Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
File: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft (raw, json)
Hash identifier: HGDeFYGxdN4S0ISbKMgW5qUbnHQ1oGS8pXKawDYR5oE=
Subject key identifier: D1:84:53:82:E6:54:70:4D:92:7B:59:25:71:2B:16:21:02:D0:F2:9C
Authority key identifier: 65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
Certificate issuer: /CN=65121c3f9207a37345e38702c89d179bf444aa08
Certificate serial: 019CAAC6A915875DFF16A051FA80BD1C6CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 19:01:11 +0000
Manifest this update: Sun 01 Mar 2026 19:01:11 +0000
Manifest next update: Mon 02 Mar 2026 19:01:11 +0000
Files and hashes: 1: TL1A_qeZFLWPpsnbfA9cmU0ctYM.roa (hash: Q8nTZN24u9mJs2w8KPuIp5t3PveHdtJEuDtOyRjriNk=)
2: TOJ03U-pk8ZKfSmj2VROvQgDtnY.roa (hash: EpZhvdW8kSRP3l2H/Fnes0x88lVH2bOzwjHn3A0hFLU=)
3: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl (hash: ZyTj3xS4kz+aXZXlWVJ9oDL0fMFLA6NWpqlE/H4NG24=)
4: h6wK8goVzqXqo6disZWfZSM1h-0.roa (hash: //0LSaRijgEKQyrnrrd5pf5seu/x01T0Rwf4/noBXTQ=)
5: w7NAr2u_fskJOiH5ZL_DBig50oc.roa (hash: S337FZgQBWH3kGuKNK3U/HNaRNmRFoOB+d+zWxnLtV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:a9:15:87:5d:ff:16:a0:51:fa:80:bd:1c:6c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65121c3f9207a37345e38702c89d179bf444aa08
Validity
Not Before: Mar 1 19:01:11 2026 GMT
Not After : Mar 2 19:01:11 2026 GMT
Subject: CN=d1845382e654704d927b5925712b162102d0f29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:04:2a:8a:9e:59:eb:02:16:72:0d:e2:b2:b0:
c0:2c:15:d7:2b:75:ff:3f:d5:09:e2:4a:de:f8:ab:
06:2f:92:e3:e6:9c:98:29:06:48:ec:30:b6:00:e9:
51:0c:fe:5e:04:01:15:dc:61:0e:e7:36:57:48:96:
1b:84:da:4c:b6:5f:90:8d:bb:d4:d6:24:32:42:5e:
4e:97:7d:33:f4:e6:a8:f1:99:8c:68:21:7a:5e:bc:
f1:7f:12:d9:08:09:f5:84:f8:b3:b1:d4:94:5a:d6:
38:30:59:7f:a0:b8:a5:46:76:32:4a:23:83:69:8a:
c2:de:93:f3:ce:de:94:56:82:f3:2e:da:b4:01:1e:
79:8a:24:3b:3c:01:79:f1:56:f1:20:d2:03:68:ce:
a0:dc:de:3d:1e:f9:ce:c3:be:aa:d4:31:c1:f4:c1:
76:fd:af:39:63:02:3f:8d:ba:9d:a8:21:15:f4:db:
5f:a2:27:c3:65:1b:fb:51:18:0b:dd:02:e1:81:4e:
7a:a5:04:e8:e1:d6:63:07:5c:f6:23:9e:90:86:30:
d8:af:ed:93:f3:d2:b7:e6:85:dc:5a:8b:c7:d5:e5:
b4:d9:70:41:97:e9:7a:53:26:8e:4c:11:a1:db:a3:
31:bd:c1:18:17:d4:83:96:35:9c:93:61:79:90:0f:
64:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:84:53:82:E6:54:70:4D:92:7B:59:25:71:2B:16:21:02:D0:F2:9C
X509v3 Authority Key Identifier:
keyid:65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:42:9e:aa:ca:e2:3c:a7:d2:64:8f:78:f7:6a:a6:cf:86:a1:
b1:2b:90:81:9b:17:51:85:e6:90:81:1f:d5:89:3f:8e:59:9c:
39:0a:99:9d:ba:aa:f6:c5:d0:1b:43:bd:b0:00:56:bb:78:ba:
e3:dd:0c:fb:9e:4e:3c:b3:c8:18:d0:ab:a5:6a:aa:3f:91:2a:
b7:66:dd:bc:d7:15:31:11:cf:ad:79:20:c6:d7:d2:fc:96:98:
3a:b2:52:e5:6c:ac:1e:4f:af:b9:8b:d8:e8:b2:cb:a7:ba:90:
82:65:26:68:6b:ca:43:9f:eb:cf:dd:e8:4b:15:1e:e8:33:1f:
11:1c:b3:92:60:0b:57:ad:fa:7b:d6:c4:9e:d5:01:49:ae:5b:
51:e4:99:e3:00:18:f9:c7:2b:ad:9a:50:05:c0:7d:19:41:b4:
99:a7:4b:16:38:4b:25:a5:3d:5e:ea:00:20:d2:7e:c3:16:ca:
1e:7f:87:0e:1f:7c:80:40:e4:f1:d8:a9:5f:a2:43:01:58:41:
97:55:c6:fc:a5:93:28:1c:39:f9:d6:26:a9:7e:4b:7e:fc:1b:
30:13:0b:79:dd:1d:7e:37:0b:c1:0c:d3:52:91:41:9e:27:20:
87:68:76:3e:37:45:a6:e1:a8:aa:ff:58:24:d3:d0:99:9f:6a:
e1:53:2a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:40 2026 by rpki-client