Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
File: zQYCONBmjUWgQWGKxd92f1mgxK4.mft (raw, json)
Hash identifier: mXTF+i3//iWEc2HUsLA3Go8F1XXv833eM0RZ+C2Rt+4=
Subject key identifier: 96:16:9E:71:D0:FB:D3:60:41:A6:77:62:CA:92:C3:8C:16:0E:19:9F
Authority key identifier: CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
Certificate issuer: /CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Certificate serial: 019CACB4B13722586D7CE52A2E2AE0BBCBA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
Manifest number: 0ED7
Signing time: Mon 02 Mar 2026 04:00:48 +0000
Manifest this update: Mon 02 Mar 2026 04:00:48 +0000
Manifest next update: Tue 03 Mar 2026 04:00:48 +0000
Files and hashes: 1: B0xeJ6OlptEzuwHkDKb2uLt1U_4.roa (hash: 0mnm00N6t5GT0+PQLMuChkiPF3X09nPjo6FNCsIiX9w=)
2: DHWxwhm5BstgQrswTpmXlNRqB68.roa (hash: U4MLvKfxIOpMtW85VWgOrj7JclXnEEYGlYHrxV44rNY=)
3: zQYCONBmjUWgQWGKxd92f1mgxK4.crl (hash: mGp+l5MPJ7vsJTBMddPAjZqK9oFaKdJwBE0i/YmTw+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:b1:37:22:58:6d:7c:e5:2a:2e:2a:e0:bb:cb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Validity
Not Before: Mar 2 04:00:48 2026 GMT
Not After : Mar 3 04:00:48 2026 GMT
Subject: CN=96169e71d0fbd36041a67762ca92c38c160e199f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:75:2b:2e:76:a2:49:ad:7d:c6:03:b6:48:
3c:9f:29:fa:f3:86:17:39:98:70:4b:c8:59:21:76:
52:f9:92:14:2a:f0:66:ae:0b:63:b7:d2:a8:df:b9:
15:4e:b0:37:e1:41:bd:4f:a7:ad:b4:5c:6e:5d:5d:
20:90:18:0f:b6:26:1a:27:92:a3:d9:89:fd:40:fa:
2f:07:e2:75:06:d8:b3:4f:24:5f:42:35:7f:fc:50:
42:a5:a8:ef:5e:21:27:df:42:db:01:b9:10:2c:b2:
37:db:02:ac:65:b5:9d:b2:00:7d:37:50:75:b7:d4:
be:a9:ff:6c:f5:91:47:9f:10:90:c7:02:6d:c3:5b:
b4:27:19:19:e5:52:09:67:b7:40:5c:5b:26:be:2b:
b7:82:b7:0d:69:2b:b7:44:cd:38:35:1e:c2:f1:07:
9c:b3:2a:58:8f:7f:fc:2d:ef:b3:cc:d6:44:fa:43:
31:a6:b8:b8:58:cc:b7:31:47:f5:33:36:26:c6:49:
5a:eb:7f:45:b5:f4:ee:c8:0f:4c:89:d2:7b:06:80:
ba:40:58:74:c7:bd:5d:04:ca:9a:da:49:47:92:32:
1c:8b:2b:c5:df:3d:5c:92:f1:07:70:19:0d:a5:77:
1f:0d:f7:6c:5c:ad:28:58:61:5e:8e:d5:34:57:89:
b3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:16:9E:71:D0:FB:D3:60:41:A6:77:62:CA:92:C3:8C:16:0E:19:9F
X509v3 Authority Key Identifier:
keyid:CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:6c:79:82:77:93:ec:55:b0:e9:f7:5a:4e:d8:a2:96:17:2a:
f5:62:62:ab:31:65:e3:dc:f7:06:dd:7b:5b:54:bc:f1:4c:5f:
93:8c:9c:8d:b2:0d:e6:a9:ca:0c:b8:b1:24:23:e2:1f:74:f7:
7f:1e:db:63:42:d8:b9:67:50:ea:cf:f7:a4:e0:71:cb:33:b3:
b8:49:37:ae:fe:7c:59:52:22:91:24:db:e3:e5:a0:49:47:43:
5b:8f:62:d2:9d:06:df:ef:3b:df:b3:09:d1:8e:ee:b2:7d:34:
0b:9c:81:fc:89:12:13:da:98:78:4b:f7:67:4d:50:90:5c:1e:
b5:90:66:1d:13:88:55:33:a8:88:08:be:ae:12:b3:b9:6e:f8:
33:a7:1d:cc:6e:de:58:96:e1:9a:ec:84:64:fc:e6:01:42:c8:
67:6a:1f:04:0a:31:d0:a6:7f:2f:4f:5c:53:f8:48:c2:83:90:
0f:ad:6a:a8:26:07:5b:76:f4:42:c9:11:53:a3:4f:d2:b9:2b:
2a:71:76:cf:01:b3:b2:53:0c:9e:39:bb:91:8c:9d:23:7c:33:
25:a0:94:71:f6:1d:76:85:3b:ea:af:2b:c9:03:9c:04:95:06:
3a:24:49:36:68:ff:6c:fc:42:d4:ab:07:e5:d0:bf:a0:cb:2f:
08:52:e7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:21:06 2026 by rpki-client