Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
File: Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft (raw, json)
Hash identifier: oa4ou9qdKG6m3zedaXQ94HD6L9WT/faSQkyd1bxIORA=
Subject key identifier: B5:36:9D:AC:2E:2A:58:B0:5B:9A:BE:E5:05:9D:01:13:66:C9:36:26
Authority key identifier: 67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0
Certificate issuer: /CN=6745314516483fe27c0530ccb9707c376d20e7f0
Certificate serial: 019CABD95AD39639F4BE147078A9375521C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
Manifest number: 0D2A
Signing time: Mon 02 Mar 2026 00:01:14 +0000
Manifest this update: Mon 02 Mar 2026 00:01:14 +0000
Manifest next update: Tue 03 Mar 2026 00:01:14 +0000
Files and hashes: 1: LceaXnMeu276vgP2oQyUQj1pB_Q.roa (hash: HrwRyFbgAYEEHCkLHWw/X0HtmQIyrz8WJ529vkNQigM=)
2: Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl (hash: xaaLH54TjYSCWQMHP6f6QqvltKBnpmymfTucbsGD4OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:5a:d3:96:39:f4:be:14:70:78:a9:37:55:21:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6745314516483fe27c0530ccb9707c376d20e7f0
Validity
Not Before: Mar 2 00:01:14 2026 GMT
Not After : Mar 3 00:01:14 2026 GMT
Subject: CN=b5369dac2e2a58b05b9abee5059d011366c93626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1d:76:79:58:ad:29:6c:d9:5f:f1:61:5e:88:
b6:ea:8a:e5:95:40:5d:2c:e1:79:0e:f5:82:26:95:
17:61:82:d4:99:6d:3f:fd:8e:c0:48:98:0d:4c:63:
e7:e4:20:d8:c7:cb:70:57:60:fa:b8:17:c8:1a:b4:
0d:e5:a0:1f:7a:af:d8:ee:14:27:b0:44:b9:c0:d1:
c1:e8:12:ea:ff:07:44:b6:c9:0f:55:cb:d5:66:71:
27:21:51:77:73:bf:f0:bf:51:68:73:b2:52:dd:87:
cd:2f:83:43:38:6d:f6:8a:0a:fe:b8:41:fa:8d:bf:
f8:38:5a:8c:24:71:e2:92:d6:db:6f:3e:46:cc:bc:
8b:4d:48:5f:c7:0a:10:2c:71:6b:0b:15:2b:75:2d:
5b:7f:c3:2e:68:b4:c0:81:6b:ad:ac:55:8d:30:c0:
44:35:a0:0f:14:ae:5c:fe:c2:72:ca:85:c8:83:a7:
43:7a:d4:f6:73:b5:8d:cf:77:49:bd:f3:dc:3d:2f:
9c:47:97:e4:e8:8d:86:0a:4e:52:21:f4:ee:5d:e9:
3a:ed:3b:4b:10:3d:fd:4c:f2:ad:12:c6:d7:b4:58:
64:a4:8d:4e:6b:53:8c:b2:8a:eb:24:53:6c:ec:82:
3e:4a:2e:ac:ff:fe:b1:e0:e3:29:11:bb:3a:96:ee:
bd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:36:9D:AC:2E:2A:58:B0:5B:9A:BE:E5:05:9D:01:13:66:C9:36:26
X509v3 Authority Key Identifier:
keyid:67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:db:2c:67:a1:88:67:34:20:eb:70:2f:c3:bd:aa:10:b2:b9:
7a:28:cf:eb:0a:56:37:d7:49:8e:de:df:fb:50:bc:1f:df:03:
e0:52:bc:2d:03:f3:c2:e5:37:fe:ed:bf:a2:45:3a:9a:11:8a:
12:10:4d:f1:09:1c:0e:17:ed:14:28:d5:cc:ab:35:a2:b7:e5:
3a:67:c5:79:01:80:bd:90:42:c0:5b:00:3f:a9:f5:08:67:74:
d4:62:f5:da:12:31:62:31:3e:80:52:2d:53:27:3e:84:ab:0d:
bd:d4:83:84:12:02:64:9a:0c:c3:6c:61:ab:f0:73:e1:c6:5b:
b8:96:3e:a3:f5:1e:8f:0e:00:d4:62:57:80:ce:29:f5:d8:6b:
d2:ae:ca:8b:c3:dd:b8:71:71:89:78:19:25:32:de:d8:bc:34:
55:00:04:bf:79:7f:ac:07:a4:8a:84:18:80:6f:3a:83:b6:6d:
61:d4:30:0a:7e:c4:ca:59:28:5b:b5:a0:9b:75:8b:60:e5:52:
5b:f3:5f:18:28:d2:64:e5:fc:9d:ae:e1:b0:f4:2f:08:cf:b3:
81:91:4e:90:23:45:ef:ec:c8:1f:94:e7:59:3b:8a:f5:7b:73:
12:15:37:0c:0c:38:8f:f4:4c:05:90:f1:ad:ff:09:b7:a0:ed:
c2:b7:1c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:32:53 2026 by rpki-client