Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
File: zJxBoSN2TPfcDy25hB9zKjuWE0M.mft (raw, json)
Hash identifier: S8rJVoxc4j0ZMNPig1pFLYREULw04Fu1IbzJ+YPwvmo=
Subject key identifier: 84:11:BC:EC:FB:43:6E:EA:48:F3:BA:DE:BE:3B:28:66:D8:19:33:DE
Authority key identifier: CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
Certificate issuer: /CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Certificate serial: 019CA9B3EE850AF6D157AFE0F857829B01DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 14:01:07 +0000
Manifest this update: Sun 01 Mar 2026 14:01:07 +0000
Manifest next update: Mon 02 Mar 2026 14:01:07 +0000
Files and hashes: 1: RKsWQywf7E1-7yxnFVRThg94oQI.roa (hash: rZsYO4uq9KEbyvr1gPhju0XO3T5ePDaOKISlE/78+R4=)
2: zJxBoSN2TPfcDy25hB9zKjuWE0M.crl (hash: VU3LlcgOVFq5vFSkDWegOGWm3qhd9lLTKiWYqu+rHk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:ee:85:0a:f6:d1:57:af:e0:f8:57:82:9b:01:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Validity
Not Before: Mar 1 14:01:07 2026 GMT
Not After : Mar 2 14:01:07 2026 GMT
Subject: CN=8411bcecfb436eea48f3badebe3b2866d81933de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:76:e4:52:7b:ce:ed:9b:7a:e6:a0:80:1e:64:
e1:7c:4e:0e:8e:08:aa:74:cc:24:27:62:ba:22:9c:
b7:07:9c:21:ee:56:8c:9c:c9:99:bf:98:f0:f8:a1:
4c:bc:00:81:13:e6:cd:47:0b:41:c0:8b:11:ff:dd:
72:33:0f:4a:2e:e0:fa:b7:70:23:9f:73:56:ab:2b:
eb:33:70:15:1c:4e:50:fe:17:c7:56:f4:71:40:6b:
d6:f7:02:2f:a6:b6:47:ac:b9:dc:8b:62:ce:14:56:
c8:1b:48:3d:0b:7d:0a:e8:98:cb:eb:70:92:b7:cb:
41:55:c8:fe:4e:c0:e2:60:7a:e7:ea:3e:fc:12:d6:
cc:2a:be:a3:56:5a:89:57:8b:0c:46:1d:47:50:0e:
f6:3f:a3:6a:72:77:58:34:70:a5:bd:f7:94:f8:92:
93:fc:d5:cd:1c:27:a8:23:61:8c:08:88:b0:33:b1:
b7:2e:54:62:8a:7d:23:eb:0a:77:94:21:12:9f:80:
b3:b9:f5:e2:1e:22:5b:6d:98:81:3f:c9:a3:04:12:
7b:22:be:56:4e:87:ce:58:fb:39:eb:59:4b:eb:1b:
5a:ea:44:48:78:5b:aa:35:60:7a:89:55:0f:b2:15:
2b:57:dd:3b:3c:21:7e:f3:ed:c9:67:20:47:b0:fd:
8c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:11:BC:EC:FB:43:6E:EA:48:F3:BA:DE:BE:3B:28:66:D8:19:33:DE
X509v3 Authority Key Identifier:
keyid:CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:40:97:04:16:52:52:ec:a7:99:6b:c4:f9:cd:6c:ab:eb:33:
c2:2e:50:97:b7:6d:bc:5c:53:e6:db:cc:f2:e2:e2:c3:51:1d:
61:93:16:9e:60:b3:6e:3e:35:13:8e:3c:a6:f3:a9:c7:59:6d:
a6:2b:d3:7a:f9:73:00:91:7e:63:a9:ca:74:fd:b4:12:75:71:
a9:65:78:25:68:47:76:30:67:1d:21:46:2a:6e:66:3d:05:1e:
c5:3d:a2:18:fa:d1:3e:8e:3a:2b:cf:6e:b6:33:27:1c:86:57:
73:4a:a0:ab:08:17:7c:73:1b:31:98:a0:e2:56:72:e9:46:ae:
5c:6b:2d:7f:cb:bc:59:dd:8a:23:8b:a1:02:e2:ae:c4:f6:06:
75:f1:35:fd:bb:c5:f9:20:70:03:db:52:8f:54:43:a5:1e:a0:
28:44:98:d6:fa:18:da:04:7c:9c:23:e1:f5:6c:ed:0e:3c:c8:
30:1f:eb:8b:70:5b:f4:8b:75:04:bf:db:b2:1c:41:46:08:d5:
a4:e3:ea:ed:ff:f3:6b:e6:2a:99:db:3d:76:f9:3a:84:75:0d:
27:d4:a7:00:5a:73:db:34:8f:19:c2:ef:91:61:b2:73:f0:aa:
91:2c:67:5e:1c:4c:a6:71:3a:b1:71:36:59:2b:e3:70:37:87:
c4:f5:66:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:49 2026 by rpki-client