Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
File: zsR4iytpLHEDscueFhf4s2aRDxM.mft (raw, json)
Hash identifier: dnw38ZBEjrPwPlm2BsvO8VROAuT287vSaAfarG9p3hc=
Subject key identifier: 94:AB:8F:E9:DC:9A:3D:6B:29:8E:36:4F:5C:7E:FD:28:B7:00:17:B9
Authority key identifier: CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
Certificate issuer: /CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Certificate serial: 019CAAFD37CAB5E225F8732022BFC5E40FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
Manifest number: 17DB
Signing time: Sun 01 Mar 2026 20:00:47 +0000
Manifest this update: Sun 01 Mar 2026 20:00:47 +0000
Manifest next update: Mon 02 Mar 2026 20:00:47 +0000
Files and hashes: 1: mnbpCMhVQRFBI3ISYQo0OAu64Rk.roa (hash: kpDbhBfOi3H13L7NCoXgIwXVigbDMdLQLlKaVJyFWOo=)
2: zsR4iytpLHEDscueFhf4s2aRDxM.crl (hash: 39CmyipEyswa07wDfLYye4ytXakBK6paAxP71aSr28o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:37:ca:b5:e2:25:f8:73:20:22:bf:c5:e4:0f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Validity
Not Before: Mar 1 20:00:47 2026 GMT
Not After : Mar 2 20:00:47 2026 GMT
Subject: CN=94ab8fe9dc9a3d6b298e364f5c7efd28b70017b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f4:2e:89:34:ca:2d:94:cc:2b:92:cb:95:d7:
e9:4b:c3:e2:3f:43:2a:57:2c:e6:23:17:45:bf:ee:
99:4d:b8:7c:e4:28:ce:88:0a:be:bd:58:45:21:67:
87:e5:fc:de:49:00:eb:3f:cb:ea:28:df:ed:66:97:
8c:39:13:61:d1:a3:4b:ca:95:f4:2c:05:2b:a0:51:
dc:ba:7d:da:5d:5c:73:3b:3a:8b:d2:eb:a4:b4:67:
07:ed:91:4b:8f:25:2a:35:e7:60:7c:b8:07:7d:ca:
7b:37:3a:84:91:b2:f0:62:57:eb:62:30:2d:2a:59:
97:c3:dd:c4:f9:13:03:f4:0c:21:15:f6:07:4a:24:
07:86:28:b2:1c:6f:5f:a2:b0:9f:35:73:c8:5f:c6:
11:e3:7c:29:2c:ab:53:e8:d8:28:d6:e4:88:62:0f:
bf:9c:c8:c0:0a:60:58:45:10:29:5e:03:d7:a1:e5:
43:c2:bd:40:c6:16:b9:4d:78:21:fc:7d:23:08:80:
02:53:77:db:c2:3f:cb:4c:1a:60:e0:e4:d1:91:09:
81:4b:e6:84:21:26:3b:4f:5b:49:b3:95:08:a8:5b:
54:28:bc:2e:7c:c1:f7:f3:51:f6:52:7c:0b:ff:e8:
17:03:39:bc:ae:a5:93:4b:22:c3:ec:6c:40:f2:9c:
76:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AB:8F:E9:DC:9A:3D:6B:29:8E:36:4F:5C:7E:FD:28:B7:00:17:B9
X509v3 Authority Key Identifier:
keyid:CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a0:b3:d9:be:cf:b6:1f:21:a9:b6:03:1f:50:c2:10:a3:45:
ec:b8:0d:72:c8:7d:ba:4c:a7:66:c0:e5:85:df:2f:27:ce:3a:
ee:83:ac:e1:74:53:2e:16:8e:5e:a2:70:36:8d:83:6b:89:f6:
da:11:db:3d:16:e4:7b:66:30:44:c8:fe:b7:e7:1f:71:da:6e:
d3:74:5b:c0:f1:04:13:ec:5f:3f:80:b8:2e:2c:f3:34:6e:30:
86:7e:4a:fb:e9:c2:d0:e5:3d:60:57:cd:1e:9d:35:46:46:6f:
a5:cf:42:e5:82:10:73:54:9a:13:95:4d:3a:43:12:e0:9e:e7:
03:6f:ae:29:9e:1e:00:3a:5e:b5:51:fa:07:36:ce:65:2c:61:
2e:ef:95:1b:9f:16:4c:ff:04:78:95:a7:0e:32:ab:9f:e0:f8:
ce:eb:be:3b:6f:4e:d1:46:6f:52:a1:29:10:30:f5:10:c5:a8:
6d:c4:fe:44:d3:25:a0:15:cb:93:e8:bd:91:54:77:54:23:6a:
6a:e1:fa:cf:19:92:27:82:3d:cf:b9:d4:09:c4:6c:bb:19:e2:
93:80:73:7a:92:c0:c8:d5:c9:c2:16:51:f6:da:34:f1:f6:84:
5f:0e:75:ef:19:95:66:a7:37:f5:ec:5b:21:1d:5e:bd:12:15:
79:58:a9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:19 2026 by rpki-client