Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
File: ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft (raw, json)
Hash identifier: A5ugK3d7/XXJH/FTRdV/5WnF6GaFsVowZpSToNFS+qY=
Subject key identifier: 56:43:2F:D8:FD:8D:08:DD:93:98:17:52:E6:B3:2B:3F:87:EC:52:2D
Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
Certificate issuer: /CN=65a424cee2fdb0072b541438d913d26636a9b88b
Certificate serial: 019CA7FCA3A2492767E94053A92F9A4A3A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
Manifest number: 1854
Signing time: Sun 01 Mar 2026 06:01:17 +0000
Manifest this update: Sun 01 Mar 2026 06:01:17 +0000
Manifest next update: Mon 02 Mar 2026 06:01:17 +0000
Files and hashes: 1: DKRX12LW62Pwhd7lkkBTAIcEFmg.roa (hash: JQDtg/PbgFXKpQJ1cWIs8ZbTBrSDwWrj/eo/b+RXeDU=)
2: ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl (hash: RlcrEoP8stmiA68njXb8kUzXBHgnXvAbCjIEEOKXxSE=)
3: f56SXyzVaFxPipkSbWjQspBnG6k.asa (hash: kTkK/KuPdlPU1v4Iqn9nm0PLfpF6FLDnJnaGt4nEmLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fc:a3:a2:49:27:67:e9:40:53:a9:2f:9a:4a:3a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b
Validity
Not Before: Mar 1 06:01:17 2026 GMT
Not After : Mar 2 06:01:17 2026 GMT
Subject: CN=56432fd8fd8d08dd93981752e6b32b3f87ec522d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d8:0e:56:6f:af:2a:d4:0c:e2:7e:4c:d1:dc:
69:39:82:b1:bb:14:2c:be:09:87:e0:43:4b:9e:5c:
d1:41:7c:94:bb:a3:b9:21:48:72:70:04:9a:27:f5:
e6:e0:b8:cf:32:28:5b:2c:2a:73:0c:ac:3c:70:8c:
05:ed:a8:d3:fd:f9:c7:c1:10:d7:eb:94:75:f7:ac:
b3:13:e5:fb:eb:92:49:b2:c7:38:f8:04:29:4c:37:
b0:2a:4c:a7:1c:3b:d2:83:7d:24:d6:ee:67:97:73:
09:a0:34:20:3d:12:6d:d5:f4:3e:89:0c:f5:b7:99:
00:f7:59:59:58:22:b5:d8:9c:72:fe:15:cc:9f:d2:
07:6e:4c:ec:18:a4:de:17:bd:b6:7a:27:76:38:6c:
c4:47:3b:5f:75:19:cd:b2:e4:36:45:6a:ca:c2:64:
06:77:15:2c:06:a8:e4:9d:27:c2:a0:81:48:d5:8d:
8f:ad:79:4d:ca:05:d4:50:7e:16:26:54:7c:2b:3f:
52:e8:18:91:94:80:f2:7b:23:5b:9a:38:e7:b2:9b:
77:40:4e:85:b0:a2:79:82:57:2c:29:7f:4a:5b:56:
b0:f0:0c:2e:6f:b2:fc:10:b0:3b:34:d6:e2:6a:87:
5a:a6:b3:e4:df:52:50:91:02:72:7e:6b:e6:37:ac:
35:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:43:2F:D8:FD:8D:08:DD:93:98:17:52:E6:B3:2B:3F:87:EC:52:2D
X509v3 Authority Key Identifier:
keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d9:b7:9a:27:b8:09:a2:4f:39:ce:61:6e:42:51:ba:bc:07:
03:87:fb:3a:a7:c5:13:d4:8d:51:d2:0c:ac:4d:de:82:ca:f9:
56:b3:23:7f:d0:bd:c1:d9:ee:d7:24:c5:68:a1:0a:aa:1d:a1:
ed:cb:14:d9:ec:73:6b:90:15:31:4b:41:bf:6c:ae:8b:d0:03:
a8:28:68:da:6d:a1:60:3d:bf:06:1f:de:a6:66:3c:65:4e:bd:
c2:fb:3f:19:27:32:21:5e:92:65:60:e7:7d:e2:9c:de:ee:be:
cc:2b:5c:fe:d5:46:d8:40:4e:96:73:5b:05:d3:c9:7f:25:d4:
fa:94:19:5a:33:0d:6d:35:fb:55:40:65:e9:ca:2f:38:03:da:
e5:58:d4:20:28:86:6c:7c:37:22:ec:e3:39:8d:1d:c0:ed:fb:
de:a1:05:e9:dd:45:f6:a8:9f:6f:f2:3c:de:2d:86:bc:4e:cb:
b0:6c:4a:fa:0c:83:97:8b:db:f6:fa:4a:8d:93:58:f2:dc:48:
a5:3c:63:56:f4:7f:e3:77:69:f7:f5:0a:72:f0:68:24:80:8e:
b2:27:0d:89:42:2b:c0:f7:5f:30:66:35:2a:38:12:e0:e3:be:
c8:87:0c:6e:20:da:97:cb:e6:b1:ae:f6:25:96:9b:38:ae:cb:
52:18:ca:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:26 2026 by rpki-client