Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
File: Ze3JFheq3wwsx_H115bb237YWQ0.mft (raw, json)
Hash identifier: +XV0IJAWye7luLgk26ib7OAYG9XymsD8xWBc/FlR1/U=
Subject key identifier: DD:48:C1:94:15:67:97:5C:67:18:31:96:D7:95:F8:CD:5E:56:5A:66
Authority key identifier: 65:ED:C9:16:17:AA:DF:0C:2C:C7:F1:F5:D7:96:DB:DB:7E:D8:59:0D
Certificate issuer: /CN=65edc91617aadf0c2cc7f1f5d796dbdb7ed8590d
Certificate serial: 019CAC0FACB2E018C6B0908882416A86B848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
Manifest number: 0811
Signing time: Mon 02 Mar 2026 01:00:34 +0000
Manifest this update: Mon 02 Mar 2026 01:00:34 +0000
Manifest next update: Tue 03 Mar 2026 01:00:34 +0000
Files and hashes: 1: Ze3JFheq3wwsx_H115bb237YWQ0.crl (hash: YaJBf0Na7DIJpjw73YphT3WR/kXQHR04fS1LESTL0K0=)
2: sFVqpHtt4QH5hTgc8rcQ47NJPQg.roa (hash: fR+JTFzmOCy3kHLWAX1K1ruMHrlyFg5jdcK5x7rhFac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:ac:b2:e0:18:c6:b0:90:88:82:41:6a:86:b8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65edc91617aadf0c2cc7f1f5d796dbdb7ed8590d
Validity
Not Before: Mar 2 01:00:34 2026 GMT
Not After : Mar 3 01:00:34 2026 GMT
Subject: CN=dd48c1941567975c67183196d795f8cd5e565a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:69:07:1a:03:09:4b:d8:58:d0:88:80:ca:fa:
bb:14:5f:9d:7e:79:be:77:e2:a7:d7:0f:b1:b9:44:
d7:28:56:27:f5:ed:cb:b5:a6:77:98:23:82:bb:cb:
27:fc:8f:a6:e3:cb:e9:f7:47:32:95:16:47:a2:75:
b4:cd:e6:e8:f7:ef:8d:e5:f4:70:89:8d:1b:0d:3e:
c1:f3:e6:57:de:b8:90:02:87:5f:56:0d:75:61:63:
da:4f:0e:d7:0f:37:fd:3a:5c:b6:c2:e8:f0:fa:8d:
cc:db:14:ba:0c:79:bf:c7:9e:1c:cc:53:87:a8:e4:
cb:5c:52:99:0e:80:b5:bc:ec:58:7c:be:16:f2:80:
b5:78:57:3d:08:99:ef:68:7d:38:73:82:7f:eb:1e:
0f:db:8d:14:10:7f:ed:27:9d:33:89:8a:35:ed:98:
9b:ce:e7:60:cd:f4:16:8c:bc:64:7d:a7:89:c6:98:
2f:f2:ab:33:60:df:b6:60:b5:29:68:5a:b5:af:0a:
c8:33:f8:68:48:27:c4:39:41:79:da:2f:58:16:a9:
ed:6f:cc:a7:85:76:c1:8e:b8:9f:b5:b4:68:09:27:
f1:ad:a2:37:16:cc:62:51:ae:ac:f5:63:9b:27:c1:
4d:51:00:ca:1d:e2:ca:d7:fa:61:2a:c0:c5:61:8f:
22:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:48:C1:94:15:67:97:5C:67:18:31:96:D7:95:F8:CD:5E:56:5A:66
X509v3 Authority Key Identifier:
keyid:65:ED:C9:16:17:AA:DF:0C:2C:C7:F1:F5:D7:96:DB:DB:7E:D8:59:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:dd:db:3c:7d:54:df:89:54:a3:e7:5b:77:4d:d6:a8:1d:7e:
14:bc:80:48:88:fe:4d:0d:6d:6a:e4:a6:89:c0:68:0b:b5:e4:
01:55:8e:d3:2f:6c:37:70:1f:4f:63:d6:8b:c0:25:9b:bd:eb:
a0:e1:be:8e:41:2a:6d:a2:9a:b8:aa:03:17:53:bd:9c:b3:18:
7a:68:bd:ca:18:35:0f:51:19:53:0c:dc:49:df:1a:da:7e:43:
d7:2c:35:83:a7:47:c1:f1:b3:ce:b0:a1:55:3e:f4:df:03:55:
d6:82:99:ab:07:64:ea:3b:78:29:e1:03:fc:d7:55:ce:2b:b2:
81:56:fd:cb:43:d8:e5:2e:b8:fb:f4:56:53:a7:0b:12:64:03:
3c:2f:f1:45:36:02:84:02:fb:6a:c8:cc:8c:5b:fa:26:6e:61:
5e:ea:bb:f0:fa:d3:8d:5d:d6:b8:84:1b:df:69:ea:12:0a:2c:
9d:79:57:2d:6e:48:8c:30:ed:5c:fd:4e:e4:cb:8f:c2:a4:f6:
6d:3b:02:2a:a5:57:74:e0:2a:ab:e3:02:fa:10:5d:e5:ec:45:
b5:f2:3d:fd:63:e4:c0:2d:6a:d7:19:d7:e5:5a:fa:16:08:70:
d1:5e:cc:60:23:b4:b2:6f:8f:c8:37:3f:7f:b5:0f:84:47:88:
98:bd:47:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:05 2026 by rpki-client