Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
File: zgDhEsA_aV-fJdO3K7I6TDTtITg.mft (raw, json)
Hash identifier: ENis/ozEPfnlgHePkN5bEPZFAWnQYp15sC55djzHmmY=
Subject key identifier: 5A:A1:E7:A0:AA:E9:BD:5D:D0:E9:FB:D7:2E:3F:83:05:22:E0:44:C1
Authority key identifier: CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38
Certificate issuer: /CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
Certificate serial: 019CAD22839AA8C062D89827C98AE655856B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
Manifest number: 1308
Signing time: Mon 02 Mar 2026 06:00:46 +0000
Manifest this update: Mon 02 Mar 2026 06:00:46 +0000
Manifest next update: Tue 03 Mar 2026 06:00:46 +0000
Files and hashes: 1: gX3BQ48KT1SBCIdQ1BTvFv5yWJs.roa (hash: DEwg47W0q/dNOjfYsnuPLnMnC+CGQgRpMPoSjjP+Lr4=)
2: zgDhEsA_aV-fJdO3K7I6TDTtITg.crl (hash: EA8/VjOC0UO/QUbm8r14ZVHGtMaYhWXnhCgCMVkX3VY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:83:9a:a8:c0:62:d8:98:27:c9:8a:e6:55:85:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
Validity
Not Before: Mar 2 06:00:46 2026 GMT
Not After : Mar 3 06:00:46 2026 GMT
Subject: CN=5aa1e7a0aae9bd5dd0e9fbd72e3f830522e044c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:91:7b:c6:8f:4b:89:b1:d1:bd:1a:0e:9f:86:
7f:38:3b:8e:9e:2d:09:fd:9d:93:ff:77:1c:39:0b:
cb:e5:12:43:d3:0c:72:a2:d7:d3:44:c7:3e:bd:fe:
d7:82:bc:24:57:49:c8:2d:60:c2:08:94:09:27:60:
18:ef:80:e7:cb:b0:fa:d8:25:d5:6e:7b:f4:ea:b2:
ab:12:87:1a:8a:48:a7:11:08:1a:e7:c6:10:6d:b4:
80:65:4d:d5:11:2d:c7:9a:51:e7:bc:db:09:63:2c:
1d:f1:94:b5:27:82:ea:98:40:29:29:f1:4b:ea:79:
7e:de:b3:28:90:df:6d:4f:1e:5f:f3:6a:dc:bf:4c:
b7:01:cc:b3:83:fa:2e:fd:79:32:70:b4:22:89:98:
63:f3:a0:f0:85:ff:dd:4f:2a:98:ca:5d:ac:4b:8e:
b3:40:74:9e:42:5f:ae:41:37:63:51:84:17:40:9a:
be:a6:67:b3:0b:95:84:8b:92:96:73:57:db:09:b2:
07:af:73:5c:67:2a:9f:90:b0:f8:52:ec:e1:de:d9:
64:2d:c4:a0:bb:d7:c1:cc:35:5c:b5:9d:32:93:bd:
bc:23:b7:85:19:4a:be:33:49:fa:2a:5f:b5:ac:46:
e9:b4:86:17:78:28:31:e7:f5:c2:11:9a:cb:bf:b7:
b7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A1:E7:A0:AA:E9:BD:5D:D0:E9:FB:D7:2E:3F:83:05:22:E0:44:C1
X509v3 Authority Key Identifier:
keyid:CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:52:5a:59:67:80:96:44:4c:3d:d3:a0:51:c9:7d:a8:0e:ac:
92:81:e4:e3:32:02:54:86:78:c9:f6:7c:2d:f7:9f:66:10:c4:
29:92:29:2a:35:c8:b0:dd:df:7b:69:81:8b:ed:9a:24:cb:64:
77:7b:ac:bd:7a:af:e1:a1:b6:c7:27:44:6b:a2:68:92:d2:8a:
46:0e:6d:65:25:6f:d5:5b:fd:ea:fb:03:de:c0:4c:96:35:63:
31:72:83:64:ae:22:87:95:9a:6b:9c:f7:af:9f:84:11:ef:51:
54:5c:fb:10:4c:dc:80:41:62:35:47:a8:f4:aa:17:86:7b:c3:
e7:c3:5a:6d:0d:b0:b6:9a:f1:8b:4f:f3:c6:8b:f0:0d:f9:e1:
fa:a2:70:c7:49:cb:ff:02:5a:8d:1b:60:c6:5e:98:66:d9:9d:
09:b4:9c:60:d6:d5:67:d5:38:eb:c2:02:0b:9d:b9:71:80:47:
95:6d:50:48:04:bd:a7:64:eb:be:e6:cc:7f:6c:dc:8f:29:b6:
6e:01:88:ce:d5:e7:1c:f5:ba:f7:23:4b:d9:89:72:83:a5:92:
ea:cc:dc:8b:f3:f8:67:c6:1e:b5:41:32:1e:35:b2:be:a5:78:
54:ef:4a:43:86:03:52:a6:ba:f1:3c:64:6f:d8:0d:8e:59:ef:
40:c9:8b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:03:08 2026 by rpki-client