Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
File: zr9l4AadvMdre1VujB1wWInfJ-k.mft (raw, json)
Hash identifier: NLkaLwDKfgsBEhXMQVnxMnLyI0E7T2Jn5SCFhT5ScuY=
Subject key identifier: 14:06:04:9C:CE:F1:A8:D3:01:14:D2:F7:80:AD:ED:D5:24:54:99:78
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 019CABD99E65F241B250D96F906A1EA77531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
Manifest number: 1855
Signing time: Mon 02 Mar 2026 00:01:31 +0000
Manifest this update: Mon 02 Mar 2026 00:01:31 +0000
Manifest next update: Tue 03 Mar 2026 00:01:31 +0000
Files and hashes: 1: fpYgYHcSe1IMtLQuQ8ZHZS6M188.roa (hash: lFEjpgx0+Rqia9Wt28o4eVjHYzMi3xg620xweR16lkU=)
2: zr9l4AadvMdre1VujB1wWInfJ-k.crl (hash: kG0KSlHJNyuwdHVWV1evF9OXls8G77MVa4GHb2YbU6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:9e:65:f2:41:b2:50:d9:6f:90:6a:1e:a7:75:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Mar 2 00:01:31 2026 GMT
Not After : Mar 3 00:01:31 2026 GMT
Subject: CN=1406049ccef1a8d30114d2f780adedd524549978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:31:47:21:9a:03:d4:be:9a:74:e3:bf:79:b3:
86:7f:41:ac:4c:85:dd:b5:b0:5e:1e:7c:1f:e4:9a:
c8:e6:65:4f:5b:67:ba:d9:bd:5e:6a:7b:20:db:1d:
07:7e:15:f9:eb:2f:8a:73:aa:59:0c:9d:e4:1d:ee:
4c:09:27:9e:81:d0:d3:ee:5b:4d:43:ed:53:29:f1:
82:5a:18:1d:e9:76:95:ac:93:35:7f:4f:ce:20:08:
ad:a7:57:b6:9c:d7:b2:19:9f:d7:52:f2:dd:b6:31:
f6:50:9a:67:b4:25:94:4f:e6:1c:48:a8:d6:12:68:
a4:af:20:ac:6e:38:5c:3e:d9:ea:b2:40:05:2c:bd:
85:b7:d4:e3:de:59:b0:90:75:b7:94:4c:45:ad:12:
11:4a:3e:8f:8b:72:37:4d:b0:1f:b4:51:32:5a:76:
f3:fb:3f:a4:e3:82:bb:fa:21:9c:6d:35:ab:18:65:
f6:29:a3:c7:08:e1:e8:56:af:5b:d1:87:dd:bb:37:
2d:ec:db:4d:02:b1:c6:d6:6b:e0:de:a5:68:c4:fd:
02:4d:33:fc:3f:74:49:0f:81:6e:e7:64:eb:a4:67:
14:23:6d:16:67:34:78:7f:a6:3f:d4:5f:28:79:d9:
46:d3:a0:13:8e:aa:c8:f4:59:b6:9d:61:68:30:a4:
50:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:06:04:9C:CE:F1:A8:D3:01:14:D2:F7:80:AD:ED:D5:24:54:99:78
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:03:a9:8a:e6:5e:e1:13:c7:c9:93:e6:31:53:36:25:ba:4c:
5b:bb:92:47:29:94:11:6b:cb:69:c2:87:a8:4f:3d:79:e7:fd:
9a:1e:e1:46:f4:af:29:fa:4b:0a:77:85:41:c2:b1:c4:62:dd:
a6:5e:bc:28:76:e0:66:6c:fd:cd:1b:00:9e:55:72:a7:ca:a1:
d2:f9:ea:1f:03:10:8e:6c:d3:e4:3d:51:df:c3:e9:df:e8:60:
30:f7:8b:e5:b3:b3:fd:6a:89:35:86:b3:1d:76:f5:3f:88:af:
70:8e:32:34:77:97:63:39:fa:d0:43:91:be:1f:e8:28:09:91:
9b:20:13:f4:1a:16:d7:22:cd:76:13:27:bf:f6:bb:07:0a:ed:
7d:29:0d:21:cd:61:97:bd:2b:e0:9c:eb:8d:88:25:e6:16:da:
15:96:c6:55:4d:db:bf:20:77:92:7d:19:ce:94:5b:f7:59:fe:
03:00:8a:dc:aa:1e:df:9f:fc:a3:68:cc:a9:48:43:1d:b2:b0:
e4:ec:da:ab:dd:0d:d6:36:bb:2a:e4:7a:02:d7:2d:b1:15:ae:
41:8b:e8:62:01:bd:d2:9b:6d:0f:a4:28:af:cd:76:ef:9c:db:
50:9f:91:da:63:c3:f6:90:36:72:6d:e5:b8:19:9a:9a:fa:4f:
5c:4a:cd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:12 2026 by rpki-client