Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
File: ZD2vEi46h6yqb9tiw1olKhmaWNk.mft (raw, json)
Hash identifier: BmcFAfBRRNZadsMUiRuCjTCw+WEDgCZygz/F7y2+LUw=
Subject key identifier: 53:B6:78:5B:7F:3D:C6:BF:9C:CD:20:D4:DD:9F:32:33:81:2D:82:D5
Authority key identifier: 64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9
Certificate issuer: /CN=643daf122e3a87acaa6fdb62c35a252a199a58d9
Certificate serial: 019CAC0FF0FF4EAF9175914BF907C03F88BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
Manifest number: 0FCA
Signing time: Mon 02 Mar 2026 01:00:51 +0000
Manifest this update: Mon 02 Mar 2026 01:00:51 +0000
Manifest next update: Tue 03 Mar 2026 01:00:51 +0000
Files and hashes: 1: E02kulG3cuFET7qCfIGELuqcrIw.roa (hash: PQPtlTXvYqFKCXRfSmjkrshxIArKKipQAXnmpgfBnic=)
2: ZD2vEi46h6yqb9tiw1olKhmaWNk.crl (hash: sc0QjyviN/DomPMwBrfrN0DuN7adJTIy1k0z/lvsStI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:f0:ff:4e:af:91:75:91:4b:f9:07:c0:3f:88:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643daf122e3a87acaa6fdb62c35a252a199a58d9
Validity
Not Before: Mar 2 01:00:51 2026 GMT
Not After : Mar 3 01:00:51 2026 GMT
Subject: CN=53b6785b7f3dc6bf9ccd20d4dd9f3233812d82d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:14:92:d7:8e:28:15:83:aa:d2:cf:56:ff:ff:
fa:b7:64:9b:88:6a:e2:96:14:22:e8:ee:57:cf:d5:
1e:c5:63:f5:a9:39:1f:e3:70:21:be:3c:58:ae:dc:
54:0e:25:60:05:87:c4:24:80:0d:e2:96:82:70:d2:
e7:cb:58:44:ad:a3:92:cf:3e:52:9a:e8:bc:f9:10:
6f:d7:c7:9e:9f:92:52:06:be:73:df:59:b2:f1:a7:
9f:87:54:a2:c8:96:da:5c:9e:fc:c4:14:f1:77:a4:
51:0a:86:dc:52:5b:3c:c0:5f:f7:38:c2:19:3a:b9:
27:4c:12:bd:67:4a:ba:82:69:33:fb:72:e6:ae:92:
bf:c4:33:10:1e:e0:8a:e1:27:e8:c2:23:0c:e3:ed:
1a:76:45:f0:26:00:9f:5f:2b:2f:51:76:eb:ad:7b:
f3:66:32:8a:f7:5b:87:2e:b1:db:72:54:f2:34:17:
b5:27:4e:9e:97:71:1b:f1:ff:e4:6a:e2:1b:4d:97:
c4:78:37:ae:02:d8:10:0c:d7:e3:8e:89:f7:0e:8a:
b8:dd:89:ff:89:5e:19:bd:25:89:6c:40:08:00:f0:
b1:8e:dd:39:73:21:80:e8:f5:ec:ab:e6:69:b0:c0:
c4:31:a5:11:44:c3:75:a6:b2:33:e6:b1:f0:e9:c6:
cf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B6:78:5B:7F:3D:C6:BF:9C:CD:20:D4:DD:9F:32:33:81:2D:82:D5
X509v3 Authority Key Identifier:
keyid:64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0a:22:9a:fa:44:3c:25:9d:8f:78:ce:af:4b:b6:44:57:07:
41:95:e7:7b:e6:24:15:a7:6d:0e:54:bc:2a:3f:94:14:58:22:
e7:a7:af:69:7c:9b:fd:d7:c7:6e:11:dc:8e:c4:66:85:4a:96:
36:0e:a0:37:29:5f:d1:c9:54:62:44:51:63:c8:9b:08:44:c3:
98:23:c3:2c:80:c7:2b:90:88:a6:3b:e8:53:4d:5e:b9:b1:3d:
98:e9:f2:8b:26:e3:1c:f6:75:28:4e:72:10:11:93:04:58:a6:
4a:e6:74:0d:84:2f:33:cb:d8:0b:b8:df:3a:d5:c9:e4:65:5c:
c6:cf:da:83:15:38:01:e4:88:2f:78:0c:a3:7b:5b:be:b2:2c:
ed:bf:01:c4:d0:aa:57:cb:26:6f:a2:78:e7:b0:40:ef:57:79:
c3:ff:d7:42:98:da:ed:3d:0a:07:72:ab:a3:4d:f8:03:07:d4:
cb:93:65:19:c6:2a:4d:a7:4c:aa:4c:39:f9:c8:c2:49:4a:9d:
da:09:93:3b:6e:02:ac:58:1f:88:d7:a2:1d:95:6c:bd:8d:eb:
57:5b:99:11:51:3a:6b:95:74:5d:90:aa:98:24:49:4a:db:af:
35:43:a7:27:9b:51:34:26:1d:9b:2c:20:b7:1c:fc:3f:32:67:
5a:55:2a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:20 2026 by rpki-client