A1:8E:1C:9E:FD:F8:0F:40:0D:B5:8A:D4:78:2C
X509v3 Authority Key Identifier:
keyid:CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c8:b9:21:6c:e8:07:e3:31:02:2e:bf:e1:36:ba:40:73:04:
d6:c1:cf:cc:72:c1:8a:0f:8d:87:e4:f0:03:b5:58:a0:88:b4:
cf:68:f3:72:fb:36:4b:52:78:22:df:d2:97:06:92:e5:5f:0a:
b3:f8:4f:23:95:ce:03:9a:0d:d6:16:b7:9b:ab:41:ad:10:13:
6c:7b:60:4a:d1:8e:e2:ad:90:43:33:aa:a2:11:49:7a:22:93:
cb:d0:cd:7c:41:dd:88:3e:54:07:e1:da:e3:79:97:97:d8:d8:
12:10:6f:a5:56:45:f5:af:3f:26:87:7c:03:eb:51:5f:ea:45:
6e:cb:da:1e:ff:bf:b8:b4:fe:b6:97:1d:41:9e:05:6a:68:dc:
b7:be:47:66:00:d6:7b:fc:3b:bc:cc:d1:c3:b9:b8:f4:9b:32:
ce:da:ac:31:4c:8e:87:4e:5c:ae:92:76:5d:b5:7d:67:ca:8b:
40:8b:b6:9f:6a:5c:ef:1d:5e:4d:51:68:9e:62:de:61:8b:6f:
95:a5:52:21:b5:27:9a:b3:a9:36:ef:74:0d:ac:08:85:c2:a5:
06:00:0c:e0:64:80:c5:b6:74:2b:d3:57:de:cf:84:9b:54:e6:
d8:4d:a0:4b:8e:98:6e:aa:c6:b9:37:0f:fc:b6:3b:91:22:42:
96:44:7a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:07:45 2026 by rpki-client