Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
File: zpTDHhXfS3pg5dQN86rBhS6Np0s.mft (raw, json)
Hash identifier: Phtod97rUmaXPCZcTdGythqwezeIh4xPGWN40Efgq9s=
Subject key identifier: 56:BA:C7:09:F0:77:0A:E8:ED:ED:76:48:A2:85:BD:CC:07:A9:3C:34
Authority key identifier: CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
Certificate issuer: /CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Certificate serial: 019CAEA2DF8CA72B9C8754838DDA6B15A164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
Manifest number: 0A45
Signing time: Mon 02 Mar 2026 13:00:35 +0000
Manifest this update: Mon 02 Mar 2026 13:00:35 +0000
Manifest next update: Tue 03 Mar 2026 13:00:35 +0000
Files and hashes: 1: 2asX8qOaxpLjyUU4myYKc0Ej3nA.roa (hash: xKHvXSgALDQpoGTmF3KkZGpVCQ/XwWuRiWZZZUlqzJ0=)
2: zpTDHhXfS3pg5dQN86rBhS6Np0s.crl (hash: m0ysVl/ywahEgciKc3M8aEU5X+8ki0yLq50h6TYr2/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a2:df:8c:a7:2b:9c:87:54:83:8d:da:6b:15:a1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Validity
Not Before: Mar 2 13:00:35 2026 GMT
Not After : Mar 3 13:00:35 2026 GMT
Subject: CN=56bac709f0770ae8eded7648a285bdcc07a93c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:61:59:90:9b:8e:1d:50:f9:01:f9:91:b1:
5f:65:0e:94:51:1e:99:7d:7b:83:3d:6e:68:cc:ca:
b5:5b:08:2e:0d:7e:9c:0d:b5:23:33:ce:d6:43:75:
cb:2e:68:99:96:5b:40:5a:bc:05:09:86:91:6c:c9:
14:d1:98:f3:88:cc:8e:03:28:a8:92:49:d0:d9:96:
98:aa:48:ce:12:b5:2e:86:95:5c:32:1d:51:d4:ae:
82:02:23:fc:f5:99:9f:6c:61:52:e2:c6:6b:37:04:
b2:a4:1a:87:0a:2c:be:b1:71:39:32:33:e7:e7:07:
fc:c2:8d:bc:16:f8:31:eb:57:05:13:8d:ce:de:13:
35:dc:14:d2:6c:92:d4:86:89:97:d8:ef:4c:44:69:
8d:74:57:a9:eb:4b:ef:47:ca:ff:d9:c1:bf:0f:ba:
a8:c9:cd:76:41:7c:fe:f5:6e:1e:4a:2c:55:fb:bb:
83:0b:fa:39:59:9e:fa:03:d5:45:e2:78:1d:d7:f3:
3f:9c:8a:e6:b9:a4:98:4c:b5:06:fa:b2:7e:23:1a:
b9:cc:d1:0f:1f:9d:fc:6a:72:5a:ab:43:d8:2b:f1:
b9:6f:68:5f:49:a3:fb:80:e6:83:62:26:fe:4b:d9:
d7:e7:32:40:b9:5c:10:a7:76:b4:99:eb:2e:c2:b6:
c7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BA:C7:09:F0:77:0A:E8:ED:ED:76:48:A2:85:BD:CC:07:A9:3C:34
X509v3 Authority Key Identifier:
keyid:CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:3e:25:fa:e2:30:ec:6b:ba:b7:53:fb:15:b7:11:90:08:36:
65:16:2b:eb:0a:1d:27:b4:9f:45:cf:96:ab:6c:cf:c0:dc:49:
8c:34:0f:31:81:37:5e:f8:b2:15:d0:ab:d9:9f:e6:38:26:2a:
9a:1d:15:50:30:24:1d:23:02:80:5a:5b:fc:04:79:f0:00:16:
cc:1d:b4:7c:6e:52:03:9c:dc:71:cb:73:03:76:9a:eb:46:28:
a4:36:04:7a:a2:b1:a9:bc:16:ab:82:61:89:1c:bf:95:1b:26:
d3:69:78:4c:3d:d3:2c:13:a0:cc:6e:af:d2:b0:49:99:27:f1:
ad:2a:76:45:da:2a:26:a9:cb:41:b7:50:f0:64:4b:6a:fa:a2:
f4:59:5d:1a:ae:cb:22:a9:b7:0e:f6:49:fd:e4:2c:ca:28:3c:
0b:2c:54:ae:44:e0:54:8c:5a:ea:41:98:4f:ee:19:32:5f:e8:
d2:0c:da:88:63:ce:8e:b5:a7:11:75:47:af:e4:a7:08:12:72:
78:01:47:d4:6c:67:78:1c:fc:1a:4b:da:b0:5e:15:c8:2d:f8:
74:ca:d4:64:e4:d1:f7:e0:39:e2:14:19:ff:61:46:bd:5b:31:
1f:e2:b8:29:28:c3:00:bd:7f:65:b9:01:1c:a3:a3:08:d1:13:
f4:39:fb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:08:48 2026 by rpki-client