Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
File: zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft (raw, json)
Hash identifier: W9yIls3ss+gnqcDqy75j05ET/p8N3QriPXwXlLsgs1Y=
Subject key identifier: F1:3F:FE:9E:04:B1:54:F9:93:E9:94:33:90:0F:11:00:2E:1F:72:8F
Authority key identifier: CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
Certificate issuer: /CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Certificate serial: 019CAD907907D52B2C72EA29A80FD9988C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 08:00:52 +0000
Manifest this update: Mon 02 Mar 2026 08:00:52 +0000
Manifest next update: Tue 03 Mar 2026 08:00:52 +0000
Files and hashes: 1: hP6LOiB-JXjzIxcAoNUeheYCC_w.roa (hash: Am0rp7j+BYvMadHXe785VdV8wLgqVi6auP8kJTGDcRE=)
2: zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl (hash: 9+Mu3WYYjGqPFw94zGwHedvXTbxLmPFCDwHZuyoJSd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:79:07:d5:2b:2c:72:ea:29:a8:0f:d9:98:8c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Validity
Not Before: Mar 2 08:00:52 2026 GMT
Not After : Mar 3 08:00:52 2026 GMT
Subject: CN=f13ffe9e04b154f993e99433900f11002e1f728f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3f:ef:28:9e:18:73:4b:2a:35:90:43:f5:c9:
f2:ed:7b:2a:40:f2:19:22:0a:0d:ea:59:0b:be:8f:
1f:59:47:40:ee:5b:4c:b9:50:ca:d1:30:d3:bb:0e:
16:78:1b:fd:4d:e2:2a:65:56:fe:b3:62:d3:3b:11:
d3:5f:8b:45:07:02:6c:e6:fd:0e:02:5f:f5:28:e8:
c4:04:c5:02:ea:9b:7c:69:99:f1:d8:38:72:54:64:
34:5e:c2:32:c3:7b:8a:40:ec:1e:f3:15:17:35:1c:
66:48:ec:96:bc:f5:d1:de:ca:64:e8:a7:78:55:47:
bd:59:bd:8b:ae:bc:b8:bf:f5:b1:9c:06:95:e9:94:
01:f6:a8:1e:23:c8:e9:88:13:2d:2f:eb:95:47:ce:
db:b4:16:53:38:5e:17:b9:f4:7e:92:d2:63:52:63:
85:7b:8d:71:35:0e:b8:07:e1:ec:12:94:12:89:2a:
61:e6:6a:d8:aa:0d:54:d0:a0:c5:1f:a7:bb:77:94:
24:f0:26:bb:82:bd:ef:89:a3:81:2a:ab:69:44:5c:
e0:d7:66:13:6f:1d:a4:07:c9:b4:b9:42:b7:65:9a:
04:c3:a2:65:97:e2:6d:75:7f:f6:4a:c7:b4:1f:b3:
05:24:2f:fb:7f:f8:46:3d:83:bb:4f:c6:87:3f:fd:
99:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3F:FE:9E:04:B1:54:F9:93:E9:94:33:90:0F:11:00:2E:1F:72:8F
X509v3 Authority Key Identifier:
keyid:CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:08:3c:08:7b:4e:47:60:95:bd:e7:e3:6a:40:ab:9a:4c:e2:
08:35:8d:2f:9d:20:4e:f8:e4:e7:41:10:5a:82:3e:99:86:5b:
83:7b:56:a2:eb:d6:57:0b:bb:a1:1a:af:ae:42:e6:5c:ca:a0:
0b:38:ab:70:24:25:06:fd:25:f4:94:25:d2:cd:0f:87:88:0a:
8c:74:bc:f7:37:9f:ae:e3:61:77:35:54:9d:23:15:db:ba:e6:
49:30:30:6f:c8:30:4f:93:28:2f:60:c7:4e:69:99:d0:df:2d:
84:61:0d:67:de:b5:07:87:10:74:27:ce:21:fc:52:0a:18:50:
d1:c0:6a:9b:71:6a:b7:a8:72:e6:ed:8b:af:cc:1d:b7:82:2c:
28:91:37:03:34:91:c2:76:77:4a:1b:92:15:01:3b:3e:1a:1f:
b5:6d:c4:69:1e:fd:4f:c1:af:e1:f6:12:e3:2a:46:e8:1d:8e:
ab:81:03:10:dc:29:02:7e:96:18:a6:fc:70:9a:21:f0:5d:e7:
ae:b6:b6:e9:a9:d6:2a:97:61:3a:f1:16:a7:4a:6e:e7:56:30:
67:74:37:dc:1b:68:73:cd:53:4c:94:1e:4a:b9:f5:cb:0d:51:
c3:33:7a:63:1f:87:2f:09:7e:02:45:47:f5:07:33:05:69:bb:
7e:ba:8c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:06:08 2026 by rpki-client