Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
File: ZZprl16v0s5RRocjgUNV9WxVuvs.mft (raw, json)
Hash identifier: i+ZqLOaBs7/wGnq7zGayn+g31C5hF4QtThIOYbfH6Oc=
Subject key identifier: CE:D1:CB:D3:6A:5D:CE:52:F5:33:B7:6D:2A:69:ED:CD:C9:C7:C0:68
Authority key identifier: 65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
Certificate issuer: /CN=659a6b975eafd2ce51468723814355f56c55bafb
Certificate serial: 019CAAFD253670BD1B617445A7BBFC363100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 20:00:42 +0000
Manifest this update: Sun 01 Mar 2026 20:00:42 +0000
Manifest next update: Mon 02 Mar 2026 20:00:42 +0000
Files and hashes: 1: Bge4UQP__-DVB-KXu8QE0dyV_no.roa (hash: empz0X3iGWbWnVRP0ZliKC+Au9jenyd1vXKmWTaIsLA=)
2: Jz_svkdguP3AXC17Oc-v9vpSLo0.roa (hash: nZ1Y4RSNexYF/KVR8IvOZJPdDsAC2m7rxHaUZuQNyXw=)
3: ZZprl16v0s5RRocjgUNV9WxVuvs.crl (hash: SfIPm8KKxyN83A9/DbGL44kjzH+aeIkp5leErq0qKRY=)
4: k-0ai5LmPbShGWzhq7tl3QEV5xg.roa (hash: lX1a4+6IcJDs034Yg/uu30HJfCoVoIaGwoVAFeOpt4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:25:36:70:bd:1b:61:74:45:a7:bb:fc:36:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659a6b975eafd2ce51468723814355f56c55bafb
Validity
Not Before: Mar 1 20:00:42 2026 GMT
Not After : Mar 2 20:00:42 2026 GMT
Subject: CN=ced1cbd36a5dce52f533b76d2a69edcdc9c7c068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b4:05:72:d3:c1:50:a4:c3:17:10:e7:7e:71:
f1:bc:d8:74:3f:04:54:f5:49:d8:3b:dc:43:3e:67:
cc:97:cf:0e:7a:f7:b5:8d:20:ed:69:3a:73:34:d9:
cc:0d:e7:b9:b1:d0:50:37:1b:4b:a7:7a:c1:ff:be:
4b:90:3f:5c:d4:a0:6c:55:23:29:bf:5d:15:c8:7b:
5b:f7:ce:f5:67:6b:a6:be:f7:bd:26:64:c6:4d:1e:
ea:4a:65:fc:f0:f2:fb:03:de:16:75:07:1f:16:99:
eb:74:6d:5d:82:ed:fd:81:ca:26:86:8a:13:d4:74:
cb:a6:7b:ce:f8:57:75:ed:ea:16:59:20:ba:3e:2e:
7e:41:ef:9b:59:78:d3:96:90:5f:6d:66:a9:be:3b:
d3:83:0a:b4:0f:1f:d3:8a:6d:63:0a:6b:32:98:68:
f9:b4:da:fd:ef:ce:db:92:80:63:28:ee:cf:05:33:
7c:da:79:7e:4b:6b:e0:77:1a:14:73:45:25:01:9a:
3c:9b:b2:81:32:51:05:0e:16:12:d1:90:1d:e4:dd:
30:c7:e7:0d:73:98:f7:86:ad:3b:e1:32:9f:c3:b8:
24:01:c6:f5:08:ea:9d:2b:c0:90:fb:bc:25:4b:15:
81:9b:5f:b9:73:a8:7f:ab:62:02:fe:72:f0:72:bf:
46:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D1:CB:D3:6A:5D:CE:52:F5:33:B7:6D:2A:69:ED:CD:C9:C7:C0:68
X509v3 Authority Key Identifier:
keyid:65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:5a:22:7c:10:26:07:b8:d6:f2:19:dd:45:56:99:b0:37:89:
c3:b5:f7:58:63:b6:c2:34:cd:09:1f:51:e1:ec:4c:06:3e:0c:
eb:59:ef:ed:93:99:be:20:68:d4:aa:7a:d5:8d:d7:a4:3a:52:
37:7b:1c:18:7b:5c:74:66:00:11:7d:79:d4:b6:d4:be:d7:4d:
b2:f4:22:d1:8f:ed:9d:09:c3:f9:58:3d:a6:1c:6f:f9:f3:86:
e0:f7:61:09:33:31:55:57:91:40:6c:e8:c1:22:2f:9d:b0:79:
c2:85:0b:63:b7:5a:8d:2e:e1:0b:d8:7e:65:eb:90:80:65:ca:
0b:77:8f:40:4a:7e:f3:bc:ae:b3:c6:b7:25:06:37:1f:df:66:
af:83:dd:fc:3c:bc:e5:e2:44:4e:89:f9:7c:c0:2c:62:a3:60:
2d:65:d4:39:4b:9a:70:b1:00:c5:c5:73:97:48:81:66:0f:b6:
2b:0c:3e:e8:41:f0:d9:57:0c:b9:29:fd:0f:35:57:19:de:2d:
cb:1b:76:00:96:17:70:47:08:68:40:02:ca:c3:9c:33:24:b7:
29:c0:51:03:c3:ab:ee:52:2b:9c:3e:ad:02:e8:ad:68:ec:c8:
2d:e4:b0:71:c0:a1:7d:ab:f0:69:43:bf:2a:79:53:39:e5:6a:
30:17:36:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:19 2026 by rpki-client