Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
File: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft (raw, json)
Hash identifier: KlgKn9szVcapYeoUtvn7+5lPrcNuYi8tPrjOfZTi6+M=
Subject key identifier: 99:30:C1:B1:6A:6C:65:31:EE:F9:8A:4F:2A:C3:92:76:C0:78:36:C7
Authority key identifier: CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
Certificate issuer: /CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Certificate serial: 019CAA21DAD01C6316BD3C79079A9D91479A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 16:01:11 +0000
Manifest this update: Sun 01 Mar 2026 16:01:11 +0000
Manifest next update: Mon 02 Mar 2026 16:01:11 +0000
Files and hashes: 1: TAemyk33p1zXgyxiSJqWPeQVynw.roa (hash: qzyHhOuBo7tPm0yMPXt6srTNFtIZysUY2o24I/uqBiU=)
2: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl (hash: q7eWgVHiou0NlKJsCjXZod72c/LeDbSwuHIWf6p4AIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:da:d0:1c:63:16:bd:3c:79:07:9a:9d:91:47:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Validity
Not Before: Mar 1 16:01:11 2026 GMT
Not After : Mar 2 16:01:11 2026 GMT
Subject: CN=9930c1b16a6c6531eef98a4f2ac39276c07836c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8b:4b:d4:b8:1d:c1:e6:53:9f:ec:fe:7d:45:
b8:2b:d4:3b:68:d8:36:f5:d1:33:9e:34:e0:19:90:
82:20:4a:41:22:98:c5:4b:77:59:8d:02:1c:df:b0:
4b:4a:03:cc:ec:02:38:11:7a:7d:26:86:be:c9:a9:
5c:2e:a5:14:82:cd:c1:00:99:ef:22:7d:2c:58:d7:
ce:a7:ba:a6:0f:76:9c:8a:e2:c9:dd:14:ee:82:fb:
04:a7:90:fb:15:ea:e1:89:9a:eb:16:92:96:e2:f3:
79:03:b3:b6:3f:1a:71:80:91:1c:7d:dc:da:91:1e:
c3:b6:76:00:45:4d:ca:b5:11:fd:73:f2:74:77:38:
c1:36:4d:f5:83:16:f6:58:07:75:d7:02:74:93:be:
38:61:af:ae:f5:28:60:c0:d5:04:f6:46:89:5b:27:
27:50:e9:2e:4a:96:5a:d2:87:ed:72:ce:ac:a7:20:
82:62:b8:a4:8e:9e:6d:5c:52:6d:b8:ba:7c:19:c2:
e6:46:fa:6e:b5:b1:a0:cb:4f:09:3a:7d:01:31:b8:
58:6c:38:87:21:9a:3c:30:a4:4c:ba:35:c0:d9:45:
cf:f3:23:85:fd:1d:48:c3:47:39:d5:60:ca:b9:b9:
16:4a:0b:08:c3:4c:96:4a:8d:e1:9c:81:de:b8:ab:
c4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:30:C1:B1:6A:6C:65:31:EE:F9:8A:4F:2A:C3:92:76:C0:78:36:C7
X509v3 Authority Key Identifier:
keyid:CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b4:8c:aa:bc:28:fa:b2:54:3c:09:0d:35:24:b6:55:07:87:
54:67:e3:aa:86:79:26:78:56:c8:8c:9d:1c:6e:61:20:f6:a3:
24:df:ad:f2:9e:21:97:c2:dc:00:45:65:43:41:33:de:fc:49:
18:35:c8:14:27:79:32:9a:80:9f:36:72:e9:11:3f:29:51:c3:
56:54:87:9d:8c:e8:53:05:b4:88:c0:aa:74:9e:4f:eb:92:f8:
f9:90:4f:01:90:40:c4:23:af:b9:4b:df:63:70:fb:82:c2:65:
26:46:1b:73:b3:03:c6:d7:ec:89:f6:df:d2:76:02:78:c6:fc:
1a:29:ed:4e:d4:0b:15:ca:5f:f6:aa:54:a6:27:b2:c6:15:29:
57:da:0f:05:b3:cf:4a:d5:ec:50:12:3c:38:19:fc:33:c3:9b:
ea:65:6c:37:5d:00:97:eb:66:8e:63:ca:15:68:2a:a8:6f:ef:
28:37:46:2e:0d:1e:86:c4:d1:0b:f1:7c:99:30:d8:c7:6f:45:
63:05:82:a5:ef:df:f1:af:64:99:a6:f7:5d:4c:3e:d0:6b:ce:
86:39:98:2a:7d:b9:5a:ae:a2:c4:72:1e:ce:1a:69:8b:44:59:
6a:23:00:0f:2b:62:7a:5f:89:2c:f3:28:06:46:89:f0:69:37:
ba:35:f8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:27:50 2026 by rpki-client