Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
File: zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft (raw, json)
Hash identifier: 4LSZZ9icVdTc7HOG3ereRi+dQa6dIsJ/cO06DAyQmPs=
Subject key identifier: 8E:7D:C3:61:37:03:77:F3:06:38:2E:38:07:A2:29:C9:69:6E:52:8A
Authority key identifier: CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
Certificate issuer: /CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Certificate serial: 019CADFE2330A663402443D1E75B4F881033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
Manifest number: 1555
Signing time: Mon 02 Mar 2026 10:00:39 +0000
Manifest this update: Mon 02 Mar 2026 10:00:39 +0000
Manifest next update: Tue 03 Mar 2026 10:00:39 +0000
Files and hashes: 1: bWCw9QvZ0n-9vSDkgSO_NuyUw34.roa (hash: Nv8e19B6F0Z+GsL3XuEotkyjFs4rEednWhdiNCJb51g=)
2: zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl (hash: 8Dx8PE+kE03Xis8MU7sx4JpVpCRjGZ6Qi9GQQbrus3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:23:30:a6:63:40:24:43:d1:e7:5b:4f:88:10:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Validity
Not Before: Mar 2 10:00:39 2026 GMT
Not After : Mar 3 10:00:39 2026 GMT
Subject: CN=8e7dc361370377f306382e3807a229c9696e528a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d4:01:48:70:29:36:cc:ef:8e:b3:a0:6c:b8:
08:58:25:5f:aa:c3:a6:31:32:96:ac:72:db:27:a8:
df:d4:9d:73:0b:6d:3b:65:f9:b0:18:e1:0f:4c:4f:
97:4c:6b:cb:ff:65:c3:31:b6:d3:18:25:62:ff:ee:
76:9d:08:51:6b:f1:23:73:20:79:1a:d0:db:69:6b:
55:61:f9:b0:a4:87:d7:78:59:41:3d:49:5c:30:77:
31:dd:d5:30:55:16:6c:c5:13:a3:d6:73:4c:9f:69:
9c:9e:59:cb:bb:73:be:49:51:88:35:4d:43:8b:1a:
c3:47:3f:19:9c:60:2e:c7:01:e6:28:6d:96:21:5b:
e5:53:1b:4a:f6:66:20:70:05:bc:8e:82:94:34:c4:
f4:c1:73:9d:19:07:10:1e:9f:3c:bf:b2:fb:0b:4f:
b0:20:05:b0:b5:da:ec:16:58:e0:d0:ef:00:35:f8:
15:47:ba:9d:84:5f:04:f4:ab:22:6d:83:af:cf:18:
ce:b4:14:bd:6e:69:0b:5f:7f:85:0f:1d:51:54:cf:
0b:fe:6a:88:09:62:aa:19:11:d4:92:80:71:60:30:
65:b6:09:f1:61:98:b4:64:bf:de:6e:ef:56:b4:49:
ce:89:34:8e:a9:a6:25:c4:58:4a:9b:a1:f3:b2:7a:
0f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7D:C3:61:37:03:77:F3:06:38:2E:38:07:A2:29:C9:69:6E:52:8A
X509v3 Authority Key Identifier:
keyid:CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:72:e1:9e:e4:ca:f9:c4:b2:e2:69:d8:c5:13:e0:f7:7d:6e:
30:b5:c4:f2:15:1b:fa:c1:24:88:e9:2f:fe:85:ac:4b:9b:7c:
f4:2f:11:a1:47:1f:b3:bd:ad:65:fc:d8:18:20:f9:ad:80:fb:
bc:c3:83:f2:ff:83:b0:b1:ab:37:78:cc:85:05:95:cd:22:52:
4d:e1:3f:24:6c:31:86:86:45:d5:93:e5:4b:3a:fb:69:5c:cd:
8e:e2:7d:7e:1c:04:0c:2c:1f:29:a0:4f:6e:aa:4b:0e:06:6f:
19:2c:14:19:29:a6:e5:5e:87:14:a1:c3:dd:06:42:e3:89:1d:
13:d9:7b:f4:bc:4c:ff:41:90:6c:82:4d:9b:42:72:fa:b9:04:
8f:50:64:d4:a1:6a:2b:7f:4c:a0:73:91:4d:d0:d4:56:b9:25:
25:a4:1e:c6:eb:92:b0:54:8d:dc:a1:af:04:d7:cd:4a:43:e5:
24:a8:0d:cc:f0:b7:6b:17:52:99:26:b6:e4:08:98:d2:44:f1:
a8:8b:54:a7:84:e0:37:98:24:e1:24:9e:e3:5e:8d:ce:3c:b7:
5c:8c:42:e6:7f:8b:d8:02:97:65:7c:88:45:67:b4:c0:49:55:
f5:7d:93:43:3f:6a:da:fc:a4:cf:ea:4d:19:2d:04:8e:51:e2:
31:ac:4b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:15:47 2026 by rpki-client