Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
File: zahD6BKxbexgu3CYykEzEX24R00.mft (raw, json)
Hash identifier: C8t7y83/nOsDXhcrd2hNx/xg0mtBhXkeBtsnJi1zg6k=
Subject key identifier: 0A:22:0B:A0:07:35:09:83:CB:D0:E9:7F:4F:53:86:BD:F1:7B:8B:7C
Authority key identifier: CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
Certificate issuer: /CN=cda843e812b16dec60bb7098ca4133117db8474d
Certificate serial: 019CAF1108B76C1A7F2972CED1F3C6F5DC26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 15:00:55 +0000
Manifest this update: Mon 02 Mar 2026 15:00:55 +0000
Manifest next update: Tue 03 Mar 2026 15:00:55 +0000
Files and hashes: 1: xAJAqKl5Srwo2ARzZhLG6xPoMEY.roa (hash: zXin4xfG6I9ng2fyOSNQGYSR3toHXgB+MkkZOtI6MnY=)
2: zahD6BKxbexgu3CYykEzEX24R00.crl (hash: eWbkqQ8szQ37DOceHrJ6ZdN5SzHf1NyLhfDkc9xKLjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:08:b7:6c:1a:7f:29:72:ce:d1:f3:c6:f5:dc:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda843e812b16dec60bb7098ca4133117db8474d
Validity
Not Before: Mar 2 15:00:55 2026 GMT
Not After : Mar 3 15:00:55 2026 GMT
Subject: CN=0a220ba007350983cbd0e97f4f5386bdf17b8b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:08:00:05:63:a7:5d:9c:e1:ff:fa:c5:b0:
85:99:0c:9d:b0:31:b6:8d:07:2d:59:6f:07:10:d3:
b6:9f:6d:b7:81:1f:ec:75:09:39:1c:a8:2e:2a:84:
aa:9c:43:2d:84:f5:c8:44:fa:1f:3b:58:33:62:87:
51:d3:6e:9a:98:15:1c:0e:1e:be:cf:84:52:97:91:
91:5f:0c:99:c8:32:a2:8b:b2:35:6d:24:1e:17:03:
33:fd:e8:7a:9a:39:cc:f2:1c:a3:4e:3e:71:98:82:
fb:0f:4e:d0:12:af:8a:37:78:ec:7c:54:43:25:10:
d1:5d:14:39:22:d3:30:4e:d2:c7:7e:fb:80:34:35:
a8:ff:74:0a:0f:cd:2f:0b:7a:58:3a:0e:ff:86:54:
54:42:a3:be:71:94:5e:a6:71:44:85:be:17:f6:fe:
96:2e:fc:79:28:ad:81:39:46:0d:84:70:65:d8:ec:
ac:3f:f8:3d:fa:ec:34:91:a2:14:bc:35:28:fc:d6:
37:98:8d:e8:9a:49:87:40:66:c9:20:3d:4a:6b:9b:
cc:f8:e6:b5:42:4c:cb:8f:c0:40:26:86:2d:9e:c9:
4d:9f:58:a6:9c:45:7f:e7:af:41:5e:60:de:e8:0a:
18:f5:73:1d:fa:b2:ff:c0:d5:0c:ae:44:9a:a3:10:
db:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:22:0B:A0:07:35:09:83:CB:D0:E9:7F:4F:53:86:BD:F1:7B:8B:7C
X509v3 Authority Key Identifier:
keyid:CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:21:10:5a:7c:11:8a:75:17:18:35:2c:06:51:65:8b:fe:6f:
f0:32:80:09:c8:3c:39:29:1f:f4:f3:f3:88:b1:77:83:cd:eb:
dd:b5:a5:98:ec:d2:5e:83:37:1b:14:b4:9f:03:9a:7f:b1:66:
59:0c:21:8d:25:84:2d:5f:cb:db:68:ad:cb:22:57:e4:cf:81:
4e:d5:b1:e3:6a:73:5c:49:ef:61:f6:b3:31:22:98:32:c8:cf:
37:b1:fb:c2:2a:9c:c9:f1:37:32:44:67:f6:65:51:8f:c6:9c:
92:5a:71:49:6c:10:c1:4f:a4:2f:60:ac:b4:c3:c8:4e:5d:51:
7e:2c:46:52:71:4f:21:5a:b9:70:af:bf:46:da:d9:5d:e2:e7:
bb:e5:9f:60:ee:e8:5b:4c:67:6b:9e:c3:54:5d:fe:7b:b2:8b:
eb:d9:c3:6c:fb:a5:f5:4c:32:70:6d:a9:ae:81:e0:2c:b9:8d:
94:d5:b0:45:99:9a:43:86:de:7b:cd:fb:3d:a2:8f:17:5b:b4:
d8:49:47:cd:d1:4b:d3:32:38:94:c5:3b:e0:7a:40:70:9c:6e:
da:23:ce:6b:08:2b:09:25:d2:69:28:6f:bd:f9:48:5a:96:23:
80:0b:c8:b7:c7:ba:50:a9:78:6f:a2:d1:d8:9f:bf:8b:d7:53:
09:23:f5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:30:59 2026 by rpki-client