Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
File: Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json)
Hash identifier: 5wIeBfhO8+Wlv4MtMy0IEM4UPR13YgpI3RcJnBFNnwE=
Subject key identifier: CE:5C:BB:4D:7A:41:30:5A:4F:1A:7B:80:E7:2E:AB:BD:DE:14:31:1C
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial: 019CAE358C6D961873DB784C8CE863C69FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
Manifest number: 06A7
Signing time: Mon 02 Mar 2026 11:01:10 +0000
Manifest this update: Mon 02 Mar 2026 11:01:10 +0000
Manifest next update: Tue 03 Mar 2026 11:01:10 +0000
Files and hashes: 1: 99ql3Nj_XXqdJBUKyH1zSjprsmk.roa (hash: 8Q5g46XQnTAlgbAY9G1RdWl4ij89rLN6KeETKWp4UX4=)
2: UKvSxhXp6UeN9PA2d7zmzONW8dI.roa (hash: U2Kl3dxAuyKIqhwNvATcE57d94w+8GaKrGRAFwd2pQQ=)
3: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: zPR5qGUvm4Rcmsx5+oLn0Jb5SfE9KqiysFG6nPZzyWI=)
4: yGnTUZ-K5iZvv_QJlyjyr1Vifo0.roa (hash: 3NvMCRIYGPgbO9Y+3R7bmJF+C6D6NUF59+RrT9ZBe2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:8c:6d:96:18:73:db:78:4c:8c:e8:63:c6:9f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Validity
Not Before: Mar 2 11:01:10 2026 GMT
Not After : Mar 3 11:01:10 2026 GMT
Subject: CN=ce5cbb4d7a41305a4f1a7b80e72eabbdde14311c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:55:08:6c:cb:cb:a0:b1:ab:13:94:5e:ca:aa:
84:0d:51:d8:56:24:90:9c:31:5b:d4:a2:5d:68:bd:
90:5a:e3:91:4e:ab:1c:b2:95:44:47:d1:b3:a8:69:
ce:ef:78:b6:50:85:00:44:c6:bc:b3:b5:24:1a:ec:
f0:68:82:b7:15:50:12:3a:89:56:ba:f1:23:c8:a0:
ab:e3:b8:b0:05:55:b3:0d:3a:01:55:fa:fc:7c:c1:
47:30:2e:58:db:b0:20:b3:47:7f:bf:4c:27:1d:0a:
38:6b:c5:07:63:be:36:c2:7c:27:0d:c3:4d:1a:cf:
2e:62:be:1c:4d:74:fb:75:3c:5a:d1:03:ef:a5:d2:
1a:ba:b7:5a:fd:72:e3:8d:95:82:9a:b7:d0:d9:31:
51:be:44:79:bb:59:a4:b4:fa:91:f5:ac:95:d0:cb:
b5:a8:75:1d:cd:b7:7a:6a:a9:56:a8:3c:7a:37:d7:
da:79:1b:c3:47:6a:53:8a:b9:5e:6e:d3:50:57:6f:
9b:45:99:d9:00:50:a1:a7:cb:86:a4:93:c2:7e:bf:
dc:30:cd:40:31:c8:8c:44:20:99:0d:0a:28:fd:d0:
eb:aa:7a:f6:a3:4f:81:39:74:99:19:87:ce:81:16:
ca:26:11:82:dd:7f:80:7e:c9:0c:49:db:d6:d4:69:
4d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5C:BB:4D:7A:41:30:5A:4F:1A:7B:80:E7:2E:AB:BD:DE:14:31:1C
X509v3 Authority Key Identifier:
keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3d:7f:71:8e:83:bc:a8:a6:53:94:e1:67:79:ad:c9:db:c8:
89:24:64:82:e2:72:bb:80:57:ec:90:84:9d:6f:b7:ae:5b:00:
8a:ea:1d:41:2e:59:b7:de:8b:7c:68:8a:81:e9:39:98:40:97:
6a:d9:55:42:59:94:0f:05:5f:a4:e8:8d:31:2b:52:04:35:7e:
da:55:e7:1d:83:d4:4b:e4:8c:fb:64:c2:d0:8e:18:f7:a7:63:
45:75:5a:da:57:e0:64:10:c4:c7:bb:b9:94:05:cb:6e:91:04:
c0:6b:12:f0:f6:e1:f0:47:52:5e:71:41:14:3d:1d:f2:52:30:
94:85:a3:41:a4:0c:01:07:87:26:1c:9f:e3:69:3f:73:f3:98:
55:2e:6a:93:76:46:ed:19:0d:75:36:50:38:bc:b1:36:4c:39:
61:bf:4e:66:18:9c:6b:9f:8a:9e:ef:24:17:85:44:68:f1:60:
80:dd:0b:ed:69:6c:7e:45:92:c7:b0:a2:bf:fc:39:61:b4:46:
83:4e:4a:90:cb:fb:4a:c5:2b:f5:32:ca:e9:b2:e9:e7:ac:c2:
1e:b1:d7:42:d3:9c:be:0c:3f:5b:97:55:e8:18:f6:db:0c:c2:
31:f7:c9:df:6f:0b:bd:98:7b:cf:02:78:cc:e9:4d:18:97:a8:
a0:71:cd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:32:22 2026 by rpki-client