Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
File: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft (raw, json)
Hash identifier: 2vatrZUe6fjLb724k9IgwfF7ih7+qjx8BGRZ2hzAF/g=
Subject key identifier: BE:94:A5:51:2E:B3:87:56:25:D3:35:C7:68:5C:2B:D1:C2:FC:E3:A3
Authority key identifier: 65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
Certificate issuer: /CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Certificate serial: 019CABA2462F0B1B68BB3E8C7558DD3D50AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
Manifest number: 1707
Signing time: Sun 01 Mar 2026 23:01:04 +0000
Manifest this update: Sun 01 Mar 2026 23:01:04 +0000
Manifest next update: Mon 02 Mar 2026 23:01:04 +0000
Files and hashes: 1: 09kUsc8xVsHQfG22SiNr4dqPF4E.roa (hash: ysqhE++XuPh/xw2jA2E/+Gvhp8/HFy9qw2ro2jCSjO0=)
2: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl (hash: bIjeJJiHoGetNhE+ypbDZZdfuOsV1gBgU5SZbi8kUN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:46:2f:0b:1b:68:bb:3e:8c:75:58:dd:3d:50:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Validity
Not Before: Mar 1 23:01:04 2026 GMT
Not After : Mar 2 23:01:04 2026 GMT
Subject: CN=be94a5512eb3875625d335c7685c2bd1c2fce3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:37:dc:c8:5a:cf:c8:dd:5b:e4:d8:fa:74:9b:
0b:92:bc:4e:13:53:79:c5:30:c3:24:84:06:a1:4a:
33:3e:a0:e7:6b:f5:24:07:56:fd:80:b5:2a:8f:81:
18:7b:4c:8a:bc:13:bd:84:a6:46:67:d0:ea:81:93:
14:ef:b1:7c:4e:72:ff:0b:2d:0c:1e:3e:fd:59:27:
33:99:ee:90:00:c5:65:34:7d:16:1d:a3:57:5f:26:
94:fa:aa:4d:da:28:44:e7:02:36:77:32:b8:fb:34:
27:ed:76:89:b5:2a:14:eb:81:30:30:36:72:36:e5:
5a:0b:36:a1:6d:58:11:b9:d5:a8:66:6a:d7:63:53:
36:39:7f:e2:c4:7e:fb:eb:eb:f9:7c:06:39:3a:9c:
d8:ff:9d:3c:19:aa:60:d9:53:51:e5:75:3c:53:df:
9d:85:01:a3:64:f4:27:90:7d:76:ce:1d:47:1b:35:
23:e5:4f:9f:da:9b:ab:56:42:3b:71:19:38:a1:18:
59:ef:f9:f3:fe:99:6e:23:b7:7a:aa:54:c3:0a:ce:
bb:29:64:12:33:c7:3e:cf:74:4f:2d:6d:b5:0e:c3:
3c:04:0f:d7:17:38:6e:d2:73:3f:dc:15:ea:d1:77:
d9:91:e7:26:61:43:85:1b:40:68:48:a3:34:b9:8b:
46:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:94:A5:51:2E:B3:87:56:25:D3:35:C7:68:5C:2B:D1:C2:FC:E3:A3
X509v3 Authority Key Identifier:
keyid:65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d6:a0:ac:16:41:e6:66:2f:4c:64:f1:68:6a:66:6b:c8:d1:
fe:f1:a1:6d:8a:73:25:d3:8b:f1:cf:9d:00:60:07:a5:c5:bf:
3d:bd:e5:0e:1d:f1:6b:a9:2c:58:b9:18:39:f4:8f:d1:45:53:
c7:36:61:d5:c5:02:2d:09:75:ed:84:40:b4:a2:6f:63:d1:72:
a5:fc:c9:77:ca:2d:1f:d3:03:41:4f:20:74:eb:45:6c:24:5a:
1e:70:1f:2b:a8:70:3d:f1:df:66:91:80:20:91:52:8b:21:45:
01:f2:4a:ef:29:8b:47:de:64:1e:09:a6:67:e6:fe:79:ec:a4:
16:19:1e:51:d5:c0:43:20:26:10:72:17:80:ef:aa:6d:3e:60:
21:dc:0e:d5:2f:be:8e:17:6f:af:e2:ac:f6:ef:12:cf:f7:3b:
b0:8a:61:2d:de:e3:40:ad:7e:de:4f:3d:43:3c:6a:54:ea:32:
8e:48:0b:95:ec:28:e2:d1:51:7d:f2:51:51:36:2e:22:93:3c:
be:25:8f:a5:57:75:1a:33:1c:6e:5b:db:a4:cb:e8:2f:d2:6f:
1e:fd:da:50:4c:4a:3d:1b:c8:9a:7f:ea:31:2b:e1:00:38:45:
66:39:42:9e:8b:9c:ee:e7:86:d5:34:d2:f3:13:e2:ae:c0:a3:
52:de:1f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:01:28 2026 by rpki-client