Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
File: Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft (raw, json)
Hash identifier: irs1sWM/QSo1YFTIi3dWzLboCEPx5I+RV5AaLvMEkUM=
Subject key identifier: 26:5E:38:0B:16:C0:01:72:0F:BF:EC:7A:F2:4B:48:82:AC:65:FA:D9
Authority key identifier: 66:DF:B4:31:58:D9:DD:B2:F5:B9:F2:92:37:53:BE:D3:FB:11:73:CA
Certificate issuer: /CN=66dfb43158d9ddb2f5b9f2923753bed3fb1173ca
Certificate serial: 019CABA22A81704F0B03B13C17CA63137FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
Manifest number: 1580
Signing time: Sun 01 Mar 2026 23:00:57 +0000
Manifest this update: Sun 01 Mar 2026 23:00:57 +0000
Manifest next update: Mon 02 Mar 2026 23:00:57 +0000
Files and hashes: 1: MK5B2h9Q0ERwN9XCDOgzBibuA-8.roa (hash: N47GLmPQEQK3T6K6K5QwCYgIvSWVtPfThL2ceHkYyic=)
2: Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl (hash: 57YunPrFec/o21qtyISp2cH+FMFZ0hjfYRTzOYmm1DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:2a:81:70:4f:0b:03:b1:3c:17:ca:63:13:7f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dfb43158d9ddb2f5b9f2923753bed3fb1173ca
Validity
Not Before: Mar 1 23:00:57 2026 GMT
Not After : Mar 2 23:00:57 2026 GMT
Subject: CN=265e380b16c001720fbfec7af24b4882ac65fad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:31:03:9a:57:9d:df:5b:48:98:e3:39:54:
a1:9a:63:98:71:3e:f1:51:e8:a2:c9:c3:8e:df:32:
40:0b:71:0e:30:e4:c2:7a:95:ac:eb:04:89:da:4e:
7c:78:07:c7:bc:79:cd:f0:01:01:f3:e5:81:e7:a0:
cd:03:7a:f7:ca:87:0a:05:1a:f0:e3:4c:6f:61:22:
b8:d4:cb:b7:15:80:bf:5a:f8:76:70:57:36:b6:a6:
5f:c0:ad:5a:9d:d7:eb:2d:d1:dd:b4:bd:08:e1:fc:
0e:30:a7:09:46:61:d1:a5:f1:c8:b7:c5:1c:11:bc:
e7:10:30:ed:eb:c6:ba:3f:97:40:66:ba:15:8d:96:
dc:cb:f2:f3:a0:22:da:9e:79:b7:17:e8:70:7b:28:
91:98:a5:d5:53:54:c7:21:7a:1c:a4:38:43:95:b7:
d1:af:9b:66:cb:75:eb:c7:6e:cf:2e:07:04:6c:94:
92:3b:09:2b:4c:88:f0:f6:b9:5b:a5:11:38:58:b1:
f0:38:7e:15:60:82:78:27:de:0e:f0:37:43:32:0a:
92:6b:3d:49:bb:f4:84:76:43:0b:b7:90:f8:2a:4c:
13:9b:0b:08:df:3e:e3:35:81:50:b8:59:0b:9e:4a:
f6:74:bd:b5:d7:68:fb:7a:29:f3:5e:86:41:fc:39:
de:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5E:38:0B:16:C0:01:72:0F:BF:EC:7A:F2:4B:48:82:AC:65:FA:D9
X509v3 Authority Key Identifier:
keyid:66:DF:B4:31:58:D9:DD:B2:F5:B9:F2:92:37:53:BE:D3:FB:11:73:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:45:a3:91:4d:f6:63:bb:48:09:bf:b5:5d:b7:82:c6:5e:db:
c2:34:02:01:fb:6e:a2:fc:3d:e5:9c:1f:1d:f8:80:d9:59:51:
c5:d2:d8:1f:34:8e:4f:11:91:97:86:95:a9:5e:51:f1:35:41:
d8:43:da:23:cf:3d:ec:88:3e:e5:ad:38:75:c0:6c:b2:cd:a6:
15:8f:0b:f1:77:64:b2:26:c3:59:48:e0:6b:ca:de:d4:eb:ab:
90:a0:17:58:22:bc:74:8d:56:71:e9:f0:8f:20:51:d6:c6:5c:
63:ec:86:bf:89:ff:ae:95:66:14:14:f9:6b:c2:c4:22:8c:e4:
ef:61:01:67:ad:e0:c3:ce:bd:57:e5:5a:3f:1a:c9:97:ed:23:
17:3a:0a:37:66:70:1f:b0:09:ab:41:7c:26:ef:37:f3:a9:82:
83:87:6f:66:a4:79:fc:75:96:58:0e:25:d9:80:b6:34:3b:e4:
10:ba:b6:93:2f:af:25:e8:8b:79:58:7c:57:08:a6:4a:24:17:
fe:cb:7e:20:40:ee:f6:7f:56:45:dd:05:e9:ab:b7:60:2d:ea:
4b:52:b2:b6:e9:32:22:75:03:95:7f:05:5b:bb:c1:72:58:58:
4f:02:78:a7:24:6e:c4:f2:5e:1a:16:2c:0f:e0:7d:01:7b:65:
60:44:d1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:27:42 2026 by rpki-client