Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft
File: zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft (raw, json)
Hash identifier: vXUB9nTTJIqVIiCkvHNXeTWc0ub5PqVADAde/0STNGI=
Subject key identifier: EE:A5:88:B0:EA:06:A4:08:7A:05:9F:01:A8:29:55:66:AA:C2:CE:D5
Authority key identifier: CE:1F:59:AE:34:54:81:32:89:2F:CC:89:B1:59:5F:9B:03:60:19:8D
Certificate issuer: /CN=ce1f59ae34548132892fcc89b1595f9b0360198d
Certificate serial: 019CADC7D6F113FEEB70DE31BA577D6B0893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft
Manifest number: 1243
Signing time: Mon 02 Mar 2026 09:01:20 +0000
Manifest this update: Mon 02 Mar 2026 09:01:20 +0000
Manifest next update: Tue 03 Mar 2026 09:01:20 +0000
Files and hashes: 1: 0fMGliU2DY90o-COL7gfsd6xbVw.roa (hash: pyD2slLDpEMFdPN9pfMsq689iSsZ/8LJ4vMycIuRMpg=)
2: zh9ZrjRUgTKJL8yJsVlfmwNgGY0.crl (hash: 9I7i0VlPboESfcuYODc138xwxZ4ara4l+ljnrlzjIbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:d6:f1:13:fe:eb:70:de:31:ba:57:7d:6b:08:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce1f59ae34548132892fcc89b1595f9b0360198d
Validity
Not Before: Mar 2 09:01:20 2026 GMT
Not After : Mar 3 09:01:20 2026 GMT
Subject: CN=eea588b0ea06a4087a059f01a8295566aac2ced5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:da:8b:6e:05:07:27:79:8f:64:e9:7b:b2:
a3:48:8d:5a:00:61:17:04:c5:db:d6:fe:25:4f:99:
ac:db:c5:90:3d:9e:c1:a3:96:d1:1e:47:c4:89:d2:
f3:6a:05:f3:5e:d4:4a:0b:f4:cb:27:df:e8:bf:e1:
ae:2b:41:14:d7:c1:cc:0c:09:17:b9:13:98:fe:1a:
ca:f3:22:21:95:5d:97:3d:0f:aa:93:b4:bb:f7:25:
ed:72:7b:52:98:69:27:8b:84:9b:f3:b4:96:bf:98:
4b:6b:79:4f:47:12:c3:76:dc:af:d4:57:d8:a3:bc:
e9:99:64:17:44:75:7f:ca:4d:88:7d:8b:7d:83:10:
81:93:23:dc:02:9d:3e:ef:47:d8:57:fe:d6:43:93:
b3:e3:d7:8d:76:08:32:e2:d0:df:6b:7e:37:0c:cb:
e1:c5:92:d4:ed:db:6a:c1:71:91:64:25:84:eb:5a:
c9:fb:4b:1b:37:b2:23:c7:4e:af:88:b9:fe:e1:a8:
09:c0:97:a1:4a:b7:79:2d:c0:cd:55:d0:f8:8d:a0:
4a:1d:32:ff:09:c8:e0:52:4a:72:ec:fb:64:f0:ec:
1a:59:e2:a4:96:58:46:14:f4:54:e1:95:b4:29:32:
0a:42:29:e6:ed:fc:64:52:d8:b7:8e:1c:9e:7b:c6:
f7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A5:88:B0:EA:06:A4:08:7A:05:9F:01:A8:29:55:66:AA:C2:CE:D5
X509v3 Authority Key Identifier:
keyid:CE:1F:59:AE:34:54:81:32:89:2F:CC:89:B1:59:5F:9B:03:60:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:8e:05:f5:09:a4:82:db:92:ec:4a:ef:40:f8:56:59:79:d5:
54:bd:13:1c:72:e1:14:05:1e:4a:b9:7c:5f:ff:34:7e:ee:6f:
0f:a0:48:1d:a4:74:2f:f9:72:94:60:9b:33:33:29:99:e5:42:
ae:d2:00:87:d2:aa:62:f8:ab:a4:cd:15:93:93:b5:8b:f6:dc:
f0:ba:89:ee:16:9a:f4:8b:7f:2e:48:76:31:60:6f:fd:c4:4b:
e2:cb:b4:90:c0:fd:f7:f8:c3:43:9b:3c:7e:69:e9:9f:8e:09:
6b:da:da:c0:58:bb:3b:2f:4b:c6:30:c2:d3:4c:1e:d4:7c:fa:
79:bf:5f:59:2a:2f:54:b1:98:24:7d:53:32:0d:cf:95:31:13:
7a:fb:9f:fb:96:83:b0:6e:5f:f4:27:24:74:38:f0:d3:c1:b6:
87:fd:e3:f1:72:e1:17:b8:05:63:52:63:6f:60:23:9b:d3:72:
7d:e7:b7:62:0d:04:7d:6d:b0:a8:3e:fa:1c:63:d4:f4:4f:35:
e8:4c:42:9a:dd:78:1d:0a:57:f3:bd:e2:13:4c:1b:33:fb:67:
ca:07:9d:d6:08:d1:0f:e1:33:b7:cd:53:13:7e:e7:b7:ca:bd:
02:0f:ab:d2:7e:a7:1e:66:8b:00:38:32:cf:53:9d:da:db:d7:
73:7f:18:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:02 2026 by rpki-client