Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
File: zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft (raw, json)
Hash identifier: Flb3TCfZLgaWaj/1ztDfRS5pd7X9byDUMl3Y4YEA8eE=
Subject key identifier: 65:33:D0:3B:28:1D:0D:79:99:E2:46:BD:B0:F0:43:5F:DA:ED:FE:8E
Authority key identifier: CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B
Certificate issuer: /CN=cd7cb97b523c73f1406d63c767c73d9c957d433b
Certificate serial: 019CABA21666C45C7C9B498960D25FA81066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
Manifest number: 055F
Signing time: Sun 01 Mar 2026 23:00:52 +0000
Manifest this update: Sun 01 Mar 2026 23:00:52 +0000
Manifest next update: Mon 02 Mar 2026 23:00:52 +0000
Files and hashes: 1: L4Nkof_0pZhXN5_BFlFOSMgeaiY.roa (hash: bde5kTukmqHATGWW/dQkhnT+bwSXC3+2TUXQVaF4eRk=)
2: zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl (hash: JILaG2WvCB3fqY+ZCJf8fsftItDWcH1WOoYZcZa0FhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:16:66:c4:5c:7c:9b:49:89:60:d2:5f:a8:10:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7cb97b523c73f1406d63c767c73d9c957d433b
Validity
Not Before: Mar 1 23:00:52 2026 GMT
Not After : Mar 2 23:00:52 2026 GMT
Subject: CN=6533d03b281d0d7999e246bdb0f0435fdaedfe8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:69:c9:15:51:59:d7:46:29:15:52:2f:08:4c:
61:f3:fa:03:d4:e2:11:be:7b:3c:e5:37:e4:57:3f:
71:5c:de:e8:ff:e6:df:c9:bc:db:a4:93:62:c2:da:
20:90:b0:ba:98:40:7f:05:56:a1:87:71:25:d1:84:
a0:14:28:f5:8a:d7:a4:44:aa:09:27:e7:e9:e2:26:
be:1a:6e:85:af:93:53:5f:20:d3:b1:06:e3:b4:79:
39:b5:e5:05:51:53:85:28:18:28:44:af:bf:d3:56:
af:74:3b:ac:8e:69:a0:47:ae:d4:5a:61:01:82:6b:
62:7c:f6:c5:1d:d2:64:c0:41:31:79:86:45:84:95:
1c:55:5a:55:ef:ee:84:f0:1d:97:aa:bb:db:b8:77:
2c:77:a8:65:b9:dc:db:2e:de:f5:37:a5:93:2e:ee:
34:c5:19:b0:6f:7a:a2:65:7c:35:25:31:cc:50:b6:
c2:28:d2:cf:8c:86:d0:22:cf:37:42:89:9a:9e:76:
6d:48:3f:47:aa:11:b3:25:e4:42:3e:d7:c3:b8:7a:
f1:04:39:2a:be:87:79:ab:f2:e6:b6:51:68:85:f4:
ff:49:60:bf:ad:33:33:b1:cf:b6:91:a5:bf:8b:46:
ab:53:8d:77:a5:70:ab:ce:cd:dd:9c:8c:4e:2d:96:
43:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:33:D0:3B:28:1D:0D:79:99:E2:46:BD:B0:F0:43:5F:DA:ED:FE:8E
X509v3 Authority Key Identifier:
keyid:CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8b:24:b2:39:d3:4d:2e:50:8f:04:d9:13:e1:34:82:13:f1:
b5:6a:7b:df:6f:3a:c9:42:a8:bf:e7:28:56:3e:4f:2c:3a:a6:
d0:86:8d:e2:81:ca:43:c5:c7:c0:1a:4c:c6:f3:2a:7d:f3:61:
d1:52:24:32:da:7f:3b:66:f7:20:40:a7:3d:ba:fd:ab:04:e8:
00:61:2c:ae:32:8b:41:e6:f3:3a:1e:6d:57:f7:e7:c4:8c:8d:
6b:4c:4e:22:04:16:db:d1:56:f0:e9:38:af:a2:3f:78:a4:d7:
56:0d:11:75:fa:14:39:2c:66:4a:53:0b:2f:7d:da:c1:fa:eb:
60:90:31:b7:db:06:02:02:49:bc:f4:30:18:71:3a:bb:eb:3d:
60:3e:fd:cb:c5:ef:68:8a:0c:96:aa:dd:19:a1:15:bb:0b:ca:
f9:d2:ba:dd:ea:ab:56:d1:4f:25:cb:7c:a9:42:19:de:04:ff:
b6:1d:52:27:ef:55:05:ad:d7:dd:7e:c9:e5:38:79:a8:fb:4a:
b0:4b:2b:91:36:d6:fe:f2:79:ca:04:e0:98:a8:fb:67:f6:12:
3e:1e:9a:62:0d:cf:74:72:06:b2:ad:84:33:61:03:d2:87:bf:
74:5c:bc:20:39:af:33:0c:54:d4:f4:92:68:05:89:8f:df:5b:
0d:37:aa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:48 2026 by rpki-client