Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
File: zpE13-0LtjNdGd3W1-mfSK--PAE.mft (raw, json)
Hash identifier: qHpwZJ37rPqL5hgDOBu+0LcQx2MKvkvUDfw2EY/euow=
Subject key identifier: 98:50:35:9F:3D:54:DF:57:6D:04:0A:42:18:08:B0:76:AC:C2:74:E4
Authority key identifier: CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
Certificate issuer: /CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Certificate serial: 019CAA58F4985241B2AF79E7084610FA7819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
Manifest number: 14AD
Signing time: Sun 01 Mar 2026 17:01:22 +0000
Manifest this update: Sun 01 Mar 2026 17:01:22 +0000
Manifest next update: Mon 02 Mar 2026 17:01:22 +0000
Files and hashes: 1: JsGq180cWpQwLGA873fpca8Bxj4.roa (hash: RBi5C0yGtp+dilj2CHlX7dy6n4QE4ZE7FypDUnxLwcU=)
2: _ugkR7EVVfxByxX4xFuzJ-ICxnM.roa (hash: k76p+M7xU4ZojZboTeMRkkpRvcXvQeBc65zI5mAjkww=)
3: zpE13-0LtjNdGd3W1-mfSK--PAE.crl (hash: I6RWQfiqk5OVdfHEZr12PJ4iTvTkR1OHkUcX5V/UsEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:f4:98:52:41:b2:af:79:e7:08:46:10:fa:78:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Validity
Not Before: Mar 1 17:01:22 2026 GMT
Not After : Mar 2 17:01:22 2026 GMT
Subject: CN=9850359f3d54df576d040a421808b076acc274e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e9:4e:c0:55:a2:5f:df:e1:a0:d7:27:74:c2:
73:d7:50:20:41:ff:64:5d:5c:b5:90:66:fb:55:03:
43:23:e4:b6:3f:72:57:6c:fe:98:53:d0:0f:10:02:
2e:a9:99:59:b7:40:7e:4d:32:c3:26:a7:8b:14:46:
30:da:54:15:cf:05:eb:6e:5a:fe:8a:3e:f2:e7:8e:
c8:77:f0:72:11:7c:85:b0:6c:07:0d:e9:79:2f:67:
ab:94:d8:47:d4:6d:02:23:dd:a3:f0:07:6f:f0:7c:
f7:28:ca:4b:97:58:f2:ed:50:4d:e4:60:27:71:ce:
cd:45:17:98:42:48:5b:03:01:60:d0:d4:60:0a:b2:
cb:1b:99:69:b7:a2:2c:10:74:ab:8a:cf:66:13:6b:
66:75:e1:72:ea:7f:c5:ed:77:29:d7:24:f8:02:96:
b8:f2:25:50:12:06:25:9f:d1:d0:1e:58:09:2f:40:
3b:45:1f:cf:96:cd:af:59:a0:eb:07:62:df:e2:e2:
4c:b6:f4:ea:ea:85:13:9e:4b:ff:8e:b8:8d:bb:99:
6e:dc:db:cc:36:76:e1:0b:aa:e3:6c:de:b3:fa:2b:
52:4c:41:61:a3:fe:88:f0:da:45:8e:fc:a1:9b:87:
23:97:b8:c3:8f:75:b5:ef:3c:d1:9c:ca:74:02:47:
fe:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:50:35:9F:3D:54:DF:57:6D:04:0A:42:18:08:B0:76:AC:C2:74:E4
X509v3 Authority Key Identifier:
keyid:CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:43:36:ae:7d:f9:27:d1:05:b3:7d:46:24:b8:0c:96:ca:a5:
fd:c4:78:6f:f7:7f:c8:36:58:e1:2f:69:fc:f6:22:29:c2:ec:
43:13:3e:e1:7b:6a:ba:96:75:56:5b:1e:5b:81:7d:01:cc:0a:
c1:97:82:18:90:02:68:87:d4:34:eb:ea:e7:dc:21:98:5a:77:
d5:b3:51:19:dc:f1:58:1d:56:cb:19:be:b3:67:51:3b:97:18:
d3:2f:e2:55:fa:02:2b:52:b7:d2:52:4a:9c:d5:70:87:97:0b:
68:8e:21:03:85:6f:39:40:90:2c:ba:aa:39:e7:ef:7f:a3:76:
27:95:f4:01:a9:90:a9:13:a4:2f:47:12:d6:e5:33:85:56:1c:
db:67:a4:ef:24:1f:a9:aa:9d:70:7b:f5:e5:7a:87:4c:70:b5:
28:59:ee:96:59:63:d4:fe:26:88:e9:b4:69:97:1f:a9:38:03:
7b:d9:06:a3:50:9a:3f:ac:dd:4a:2a:5b:ec:2f:c2:4f:6c:a5:
23:2a:c2:9a:33:bf:11:95:47:12:aa:96:b9:44:62:b8:bd:27:
97:47:ed:3a:be:9a:23:3c:a1:12:95:f4:d1:66:69:f0:c2:df:
02:8b:f9:50:99:44:c1:48:d6:48:b1:27:57:2a:83:52:33:f0:
86:96:0d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:18:05 2026 by rpki-client