Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
File: zfUae0xbJFgCkrjEqmqpwyVmVIA.mft (raw, json)
Hash identifier: sQXxhsBUUfEG8PlNLJiCwih7n12oAsIqZhcJwqR9VsU=
Subject key identifier: 31:42:5D:ED:32:8F:46:99:1A:BD:61:F3:16:0E:C5:8A:6D:5E:E3:3B
Authority key identifier: CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
Certificate issuer: /CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Certificate serial: 019CAF1117FE3D237434678CEB434DFD7040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
Manifest number: 0D3E
Signing time: Mon 02 Mar 2026 15:00:58 +0000
Manifest this update: Mon 02 Mar 2026 15:00:58 +0000
Manifest next update: Tue 03 Mar 2026 15:00:58 +0000
Files and hashes: 1: JLo2q2iBmFKeMgKoTnjBpvjAjJY.roa (hash: qaCH/S3HYUp62JimShr7jtytmfdudoB+yYvxVEqY8JY=)
2: zfUae0xbJFgCkrjEqmqpwyVmVIA.crl (hash: ry0M1dL8Sx4AaLWTz8Lz3w0M54UgJQKbleujB/xB8OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:17:fe:3d:23:74:34:67:8c:eb:43:4d:fd:70:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Validity
Not Before: Mar 2 15:00:58 2026 GMT
Not After : Mar 3 15:00:58 2026 GMT
Subject: CN=31425ded328f46991abd61f3160ec58a6d5ee33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:ec:60:b5:29:a7:ff:57:34:ee:78:fd:da:
73:57:39:4f:44:49:16:b0:dc:4f:e5:40:12:7f:88:
5b:11:09:b5:a3:eb:45:56:29:27:1a:20:47:8e:c5:
93:0a:92:0e:e7:0b:1f:ff:4d:80:08:44:53:65:f7:
13:ce:ee:43:2c:85:06:ed:a3:0c:25:1b:3a:e9:2e:
e0:1e:42:3d:12:5b:9b:f2:26:89:d3:ed:da:8b:61:
ef:f1:aa:7b:6e:63:45:e7:1b:ba:5b:56:d5:54:94:
c7:38:aa:62:69:67:f5:f7:6b:8a:17:d4:e5:28:80:
8e:6a:e8:6a:26:60:ec:43:53:fd:22:8c:e9:7e:6a:
4c:92:6e:b6:aa:a4:36:36:42:18:16:7d:a2:dd:f6:
bc:d0:3c:5b:cc:a3:f0:ce:db:aa:b9:59:56:e6:ef:
c3:a3:45:17:ea:fb:11:bd:fe:a3:91:06:c2:b5:8f:
a2:62:10:9c:12:45:99:3a:6d:e9:25:ba:22:35:b6:
a7:b4:27:90:0f:73:54:98:3d:7b:c3:c9:d2:ce:35:
3d:33:cf:b8:9a:a8:e3:90:e9:46:3c:0c:51:6e:c1:
61:36:d0:71:3b:ed:b9:05:73:b2:13:3c:c3:ed:a9:
06:2d:3a:5f:5f:c8:41:2a:88:5e:28:bb:96:cb:6f:
41:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:42:5D:ED:32:8F:46:99:1A:BD:61:F3:16:0E:C5:8A:6D:5E:E3:3B
X509v3 Authority Key Identifier:
keyid:CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:86:40:83:3e:3c:f6:83:61:c6:4d:07:b8:28:2f:36:eb:9d:
2d:48:5a:e5:81:e4:4b:51:b5:8e:f6:79:30:38:e8:a3:4b:78:
92:ca:af:98:9d:24:2d:3a:f1:2d:80:02:9a:f1:3c:dd:24:8c:
7c:95:5f:a0:0a:81:c4:09:aa:17:31:0b:82:98:75:84:37:ea:
c5:96:54:47:f6:a4:33:79:1d:75:4f:b9:72:cf:d2:49:0d:ab:
ee:ad:bb:b0:2e:e4:db:49:e5:dd:74:6f:1b:e5:91:c4:7c:d9:
b2:06:5a:4c:d3:9d:60:bf:1f:65:80:39:1f:b0:65:3f:8f:69:
de:47:61:74:c3:8a:76:d6:1a:f9:ff:0b:6c:0c:ce:e1:5b:8b:
f5:82:36:03:92:17:8c:67:12:84:23:3e:d1:d8:7e:5b:3a:ab:
85:54:e3:cc:33:aa:a5:8e:7a:50:44:a8:77:5e:fb:14:80:e7:
c8:1b:41:4e:73:d2:fa:dc:3c:f8:e5:20:d7:77:35:ac:ce:9e:
3a:7f:17:c1:0b:b6:4a:7e:88:cd:a1:52:95:1c:60:27:6b:19:
24:87:2f:24:58:13:62:5e:f8:99:4d:1c:65:52:e7:38:38:d8:
1f:f3:53:5d:93:03:e0:52:15:dd:d8:59:7c:a5:c5:18:c4:74:
f9:74:0b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:43:58 2026 by rpki-client