Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
File: zs05HGYMPlfFO4fAtS7A0vL0J3U.mft (raw, json)
Hash identifier: uLYa749UXVD0grybMWnEpYnKbCLrzzY02vx3ijNIHTs=
Subject key identifier: C1:5A:C4:42:7C:4A:E7:49:E0:DF:E1:C7:C5:FE:0B:C0:A2:DB:DD:C3
Authority key identifier: CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
Certificate issuer: /CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Certificate serial: 019CABD9EE8E0F44BE77040D443985B0D836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
Manifest number: 07FF
Signing time: Mon 02 Mar 2026 00:01:52 +0000
Manifest this update: Mon 02 Mar 2026 00:01:52 +0000
Manifest next update: Tue 03 Mar 2026 00:01:52 +0000
Files and hashes: 1: K1WYHWxT9hUhyCzFRd3qp6J1SRo.roa (hash: ofCgYNoPNZP6vNBlI2XsxCW6wFsFBZey/s584doB1q4=)
2: nNBG6JVVM3hu0P20Vu06-SMt-9I.roa (hash: M+TeIwkxE9H/4NhfymMWaPcB1L3//0ChdU6G+C5A8KM=)
3: zs05HGYMPlfFO4fAtS7A0vL0J3U.crl (hash: q8fZfcs/cn73bVI3Okg69czlAgZgOoSOBQdmr6z6nKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:ee:8e:0f:44:be:77:04:0d:44:39:85:b0:d8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Validity
Not Before: Mar 2 00:01:52 2026 GMT
Not After : Mar 3 00:01:52 2026 GMT
Subject: CN=c15ac4427c4ae749e0dfe1c7c5fe0bc0a2dbddc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b1:f1:b5:e7:32:b1:35:34:1e:8a:a3:2c:bd:
92:38:60:fb:b6:91:b5:cf:bd:e5:77:98:27:e9:0f:
e8:55:7a:dd:ac:79:6d:9e:62:98:91:e3:88:e4:51:
47:53:ba:0a:f7:83:cf:17:24:77:9f:58:5e:e4:8d:
30:44:6b:83:5c:e4:40:7e:e7:fc:86:1f:94:a5:e7:
37:38:20:ce:05:f2:c3:72:ad:bc:fa:43:30:d7:1b:
fb:6d:ad:a6:c0:e5:75:f8:d6:97:f1:3b:78:66:f4:
66:54:a6:f3:2a:d0:3b:37:cb:2b:94:eb:c1:86:00:
cb:c0:a5:d3:85:46:4d:0b:7d:56:d4:7e:1a:1d:e6:
87:b0:d4:99:69:86:8b:2a:f3:b5:dd:63:39:58:a2:
e4:9c:8d:8e:b8:e9:ee:59:b3:68:bd:bf:36:32:99:
62:bd:46:d4:82:67:c3:74:0b:fb:7b:ca:11:12:8f:
8d:da:b5:99:9d:59:a2:3d:2d:34:19:79:66:07:f5:
4d:ae:41:c4:44:16:48:de:7d:84:c5:66:10:71:d2:
a7:b4:51:06:ff:2f:e9:44:9e:b6:9d:9a:d5:7b:c5:
86:62:0d:33:d3:f9:6d:d5:de:61:20:45:3d:dd:03:
58:3e:b7:3e:5d:40:6f:21:cb:f9:68:ce:95:cf:90:
27:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5A:C4:42:7C:4A:E7:49:E0:DF:E1:C7:C5:FE:0B:C0:A2:DB:DD:C3
X509v3 Authority Key Identifier:
keyid:CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:93:a1:42:91:83:19:10:2b:d6:a7:1b:12:46:2d:99:22:8b:
d1:7e:1c:c2:22:35:a3:0e:c5:37:58:46:cd:cb:86:c2:98:4e:
50:ff:d3:19:ed:20:95:e6:70:01:6a:9d:b3:2f:41:d4:fb:d5:
3f:88:e5:b2:ba:cc:0d:1b:b4:29:9e:80:4f:30:df:85:45:47:
21:34:b7:ea:9f:6d:5e:a6:cb:fa:c1:93:38:f3:3d:d6:8b:0c:
63:67:df:32:c8:65:a5:58:e6:fd:96:6d:e9:53:36:ce:61:67:
1a:3a:69:1a:70:3d:af:6b:c2:4a:47:8d:52:d7:a2:3b:4f:9c:
53:21:89:02:73:de:af:36:e8:90:a3:77:23:2a:5a:4c:f0:c3:
3e:41:27:d1:d9:67:71:8a:20:78:41:54:9c:1b:91:36:c1:9f:
2d:e2:c0:dd:5b:4e:eb:29:ee:3d:a8:be:6c:31:f4:ee:2b:f5:
3f:68:06:4c:81:6f:3d:ef:65:b7:aa:d7:80:4f:71:74:3c:15:
4f:92:33:ed:51:d1:0a:4e:9b:ec:be:fa:73:a3:2c:f0:25:97:
f5:b0:79:09:76:1b:07:ba:23:0d:24:13:21:ec:24:91:9f:a0:
31:4f:a7:56:f7:a4:cc:d4:90:8d:30:99:88:87:47:86:64:5b:
d9:98:57:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:07 2026 by rpki-client