Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
File: zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft (raw, json)
Hash identifier: hRkV+tBYEdqGZn8IrqCVYy9P+7zfz7q0fRd2iBkqDvo=
Subject key identifier: EA:B0:7E:A9:5B:75:C7:76:46:BE:06:13:91:85:B8:12:6F:1F:CD:85
Authority key identifier: CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
Certificate issuer: /CN=cd9de08b3053bac61713c46b43d4093818c2046f
Certificate serial: 019CACB4D1AB4602FBB433A51CCFEBA1B5EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
Manifest number: 05D0
Signing time: Mon 02 Mar 2026 04:00:57 +0000
Manifest this update: Mon 02 Mar 2026 04:00:57 +0000
Manifest next update: Tue 03 Mar 2026 04:00:57 +0000
Files and hashes: 1: OCWMjUbV-RFWWbEAfOnnKmG-Ygw.roa (hash: wVP7cqC9QuE0DdbIuexkFJhonHykfMO7bJmfVohZyAM=)
2: zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl (hash: C65z1aqj4K0T1zmxxMoSh8C/4I8U2ZkSOqOpEyKh1b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:d1:ab:46:02:fb:b4:33:a5:1c:cf:eb:a1:b5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9de08b3053bac61713c46b43d4093818c2046f
Validity
Not Before: Mar 2 04:00:57 2026 GMT
Not After : Mar 3 04:00:57 2026 GMT
Subject: CN=eab07ea95b75c77646be06139185b8126f1fcd85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:46:e0:2c:a1:97:d1:d8:81:d6:1a:14:f4:63:
d6:f0:0c:1b:90:50:72:75:1e:bf:39:f0:5c:77:e9:
58:5c:9c:13:d8:87:0c:36:42:d2:87:6e:1a:a7:9b:
d9:c6:4f:60:a6:22:ab:73:ac:1a:69:83:cc:bf:e4:
1f:db:0c:1c:9c:85:fb:bc:93:ae:65:61:df:67:f8:
12:95:35:4e:e7:e4:24:66:ba:be:b8:ed:87:fa:fb:
78:59:9a:2a:47:c7:23:c7:b2:32:b1:19:37:64:c6:
ec:df:b0:ea:4c:ee:ff:5b:b8:d0:e3:06:3b:34:b4:
82:a9:80:2e:8c:3a:74:c4:eb:45:b9:ec:09:79:e2:
39:95:43:de:d7:8d:b7:9f:08:4a:7b:9e:65:99:89:
34:99:b9:4c:cb:67:67:dd:77:38:b9:c9:00:e7:22:
6d:88:a2:83:ec:6c:3c:58:4b:8d:bf:97:f3:f4:82:
da:32:fe:0d:37:8f:03:ce:be:c6:53:6b:c3:bf:09:
f9:ce:3f:d0:a0:11:9b:2c:a4:a5:9a:b4:d7:c8:55:
32:56:a2:0f:d8:73:d0:0d:48:f3:11:ac:ae:e1:ab:
17:ed:2b:c0:47:9c:1c:e0:f5:02:c1:04:22:77:46:
60:99:a1:55:2b:dc:e4:b8:62:65:42:a9:64:35:de:
da:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B0:7E:A9:5B:75:C7:76:46:BE:06:13:91:85:B8:12:6F:1F:CD:85
X509v3 Authority Key Identifier:
keyid:CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:80:ea:03:78:bc:97:8e:e9:cb:9d:31:d3:0b:25:f0:09:8a:
1d:2a:52:9b:30:64:96:3e:5e:ae:43:11:46:73:f3:77:51:c6:
1b:4b:57:f2:0c:a4:80:f3:59:9d:bb:76:f8:ce:3a:46:1e:ca:
79:93:03:cb:3e:90:c4:6c:e9:84:3a:1c:5c:1c:0d:b8:7a:84:
2f:2e:81:58:bd:44:3d:d0:ec:73:39:5f:37:14:e8:b6:17:0e:
cc:b3:ec:82:b3:db:ea:83:57:71:a9:46:58:ca:99:b6:da:cf:
26:06:be:d3:9b:52:a2:44:bb:0d:cf:44:84:98:02:27:17:1f:
b2:a4:26:5b:b5:d7:1f:22:d8:f4:bb:47:81:2b:f2:64:df:dc:
7c:9f:a6:92:f4:64:c6:7f:5c:06:0d:0f:19:7a:ba:38:97:2d:
8c:58:b3:51:f0:18:be:5e:7a:c7:55:34:02:37:7f:23:c4:c3:
03:e8:a9:a8:f4:e8:f1:bd:db:10:4f:f2:71:dd:38:b8:e5:3c:
8f:a1:9d:cc:c1:91:31:aa:89:e9:70:2e:e1:82:41:34:e4:2c:
2d:ac:7b:a0:55:60:c4:de:c8:9e:f0:7a:fa:80:f2:4f:1d:4c:
97:e4:86:83:e5:0f:25:93:63:6b:c1:91:3c:67:16:25:cb:b4:
81:db:b8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:24:05 2026 by rpki-client