Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
File: zRQ2kCMKRApot6iqmCefL2Xf7ig.mft (raw, json)
Hash identifier: /gtT7P9qHLUVCrPoDxexC4auHksrcOa1uEIitMy7yns=
Subject key identifier: 9C:C7:BD:CB:71:A6:3C:DD:99:37:D0:4E:DA:4F:FB:8E:4D:87:4E:BA
Authority key identifier: CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
Certificate issuer: /CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Certificate serial: 019CAC472D488AAFABFD6A841517BEC58932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
Manifest number: 1549
Signing time: Mon 02 Mar 2026 02:01:11 +0000
Manifest this update: Mon 02 Mar 2026 02:01:11 +0000
Manifest next update: Tue 03 Mar 2026 02:01:11 +0000
Files and hashes: 1: beStaP3U9BouVtR6HKL7Bht809g.roa (hash: 9C0Yz+gtWBKD86eXJ/yNK0jQEWAJqpkTW4DLxbpVN08=)
2: zRQ2kCMKRApot6iqmCefL2Xf7ig.crl (hash: OO5PuAk0mqndUWXNJCCqnAQ1N3Fz3/giuIimCAYEM1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:2d:48:8a:af:ab:fd:6a:84:15:17:be:c5:89:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Validity
Not Before: Mar 2 02:01:11 2026 GMT
Not After : Mar 3 02:01:11 2026 GMT
Subject: CN=9cc7bdcb71a63cdd9937d04eda4ffb8e4d874eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fc:a6:a8:22:eb:5f:44:da:81:07:84:cb:36:
11:61:b3:ed:1f:77:c1:5a:eb:d2:0a:e6:99:a9:26:
1b:1b:58:74:f8:7c:57:0a:fa:46:53:b4:a3:73:a6:
64:12:06:d9:74:55:b9:f2:eb:eb:c7:85:7f:e5:b1:
ef:61:da:de:b6:01:ea:a5:fb:ed:3e:49:c8:8b:29:
df:65:64:5a:27:71:82:d8:d1:0e:9e:6c:ba:67:16:
8b:1d:4b:a7:c0:03:67:82:47:66:7e:7f:02:06:c7:
b8:33:55:fd:27:c0:b3:81:16:51:ac:7c:5c:20:35:
24:ae:cd:30:12:f6:d4:d1:e7:d3:63:6a:7a:c8:66:
97:3b:e0:8e:15:5b:13:9a:58:69:fc:98:c2:19:a3:
81:2a:bd:63:6c:34:1e:b2:e9:6d:db:f6:03:23:a8:
4d:9a:20:ab:9d:28:e6:06:4a:8c:ed:4d:da:2c:62:
2c:2a:f6:8c:28:01:00:e9:aa:f2:2d:a8:49:3e:24:
a9:eb:91:a4:a0:fd:15:47:3e:ae:09:26:f4:46:79:
17:db:52:cd:4c:bd:e5:83:2f:16:c7:bb:4b:81:c5:
0a:7b:26:00:aa:32:36:35:c9:53:86:32:d4:0a:f5:
7e:ec:ce:52:a0:66:2c:12:94:7f:30:ce:79:2b:5a:
e3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C7:BD:CB:71:A6:3C:DD:99:37:D0:4E:DA:4F:FB:8E:4D:87:4E:BA
X509v3 Authority Key Identifier:
keyid:CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c2:37:c4:96:b4:91:89:e4:a9:e6:9d:c4:85:78:cd:42:3c:
80:4b:b4:c6:ad:65:b9:fe:39:57:70:9b:52:2a:b9:10:d5:c7:
99:ba:5e:a4:79:b9:91:f4:2d:42:30:a0:10:e0:2c:f3:11:00:
e2:79:66:b7:ac:cd:34:f5:30:0e:8c:dc:c3:f0:f8:9d:3d:fa:
ec:96:39:d2:6a:a2:97:49:f0:5c:4c:2d:8c:c8:d6:03:35:da:
78:07:af:05:93:79:82:06:7a:5c:23:d8:cd:dc:4d:71:90:46:
6b:9a:bd:47:26:0b:45:a2:3c:8c:7e:d5:77:92:55:00:f3:dd:
fd:9b:26:56:6d:5a:2d:94:51:d8:ea:86:03:b4:ad:9a:83:9d:
3a:50:1f:4f:58:9d:c6:d6:06:72:d1:16:34:5a:60:a5:cf:8d:
51:fc:8e:f1:02:6d:bd:e3:56:c1:52:d0:82:51:1a:4e:4a:88:
81:22:ea:ae:2a:af:48:36:60:ba:a8:b7:c1:48:76:c1:3b:b6:
77:50:b3:31:34:e7:58:7f:d8:5c:e6:fa:51:c1:b8:ea:8b:97:
05:7e:ac:aa:18:1a:d8:a1:60:1f:bc:a0:6f:97:8c:04:1f:f3:
fd:5a:a0:46:b8:41:cc:27:41:cd:11:42:e5:2b:74:b5:9d:d4:
1c:aa:85:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:13 2026 by rpki-client