Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
File: ZUdEPmINY8jk9UpnF4R00fkJr2g.mft (raw, json)
Hash identifier: 3qjpy/uX5KsOM4Rgdwbx672387b1LNk0wedMu8+oyhQ=
Subject key identifier: C1:1C:02:0B:97:FC:60:D1:C5:C6:2A:4C:F2:2C:B6:5E:6E:2E:43:3F
Authority key identifier: 65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68
Certificate issuer: /CN=6547443e620d63c8e4f54a67178474d1f909af68
Certificate serial: 019CAA9022728C51A3A930C7461ACD93CE2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
Manifest number: 08C6
Signing time: Sun 01 Mar 2026 18:01:38 +0000
Manifest this update: Sun 01 Mar 2026 18:01:38 +0000
Manifest next update: Mon 02 Mar 2026 18:01:38 +0000
Files and hashes: 1: ZUdEPmINY8jk9UpnF4R00fkJr2g.crl (hash: vGTu8U+rNAIqcX1NBYeqkvifuLLjQW5R52u8N4etyW8=)
2: h8307773aGTVcHuejCRSQfYZeP4.roa (hash: 2K29Y+KA5ZX1LE8dgEvQhQ3+PK0Gls5txAa/7wvymRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:90:22:72:8c:51:a3:a9:30:c7:46:1a:cd:93:ce:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6547443e620d63c8e4f54a67178474d1f909af68
Validity
Not Before: Mar 1 18:01:38 2026 GMT
Not After : Mar 2 18:01:38 2026 GMT
Subject: CN=c11c020b97fc60d1c5c62a4cf22cb65e6e2e433f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a9:6b:16:78:c7:9e:b2:5a:f5:18:f0:e5:da:
98:fb:63:89:2e:60:8f:d4:9b:e3:c7:40:33:43:3f:
f1:aa:3d:df:38:74:d1:7d:d3:19:3d:51:5b:9c:0b:
40:42:99:4a:61:3f:14:c7:e4:ba:9f:d2:40:82:e7:
8e:78:d2:05:59:29:c9:d8:82:9c:c7:62:a6:6f:5d:
8f:eb:7b:58:13:52:4d:b3:45:fa:b0:50:82:4a:37:
1b:99:d4:55:ae:f1:4c:3f:4c:21:3d:bd:9c:56:de:
5c:3c:43:7a:8e:84:e2:81:99:ef:bb:e4:82:02:b5:
e4:ae:6f:9c:ea:b7:86:d2:be:24:63:5c:26:78:77:
30:a8:ba:27:22:05:f3:57:11:47:b9:2f:d0:5b:43:
03:de:cc:98:f2:77:24:2e:1d:af:c8:62:20:6c:42:
8a:bd:dc:0e:f6:c0:6b:ab:6b:8d:a4:b4:67:b6:69:
c3:05:b7:c6:63:d8:e5:16:a6:23:4c:16:99:28:8b:
4e:67:ee:53:f2:db:b9:a9:65:21:a1:cf:1b:eb:0b:
33:99:e8:ca:c0:3d:f9:62:e2:22:02:75:b7:66:1a:
80:ff:b7:f6:28:fa:8f:ce:f5:55:f8:f0:ca:00:2f:
82:16:d2:fa:d2:c2:0a:ce:53:2c:50:a5:77:cc:54:
c3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1C:02:0B:97:FC:60:D1:C5:C6:2A:4C:F2:2C:B6:5E:6E:2E:43:3F
X509v3 Authority Key Identifier:
keyid:65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:be:c9:a9:33:06:13:71:79:c5:25:34:97:ef:79:15:46:64:
ae:e9:ec:0d:e1:c8:9f:bc:a9:80:db:02:31:8b:cd:5e:7b:88:
5f:0d:90:24:01:6a:fd:5c:1a:80:ba:2b:f0:9a:86:ed:f4:fd:
fe:a8:36:9a:89:ce:c8:d7:9d:57:85:d1:3c:67:9c:64:88:e0:
17:34:84:a8:fb:92:ba:bf:05:ca:c0:ab:ef:4e:56:88:b4:9a:
fe:0a:6d:5d:69:a1:11:d6:b4:eb:93:1a:25:63:94:f0:1e:d5:
e8:9b:c1:d7:a0:c9:85:91:90:39:5a:04:dc:44:9b:7e:67:65:
8f:c2:c7:1d:97:a7:cb:ff:3e:5c:11:43:a1:41:b6:ee:23:91:
e8:52:56:19:19:3f:8d:5e:1c:01:cf:9b:c4:c1:c1:4d:91:d7:
ed:6a:cf:2d:a2:9b:ca:0c:9c:e3:f7:c7:6b:5e:4b:79:75:c1:
46:9f:74:c1:0d:8c:55:5a:00:44:42:66:3d:2a:8a:f3:05:cb:
42:80:43:91:67:b3:92:72:19:d3:15:b0:a1:cf:38:2e:db:49:
13:eb:c2:eb:44:9d:eb:74:f1:ea:fe:63:15:50:e1:d1:2a:42:
94:01:14:89:b5:4c:9f:22:11:ae:90:83:58:8b:21:6e:99:93:
a5:eb:67:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:33 2026 by rpki-client