Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
File: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft (raw, json)
Hash identifier: CpZLbUqgQhN9+PLhq5F9vAyVkpd1sSCl7ZfxGQljcWc=
Subject key identifier: EC:C5:17:57:5C:AE:02:18:89:48:B1:24:77:63:07:E8:1D:55:8E:C2
Authority key identifier: CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A
Certificate issuer: /CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
Certificate serial: 019CAC7E6B9123EFAA654464BB4A79A2302B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 03:01:32 +0000
Manifest this update: Mon 02 Mar 2026 03:01:32 +0000
Manifest next update: Tue 03 Mar 2026 03:01:32 +0000
Files and hashes: 1: a-GQ10_VoZGMx2Uu4LVJHteO_m0.roa (hash: NioNjVo8lGbEZZ9K9hzAzdA29RBjR5Al0oMN0vHtav4=)
2: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl (hash: oyizv8yd84lB0fbqV0MuuS68MBPIGHPDL/zqwlG91jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:6b:91:23:ef:aa:65:44:64:bb:4a:79:a2:30:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
Validity
Not Before: Mar 2 03:01:32 2026 GMT
Not After : Mar 3 03:01:32 2026 GMT
Subject: CN=ecc517575cae02188948b124776307e81d558ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6b:ed:8f:28:8a:91:d2:aa:5b:17:fc:0d:33:
77:be:95:bc:03:03:61:fa:8b:88:43:6d:0e:dd:3d:
14:bf:a2:8c:0d:a4:00:7c:dc:51:33:d3:21:b7:eb:
fb:a4:41:8b:8f:d9:c5:17:4b:53:e6:ba:04:17:9f:
17:47:20:74:2f:06:78:59:d3:e9:e7:78:ce:46:3c:
27:6f:df:e0:30:f1:70:06:2e:cb:60:c3:54:41:ff:
e0:98:be:c6:ad:bd:53:41:77:cf:31:0a:a4:3f:d1:
24:0b:79:20:4c:5d:1b:9e:59:05:d5:f4:61:5f:3c:
34:12:7b:77:6d:71:6d:5b:3b:84:55:ee:05:50:06:
27:77:0b:88:2a:16:cc:70:8a:25:db:4a:ec:9e:22:
8d:16:37:e7:08:d1:ab:fb:73:2f:b5:3d:c1:e9:cb:
a6:6e:fe:29:44:f6:f2:fd:53:e2:6b:fd:cb:48:d4:
83:5d:2f:c6:3e:73:f9:7e:14:53:dc:36:25:b1:ff:
51:6d:e3:24:5b:b9:df:81:df:fa:32:b2:9e:7b:82:
fc:4a:91:9f:bf:0a:29:12:a6:b5:60:8d:35:68:d5:
fd:c8:b8:c0:5a:16:41:8d:bf:a0:af:fe:46:c4:6d:
4d:cc:37:1e:6d:70:26:f1:0d:b1:42:b8:e2:ad:d6:
39:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C5:17:57:5C:AE:02:18:89:48:B1:24:77:63:07:E8:1D:55:8E:C2
X509v3 Authority Key Identifier:
keyid:CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ac:08:5d:b8:c3:3f:13:1f:cf:56:21:e3:67:e1:75:82:dd:
ab:21:2c:0f:47:bc:4e:31:d0:eb:f6:be:bb:62:17:e1:a1:41:
f4:63:9b:77:6a:58:42:f9:34:af:13:fa:83:89:20:51:1e:e6:
83:9b:71:4c:ee:a8:44:5f:8c:71:ee:e9:08:17:0e:f0:72:6e:
a0:d9:67:ed:d4:86:5b:e3:75:e4:b8:ee:7f:3f:06:8e:9d:7c:
c7:1c:28:5b:8a:ac:26:24:ab:e9:b1:17:d8:63:17:79:23:0e:
fd:f8:bf:f1:1a:88:f8:7f:d6:ba:38:63:46:10:57:6e:40:a7:
17:29:7d:77:5e:e6:62:ee:93:df:a6:13:cd:27:53:2d:9a:1b:
53:78:7b:bf:81:a9:7f:f7:ed:08:d9:d7:0f:b1:ed:77:42:88:
b1:26:1a:7f:38:72:95:5e:0f:44:8f:39:36:3d:87:63:89:95:
f5:75:6a:4b:39:91:57:3f:23:ce:6b:93:d5:32:9b:fb:d8:b4:
a8:ce:43:f0:e7:7d:f5:ea:9e:e0:47:d1:e3:5d:b9:c0:11:5b:
ab:be:22:2a:2a:ac:81:99:40:57:0b:6e:06:7f:67:e2:b7:6f:
f2:36:a9:7c:2a:0e:20:04:65:81:24:9e:5f:94:5e:54:66:b6:
2c:ad:1f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:55 2026 by rpki-client