Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft
File: zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft (raw, json)
Hash identifier: phVtb3bCP8DnSQzKIVxKqobGsymfDzrEizBZetMx7rM=
Subject key identifier: FD:69:70:3E:CA:EB:09:EC:10:7E:DE:56:36:CE:8A:07:74:84:0C:7C
Authority key identifier: CE:A1:79:E4:F3:53:EA:9D:CA:F0:2F:37:A7:2B:75:0E:CF:A1:C3:54
Certificate issuer: /CN=cea179e4f353ea9dcaf02f37a72b750ecfa1c354
Certificate serial: 019CAC7DBBD66565C41A16F50D4509B7D348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqF55PNT6p3K8C83pyt1Ds-hw1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft
Manifest number: 10FB
Signing time: Mon 02 Mar 2026 03:00:47 +0000
Manifest this update: Mon 02 Mar 2026 03:00:47 +0000
Manifest next update: Tue 03 Mar 2026 03:00:47 +0000
Files and hashes: 1: mGIcxgiPYTdH4yLZmV0JBleuht4.roa (hash: OZj4BcogggilSPwT8xEb1QoBaX+3k88vX0bMKlFe0Qg=)
2: zqF55PNT6p3K8C83pyt1Ds-hw1Q.crl (hash: FJlCmcXOmS6Qgo3TZNEkCQ5D3YZjC91zLckFtV3X5Yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqF55PNT6p3K8C83pyt1Ds-hw1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:bb:d6:65:65:c4:1a:16:f5:0d:45:09:b7:d3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea179e4f353ea9dcaf02f37a72b750ecfa1c354
Validity
Not Before: Mar 2 03:00:47 2026 GMT
Not After : Mar 3 03:00:47 2026 GMT
Subject: CN=fd69703ecaeb09ec107ede5636ce8a0774840c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:80:17:a5:ba:03:21:ad:0c:9d:8b:b9:8e:03:
a3:89:a1:d8:06:6c:d6:bf:37:ac:a4:23:d7:87:89:
9e:5a:5f:f9:b5:48:90:c3:8c:16:20:d4:00:ae:20:
f8:50:80:3f:3b:b9:66:d5:b5:3d:3e:b6:b0:d5:ea:
c1:25:8d:d0:b4:dc:d9:2c:6d:2e:98:5a:ee:97:23:
42:9f:21:85:d1:da:1a:1a:4a:36:6b:36:b9:2f:c0:
f7:ab:a2:1d:38:f6:81:a3:c3:bf:a9:ef:89:2f:65:
a1:a1:8d:1d:2d:e5:5d:25:12:41:81:9d:28:80:97:
3a:4c:f7:4b:f0:8b:a3:9f:8a:51:56:58:3b:5c:68:
46:73:16:c1:28:65:89:49:72:a8:e8:03:45:50:cc:
84:78:2f:99:54:ab:32:95:96:3c:33:0b:24:10:18:
db:29:b0:d2:66:74:eb:53:7b:77:c7:69:8d:b5:43:
90:a7:79:09:42:63:82:c7:3b:b9:83:ca:64:17:2b:
f9:ac:74:30:1c:89:5b:58:c4:9c:1c:a4:92:d3:02:
8a:dd:5e:d4:3e:67:df:f2:43:3a:82:e0:3f:45:3b:
4a:d2:e9:d4:b4:7b:41:b7:a5:e7:e6:07:39:d7:43:
c2:98:51:60:26:80:f2:c9:c9:3c:a4:5c:40:c6:11:
88:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:69:70:3E:CA:EB:09:EC:10:7E:DE:56:36:CE:8A:07:74:84:0C:7C
X509v3 Authority Key Identifier:
keyid:CE:A1:79:E4:F3:53:EA:9D:CA:F0:2F:37:A7:2B:75:0E:CF:A1:C3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqF55PNT6p3K8C83pyt1Ds-hw1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:79:2c:b4:3e:bb:47:2f:c4:72:2e:7f:f1:b8:3d:17:11:be:
87:68:48:cc:9b:1b:2e:d8:2a:50:af:c1:03:d3:b3:17:fc:cd:
f4:08:82:0f:a4:6f:53:ad:c1:6e:42:23:70:dd:22:00:3a:52:
66:3b:ea:16:c3:5a:d2:83:ce:c1:34:be:da:a6:bb:7f:d4:5b:
1f:e8:c9:f4:10:86:51:fd:6d:93:03:50:0b:fe:71:8a:1a:b4:
70:87:59:ce:7b:e6:e1:d7:97:bf:a5:d9:b5:bb:b1:0b:90:46:
db:06:0d:2a:8f:fe:0f:fe:44:c8:a6:fa:f6:cb:55:a6:b2:d8:
cc:b2:54:7c:df:39:5e:6d:0e:b4:7c:7f:88:d3:70:f5:33:9f:
be:b4:42:82:8d:39:9f:bf:cf:78:75:b3:80:c7:b6:62:ea:1c:
b5:2a:1d:5e:76:e2:44:b3:c6:a0:43:0a:14:04:f9:86:59:7a:
86:6a:a7:1e:61:19:3b:8d:f8:14:f9:00:28:b3:49:89:aa:f9:
c4:cf:a0:77:39:3e:4a:0d:60:34:df:0d:e3:f6:09:b1:da:b3:
19:e3:22:46:0f:17:bb:8a:b1:0b:28:3d:aa:3a:8c:89:40:fb:
23:6b:01:81:fe:c4:a9:7b:c5:45:e5:92:53:61:f6:ad:53:f8:
0b:bd:ff:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:37:55 2026 by rpki-client