Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
File: ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft (raw, json)
Hash identifier: 0uYtNwATCF0MVmsHbOt1Hz23B1dKrdJ3QN6R3hkagg0=
Subject key identifier: 74:17:96:C1:69:4F:0B:2A:7A:20:AB:55:25:6C:C3:32:AC:89:D3:23
Authority key identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
Certificate issuer: /CN=66501165645aa80dcba315885cf374acb6d21305
Certificate serial: 019CACEB5D96B2CB78E673F734EAD3C5EDE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
Manifest number: 0C5B
Signing time: Mon 02 Mar 2026 05:00:31 +0000
Manifest this update: Mon 02 Mar 2026 05:00:31 +0000
Manifest next update: Tue 03 Mar 2026 05:00:31 +0000
Files and hashes: 1: ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl (hash: Ni5uyLGX4LXRdLtxbPVfnA4nlIU2kFJp0D0mU+9/+vs=)
2: bb1B8Fy2_C2bqbD9N4RRbHoFAbA.roa (hash: l0MLPIfI2aVoXdO47UK4RJDxoIk9MxZKupnuOkrWUdk=)
3: dcTwMDgwodHIo-S4yL4e4K41UJY.roa (hash: eMv2nsim1YJjG+0E2GpZFtw7b5BwXygPOnj8sq0+Gcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:5d:96:b2:cb:78:e6:73:f7:34:ea:d3:c5:ed:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66501165645aa80dcba315885cf374acb6d21305
Validity
Not Before: Mar 2 05:00:31 2026 GMT
Not After : Mar 3 05:00:31 2026 GMT
Subject: CN=741796c1694f0b2a7a20ab55256cc332ac89d323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:28:77:cb:16:0e:d4:49:40:ac:89:3c:e3:84:
48:04:6f:31:58:bb:c0:4f:02:2e:cb:06:b2:0b:1e:
4f:5d:b2:f3:32:ed:13:3b:a7:60:bb:d0:d8:f0:22:
35:50:fc:5c:dc:26:71:3f:7a:fa:a4:47:76:d5:32:
84:fa:5b:8c:84:c4:c5:7e:16:0b:ec:df:f2:05:97:
cc:b6:30:ee:c8:3d:19:28:ea:52:e6:a8:2f:64:dc:
47:64:20:46:14:2f:a5:94:4a:9a:20:f8:e8:86:00:
c4:d2:7f:82:f9:74:9f:65:24:3d:86:d3:07:c4:3f:
18:54:1c:5d:c7:c5:8b:b6:ad:d8:99:9e:09:20:4e:
71:02:46:0b:c7:8c:03:23:2a:61:75:cd:e6:43:0b:
52:53:86:32:d7:49:8e:a5:81:b0:e8:a2:27:b1:5f:
1c:e6:0c:a1:f8:fd:9a:1b:e7:9e:ad:9d:f5:f0:cd:
69:f4:16:b0:c8:94:8e:94:5c:e0:cf:0c:c7:00:e6:
02:09:0d:fc:2b:d4:b4:e7:c4:21:3b:78:ca:14:48:
76:c3:82:36:47:8e:55:8f:2b:73:f2:d0:e8:a3:16:
d3:64:44:55:39:b4:39:48:a1:81:84:8c:49:6f:6b:
99:6f:ce:7a:c6:fc:c1:37:32:bd:bb:be:ff:1c:42:
1b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:17:96:C1:69:4F:0B:2A:7A:20:AB:55:25:6C:C3:32:AC:89:D3:23
X509v3 Authority Key Identifier:
keyid:66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ae:9b:38:46:a5:7a:8e:36:4c:16:8d:94:56:20:af:db:f3:
56:2e:aa:28:08:eb:54:e9:10:ce:6a:da:88:2f:e7:44:38:4e:
5d:c2:de:ba:c7:ff:81:92:5e:5a:5d:12:4f:72:fc:84:3a:69:
09:70:18:ea:30:22:b1:c5:a4:f8:9f:1d:99:0f:dc:8a:41:ba:
9c:9c:28:db:88:9f:71:70:25:64:19:b2:4e:ff:42:27:f2:75:
cb:90:61:9b:5a:98:05:b3:50:d2:ac:b7:4a:b9:1e:6d:67:7e:
43:d8:b5:2b:59:e6:87:de:6a:2e:40:59:92:e8:ce:c0:e5:74:
80:84:eb:72:25:f8:d3:c7:e4:c5:eb:d5:70:d3:42:8f:4c:7a:
54:d3:28:23:5d:a5:6b:c0:33:b8:c2:14:c0:2e:40:ab:35:f4:
78:15:ef:cc:47:76:60:8f:b0:89:07:f0:99:c2:3b:4e:bc:f0:
58:96:7f:24:f9:fb:6a:23:70:cc:59:43:ba:06:63:f5:94:18:
e7:ab:53:b0:13:ff:1b:1d:79:fb:64:2d:eb:8c:b7:8e:4d:84:
ee:d2:0f:8d:1c:7d:5a:c0:13:6f:bd:63:d6:73:33:7a:0a:e9:
77:29:90:c4:41:70:df:6b:00:4d:ba:d2:23:9b:1e:03:b0:91:
9b:eb:57:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:25:54 2026 by rpki-client