Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
File: zJgWyv_6ViY90NdIGclNVALxu20.mft (raw, json)
Hash identifier: sTOJaw8CeTtlVGWVqGgfSPgVmAxXbo/GDWF9ltTOncA=
Subject key identifier: 7D:5F:46:8E:FC:C7:21:3A:82:75:E9:3D:A8:49:DE:8A:5A:5E:98:EE
Authority key identifier: CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
Certificate issuer: /CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Certificate serial: 019CA9457CCC63E196A29E8C35CD741C2865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
Manifest number: 03FA
Signing time: Sun 01 Mar 2026 12:00:29 +0000
Manifest this update: Sun 01 Mar 2026 12:00:29 +0000
Manifest next update: Mon 02 Mar 2026 12:00:29 +0000
Files and hashes: 1: 8hUTE1rNYy5U_ZEAjeKyMjN64k0.asa (hash: WUMeLZ4dr9HFfgEPPRc+l/n2HJv4KBfKC27gniFGLbQ=)
2: e9f3B44EK2wKomC2T7X1vPJt_tY.roa (hash: w9sFrHQXnGx9nnQqHsGkGtrOe5lM1/FzKdCvsaW8Vb0=)
3: zJgWyv_6ViY90NdIGclNVALxu20.crl (hash: IAMEOQJWJ/eWoSNkdTCX3c16RbPp9KjRY/By4acuT20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:7c:cc:63:e1:96:a2:9e:8c:35:cd:74:1c:28:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Validity
Not Before: Mar 1 12:00:29 2026 GMT
Not After : Mar 2 12:00:29 2026 GMT
Subject: CN=7d5f468efcc7213a8275e93da849de8a5a5e98ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b9:68:a9:aa:c6:3f:1b:5f:07:0d:39:fd:ed:
a0:00:cd:1a:24:22:47:71:b7:4d:f5:1d:d3:37:a8:
04:be:02:bd:37:55:6b:7d:54:92:99:58:ba:39:84:
04:38:41:a3:09:89:16:99:f5:b4:6a:05:5c:3d:d1:
8e:bf:b8:3c:ea:ad:4b:e0:4f:42:64:4a:e8:fa:78:
03:e0:59:56:36:a1:02:9c:45:1c:7c:5a:63:bf:10:
45:43:f2:18:5b:63:e0:26:26:4f:a5:d6:47:ce:02:
b8:1a:90:94:68:40:6c:27:4f:a4:f2:a5:9a:0b:e3:
6a:f7:30:21:04:d0:54:5b:69:48:f0:7e:d3:0c:f6:
a6:e2:5d:29:8e:77:c3:b1:13:8d:0f:98:68:a7:c9:
71:f9:c8:11:1b:88:48:cd:51:83:d8:e3:43:a3:28:
71:f6:28:91:04:04:bf:a9:b4:22:1e:07:56:cb:9e:
94:bb:2d:1f:8e:84:fc:5c:25:0b:b4:50:fe:a0:33:
0e:7a:34:74:11:16:f0:7b:97:84:0d:06:a9:46:2b:
24:08:30:34:9b:45:3c:70:30:b5:ac:4e:d2:8e:7a:
4a:d7:a7:70:b7:31:6d:23:79:66:8a:7b:7d:c5:60:
46:09:f4:97:90:a7:9f:0d:9f:a1:e3:6d:1f:24:88:
38:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5F:46:8E:FC:C7:21:3A:82:75:E9:3D:A8:49:DE:8A:5A:5E:98:EE
X509v3 Authority Key Identifier:
keyid:CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9d:84:7e:eb:b3:4e:37:3a:1a:75:23:70:2e:33:1a:10:2b:
fc:3e:5d:ac:19:85:69:92:b7:9c:69:5b:f2:64:9c:16:34:7f:
91:4c:48:b7:fd:45:3e:84:e9:cc:d3:93:e5:ca:1b:6a:44:0b:
8e:42:7b:1b:76:19:00:2e:6c:31:6b:d2:ef:07:22:72:6f:40:
b6:60:47:fc:c2:4d:7d:7c:83:78:0d:80:1a:e0:ae:b9:f7:79:
a7:45:f4:36:ca:ea:7f:26:3f:cd:50:6a:ee:85:10:4c:38:e5:
e4:36:bc:2c:07:58:50:ef:87:d4:5c:a5:6f:f1:dc:83:73:a5:
2b:f8:f8:4e:ae:a6:2e:cf:0f:8a:3a:13:4d:0e:3c:81:14:4d:
51:49:10:97:53:2b:46:17:66:e7:4d:16:dc:f3:f2:1e:79:7f:
92:8d:e9:f3:54:df:d3:6c:3b:6c:e4:ed:2f:f4:1c:7c:c0:34:
a6:37:d9:e6:6b:22:5c:21:64:58:37:6c:35:53:3e:73:a0:29:
09:73:55:61:10:60:57:5b:9a:ae:4a:31:9f:ca:08:5b:6e:db:
32:10:21:6c:e4:f5:35:f1:3a:8e:46:6d:73:d2:04:f4:6a:8d:
ed:33:6f:67:e5:d6:c1:62:82:7a:13:41:b8:9f:29:fb:a2:d2:
41:d9:5a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:02:21 2026 by rpki-client