Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
File: zahD6BKxbexgu3CYykEzEX24R00.mft (raw, json)
Hash identifier: GJTfGRY0WYi98Ca+5lrp2HZoKGQUn4Ak/XRFJ3hLUEY=
Subject key identifier: FD:39:DB:7A:8F:7C:3C:8C:B9:74:48:18:62:0A:C1:F3:01:8C:1C:57
Authority key identifier: CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
Certificate issuer: /CN=cda843e812b16dec60bb7098ca4133117db8474d
Certificate serial: 019CAD22EDB969B3090959456052982CD4EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 06:01:13 +0000
Manifest this update: Mon 02 Mar 2026 06:01:13 +0000
Manifest next update: Tue 03 Mar 2026 06:01:13 +0000
Files and hashes: 1: xAJAqKl5Srwo2ARzZhLG6xPoMEY.roa (hash: zXin4xfG6I9ng2fyOSNQGYSR3toHXgB+MkkZOtI6MnY=)
2: zahD6BKxbexgu3CYykEzEX24R00.crl (hash: yUhK0IiW+252VxaI2KcPCRpcXVYmzKBcnto+bS1eTDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:ed:b9:69:b3:09:09:59:45:60:52:98:2c:d4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda843e812b16dec60bb7098ca4133117db8474d
Validity
Not Before: Mar 2 06:01:13 2026 GMT
Not After : Mar 3 06:01:13 2026 GMT
Subject: CN=fd39db7a8f7c3c8cb9744818620ac1f3018c1c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:e2:64:d4:9a:03:c8:d0:27:a7:8b:11:9a:
d3:43:d1:e4:4e:f9:4d:66:cd:c1:e1:ed:3f:56:bb:
cc:a7:87:8a:8e:31:cd:94:a2:93:9b:6e:46:06:ed:
20:fc:5b:b5:d0:11:f0:32:9f:8a:4c:41:db:5f:66:
f5:bc:0b:b5:1b:91:0f:bb:c0:83:b3:90:d4:51:18:
c1:59:12:96:56:da:6f:ee:03:0d:93:50:6b:0e:13:
db:49:e4:5a:2e:b5:3d:13:41:67:16:03:88:62:73:
2b:a7:e7:81:48:f4:16:ad:43:15:1b:f0:2c:30:4c:
27:0b:af:c0:1d:ad:7b:51:ed:a0:b3:68:32:33:4e:
27:ad:ca:9d:16:45:c0:d2:45:cb:8f:a1:f4:67:b0:
c5:ba:23:7d:65:32:63:9b:5b:64:74:cf:cf:8c:14:
95:5e:36:dc:c4:39:bc:93:94:eb:a6:ab:92:98:5a:
fb:b2:72:17:b0:b5:bc:a7:6d:7f:0c:af:8b:f7:de:
1e:c0:92:35:cb:56:65:19:63:98:d8:f0:33:4e:51:
39:fb:01:c1:14:b9:a2:1d:46:a8:a7:2a:14:1a:66:
59:ef:89:51:62:00:7c:6d:4e:3d:ce:5e:06:e9:ab:
f2:9b:65:2c:89:b8:93:87:20:c1:5d:96:fc:4a:61:
b5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:39:DB:7A:8F:7C:3C:8C:B9:74:48:18:62:0A:C1:F3:01:8C:1C:57
X509v3 Authority Key Identifier:
keyid:CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:8f:93:05:95:5c:60:be:2a:64:07:f5:20:36:e5:af:b2:21:
d8:e7:31:82:2d:23:d6:29:d1:b7:e0:db:5a:6a:c6:8f:d0:5b:
26:b3:c4:7d:36:f9:34:c8:c6:2d:aa:9b:1a:ca:9d:ea:ee:4d:
3f:a5:fa:2e:83:f8:d4:f7:a0:f3:07:84:30:8f:ac:88:95:ce:
c5:a0:0b:d9:38:e1:5a:fe:ad:ba:e8:c2:28:74:75:2c:f1:e2:
c2:63:9c:c3:0a:f4:a9:dd:33:72:d9:4e:1c:be:f6:00:31:2b:
ba:dd:6a:28:b3:7e:cf:fe:a3:b8:94:8a:19:38:30:b5:f7:ba:
24:4a:fc:4a:0a:b1:ce:36:e3:62:99:e1:14:a4:69:e9:e7:c1:
a9:56:72:b8:b1:b1:51:35:01:1a:a2:80:56:d8:a2:34:59:3b:
44:55:bb:fb:f7:37:a9:2d:25:28:d6:81:c0:9c:12:0b:22:c5:
ab:ea:ca:1d:22:b3:34:5b:5e:18:a0:62:4f:cf:63:65:28:b2:
12:34:69:75:a5:38:00:d8:fe:af:84:3b:b7:ae:19:ad:b1:7b:
f6:d6:fb:5a:5a:b0:8c:4e:0d:bd:2e:19:b0:2b:7c:d8:c9:f5:
11:43:af:5c:d3:66:e7:a9:9b:42:65:73:74:13:53:39:0c:e5:
39:68:c7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:55:47 2026 by rpki-client