Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
File: zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft (raw, json)
Hash identifier: f1BAD4Fb3DQovEg2ciPdMRuSmMYgXZ1htFFf5/BG+Vs=
Subject key identifier: 9A:23:C4:2C:A2:54:A5:96:01:04:9A:FD:D7:22:FD:56:C6:A2:7A:D9
Authority key identifier: CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
Certificate issuer: /CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Certificate serial: 019CAC0FEE8FBC9BE2AC5B090AF4D5157E8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
Manifest number: 087F
Signing time: Mon 02 Mar 2026 01:00:51 +0000
Manifest this update: Mon 02 Mar 2026 01:00:51 +0000
Manifest next update: Tue 03 Mar 2026 01:00:51 +0000
Files and hashes: 1: aESuuALkp9R98yDiNUY5nveL4-o.roa (hash: o135yeh0bwtH5IHdNJMNH9c/+RcrghX/j14puM1j2sk=)
2: zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl (hash: vtFBkhpNITKsK4GLo9qlnnseHECacqBcLcDPNT0oNkU=)
3: zp6kT4fjph_A7Z-y494w10c-4u0.roa (hash: WOnZMPb4q3t7/YEohAO+g25GuBKKPvaAblQVDeWj5K0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:ee:8f:bc:9b:e2:ac:5b:09:0a:f4:d5:15:7e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Validity
Not Before: Mar 2 01:00:51 2026 GMT
Not After : Mar 3 01:00:51 2026 GMT
Subject: CN=9a23c42ca254a59601049afdd722fd56c6a27ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:44:84:d7:fe:4a:47:28:b5:18:76:f2:89:82:
89:1d:30:35:14:f9:d2:86:16:b6:34:7a:31:c2:cf:
65:73:a3:c4:55:12:4c:cf:0b:07:dd:19:55:e4:75:
10:36:26:3e:a4:23:12:ab:8e:8f:88:62:b9:2e:75:
4a:39:0f:ce:80:31:3b:1d:b3:46:18:13:47:22:53:
46:be:0e:2a:b8:3a:6d:a5:da:eb:62:67:28:f9:19:
1f:3c:c2:ae:c7:be:96:51:12:14:9d:3d:5a:13:f8:
d0:2a:25:45:8d:23:52:cd:50:ea:e3:ea:e9:bc:15:
b3:9b:9d:3d:79:c9:fb:e0:a6:fa:f7:d2:c7:08:93:
1a:de:e5:4e:40:8f:f1:32:3f:11:29:c1:ba:3f:17:
b6:f7:42:de:84:42:c6:7e:5c:0d:43:3c:f9:69:df:
ff:ea:66:fd:ec:6e:be:8b:d7:0c:04:02:d4:4f:11:
80:d2:6d:80:c7:e1:36:79:f0:d6:56:70:e7:46:46:
5d:43:db:45:e7:eb:d5:6b:d7:d9:e5:90:09:32:75:
f6:2e:1f:47:6a:7a:d2:ab:f9:0b:48:bb:1f:ad:91:
c5:9c:7c:ac:00:da:a6:cc:00:3e:a7:69:5e:78:95:
20:c7:95:f6:f5:b8:19:f9:dc:f3:12:f2:26:2b:37:
e2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:23:C4:2C:A2:54:A5:96:01:04:9A:FD:D7:22:FD:56:C6:A2:7A:D9
X509v3 Authority Key Identifier:
keyid:CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d3:bb:14:ce:c2:42:49:e0:c2:f8:9a:a9:61:db:28:b7:c6:
d6:d2:a3:f1:68:22:84:1f:81:1a:f7:94:b3:a3:70:b2:c5:24:
fc:a7:33:4d:dc:6f:14:c2:16:7c:db:25:43:5f:ff:68:2a:b6:
5f:72:95:6a:5e:dc:f2:c9:d4:35:06:90:38:7a:3f:f8:4e:55:
6d:bc:9d:df:db:e0:3b:c4:96:8b:2d:6b:02:20:ff:f5:b5:62:
23:ad:3e:e0:d8:9e:9c:e5:c2:53:e1:4e:12:22:f3:11:fa:b9:
13:cc:c5:c0:7e:61:87:44:0f:85:dc:66:31:39:c0:dc:3b:9b:
fd:c9:6f:b5:38:cf:8b:3d:74:3c:56:be:0e:8b:8d:93:b7:a5:
e6:6c:78:d5:f0:1b:d1:64:2d:69:7b:c5:14:b6:34:90:c9:9e:
d9:19:c8:25:a7:9a:8c:da:b1:dd:db:32:a7:07:a9:44:af:b7:
40:74:e1:63:53:02:64:c9:de:13:89:3d:4b:e8:61:f9:d2:ea:
d7:22:66:bc:f0:b1:3b:79:75:6c:09:52:16:7f:07:f2:48:7a:
7e:cd:c5:2e:14:0a:80:7e:b6:2e:bf:36:60:eb:ca:08:f8:25:
90:f2:0d:9f:34:f0:02:35:e1:94:c6:eb:ad:4b:de:35:73:f0:
b6:5e:41:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:27:20 2026 by rpki-client