Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
File: ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft (raw, json)
Hash identifier: vkVghJZ+hF9Ehh1USqZAL583ZL1Thsco/wQaVPs424Y=
Subject key identifier: F1:31:89:CF:85:5F:E4:89:21:A5:7B:E5:7E:C0:4D:95:CE:E0:4D:F6
Authority key identifier: 66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
Certificate issuer: /CN=66259dea3e9cae6e819588c5c913f02d4410398b
Certificate serial: 019CADC859B27A5C6206E30FA5B34505C9C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
Manifest number: 1698
Signing time: Mon 02 Mar 2026 09:01:54 +0000
Manifest this update: Mon 02 Mar 2026 09:01:54 +0000
Manifest next update: Tue 03 Mar 2026 09:01:54 +0000
Files and hashes: 1: ElW47ObyfnNKPgKpwIJenZynEps.roa (hash: MYYtJ2cX574IGimZRbIB/INbKI/GwnvZia+SyQYKKgY=)
2: ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl (hash: n4/mnuRNYjctUN0cMK6Pejw8oD6LiInWjCZ7OtYzjGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:59:b2:7a:5c:62:06:e3:0f:a5:b3:45:05:c9:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66259dea3e9cae6e819588c5c913f02d4410398b
Validity
Not Before: Mar 2 09:01:54 2026 GMT
Not After : Mar 3 09:01:54 2026 GMT
Subject: CN=f13189cf855fe48921a57be57ec04d95cee04df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:53:db:e2:2c:2e:15:50:57:25:9a:ea:ea:77:
bd:7e:f2:1e:d0:37:73:b3:58:e3:c6:9d:43:8d:b1:
66:7a:24:df:9f:e6:b1:89:7b:50:12:5c:ff:68:e3:
95:03:51:89:26:ee:5c:f8:2d:20:8f:a8:cf:60:f8:
67:46:85:f6:71:70:e7:3e:3f:da:5f:ff:df:94:0c:
7c:af:93:ca:56:f6:dd:21:0d:c6:f4:21:42:86:0b:
78:4c:8b:e3:23:91:64:9a:6b:c0:09:3b:e0:05:20:
3e:31:7d:1b:9f:a9:2d:8c:9d:e2:7a:b5:a0:cc:30:
8f:ed:9e:6e:d1:5a:0b:2a:cf:d2:3d:b2:61:b0:a1:
18:f3:2b:5d:51:30:16:a0:48:f9:e9:cb:7d:a4:32:
41:43:0b:2e:4a:b3:70:c8:ab:57:51:fd:3e:e6:a8:
ab:9f:19:6c:c7:e4:57:28:f6:b6:8f:ce:3c:fe:f1:
d8:a8:94:62:bf:23:63:e9:80:46:07:bb:53:fb:6a:
d8:c9:86:3b:61:57:58:b3:47:eb:19:39:78:1e:0b:
a2:b3:74:0f:53:48:41:9f:97:5f:8b:d8:b8:b6:1d:
0d:6e:2e:3c:40:9d:64:17:c6:60:f0:8c:e6:b0:20:
70:b4:8f:6c:b1:6f:6c:6b:81:51:f8:3b:de:07:d2:
5b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:31:89:CF:85:5F:E4:89:21:A5:7B:E5:7E:C0:4D:95:CE:E0:4D:F6
X509v3 Authority Key Identifier:
keyid:66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:da:90:8b:b5:e6:95:e4:19:3b:39:60:10:1a:fd:96:2b:31:
c4:73:42:f1:63:84:b9:48:f6:67:5d:31:a8:c3:9e:fa:d4:4c:
6a:0d:0e:71:a6:71:6b:d9:98:e8:25:99:54:a1:2a:f6:2a:fd:
37:fd:15:fd:51:d2:f1:f7:a5:43:7b:4c:4e:02:96:0e:bb:bb:
fd:51:f9:20:5c:21:35:47:3f:fc:3d:95:cc:ed:ab:b7:e7:c1:
7c:4d:ec:50:a3:49:97:cc:18:99:46:95:6c:3f:a7:d8:e2:3c:
a8:9b:a1:96:4c:1b:b1:70:32:aa:9a:76:52:15:0f:03:2a:0f:
47:0d:06:0f:7c:ba:13:88:fc:39:28:bb:b1:1b:bc:34:38:28:
6e:1b:76:41:5f:23:f2:40:f0:3a:78:97:f5:d2:f8:75:6b:cd:
29:8e:df:b4:63:21:4e:ec:15:43:92:e0:2e:ef:17:32:fb:fd:
e7:6a:f1:88:56:1d:27:1d:9e:c7:0d:12:6b:a0:9b:3d:35:cb:
8b:5a:67:44:c1:0b:8e:5c:38:03:1c:17:07:a1:b8:93:40:2e:
e5:4d:0b:f0:ad:6a:29:2d:72:85:e7:c0:da:7d:70:e7:88:7e:
56:05:97:65:14:d7:b2:97:ad:cb:cf:99:84:f2:82:2b:da:c4:
f4:7f:39:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:56:09 2026 by rpki-client