Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
File: zQPRPdJvAESig_xqEedWoqK1aRs.mft (raw, json)
Hash identifier: owy2JihK2XozFvbJuMCj4qiunwIF5JBVg4BBM+yF4o4=
Subject key identifier: 22:6F:3B:22:46:0C:DA:D7:03:F8:5C:41:11:26:2C:40:C7:04:5A:7C
Authority key identifier: CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
Certificate issuer: /CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Certificate serial: 019CAEDA2C32D5ED685EC04FE9D534200596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
Manifest number: 034E
Signing time: Mon 02 Mar 2026 14:00:59 +0000
Manifest this update: Mon 02 Mar 2026 14:00:59 +0000
Manifest next update: Tue 03 Mar 2026 14:00:59 +0000
Files and hashes: 1: DV_1PU5sghttOAyD5Fk0auja6M4.roa (hash: vyYX2XFHKs4PfXvL2MDa+XaKNUQzIY/+9Y9TmVp9CiU=)
2: zQPRPdJvAESig_xqEedWoqK1aRs.crl (hash: ttjCRb5ZHsct5P3/oZDBNpwlbsT/thO1vGyISVa92HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:2c:32:d5:ed:68:5e:c0:4f:e9:d5:34:20:05:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Validity
Not Before: Mar 2 14:00:59 2026 GMT
Not After : Mar 3 14:00:59 2026 GMT
Subject: CN=226f3b22460cdad703f85c4111262c40c7045a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:73:64:5f:d0:e2:97:4d:be:ad:12:e2:ba:
c6:83:67:95:55:f3:c0:df:d5:72:86:81:b3:ba:a6:
08:fe:33:15:66:5e:e7:1f:59:0c:b4:4c:3a:29:08:
8b:75:ef:af:8f:90:bb:c5:ca:5c:14:52:28:82:96:
76:83:44:89:ce:fd:c1:53:14:36:c8:ec:8a:86:f1:
9e:17:2d:4d:7d:d2:41:e0:f2:bc:22:7d:b6:5f:53:
3d:9c:6f:5b:57:e5:00:3b:84:43:1c:2f:4e:6d:82:
3c:a4:c9:be:37:64:e7:d6:56:07:77:e7:7c:6a:71:
2b:96:ba:bf:5e:88:87:5c:a8:b2:52:52:71:8c:6a:
d0:b6:28:1b:df:15:e2:da:b3:5f:5d:56:ae:97:5a:
84:06:d0:f3:48:7d:f1:ec:07:d8:2e:70:dd:fd:ba:
11:d8:b1:41:65:2b:cd:fe:c1:18:58:8f:dc:43:6d:
66:3f:c2:de:64:45:ca:ed:2a:c8:cf:a3:79:36:d5:
d2:df:c1:fb:47:7a:59:03:ab:3e:6e:47:09:fd:02:
8a:52:2a:a6:21:23:d6:47:2d:4c:d4:13:7b:af:f6:
cf:cc:62:cd:2c:5b:a6:98:23:2d:24:8a:37:28:dc:
aa:fa:bd:84:4e:21:7c:21:54:37:3a:8c:83:86:0a:
37:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6F:3B:22:46:0C:DA:D7:03:F8:5C:41:11:26:2C:40:C7:04:5A:7C
X509v3 Authority Key Identifier:
keyid:CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:95:23:81:41:e1:39:1d:59:ff:30:3e:75:e5:de:32:23:61:
ff:06:fa:6e:d6:5e:61:24:d1:35:ef:f3:88:fd:3d:8f:93:60:
92:50:70:62:9b:fb:d1:5c:82:12:f3:e3:f6:52:00:b0:eb:fe:
10:d7:fb:db:0d:c2:39:47:47:38:40:3d:82:c2:0f:7c:03:5f:
d8:a3:ad:3a:26:43:e0:c1:ac:4c:44:86:42:10:93:cc:9f:dd:
a2:0a:4d:6a:80:92:40:79:5f:84:96:5f:e9:32:65:db:d5:63:
e0:c9:7d:b6:31:7a:bc:3a:42:72:ab:c5:b3:db:63:86:ee:ab:
70:d3:00:60:52:60:ae:fa:e6:ee:e7:10:e1:c6:63:16:a3:9e:
21:a6:52:26:d4:8c:d1:96:1d:e9:93:48:15:54:f3:1a:28:a2:
1d:a9:ea:1b:5d:ce:34:7d:53:1a:1d:4d:c9:08:32:ac:eb:b5:
01:c1:2d:61:4a:37:e3:b2:6f:0c:cd:2b:0e:09:da:67:80:93:
ef:d8:16:c2:eb:31:03:01:b1:63:c7:e7:02:5c:0b:f0:65:0c:
9d:7e:77:9f:e4:ae:c5:5c:15:b4:7e:08:7d:d0:36:c1:96:d1:
94:fd:5a:0e:0a:99:a2:77:44:38:99:c6:f8:b4:dc:cf:dc:ff:
e3:1c:90:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:58 2026 by rpki-client