Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
File: znD-aY5Nrp18MrwVbEGAZP3P9LA.mft (raw, json)
Hash identifier: 4R0apes8bbs0JU/01UbcILfDpq6UiQZFtw+Smm4FWfQ=
Subject key identifier: 04:C2:2E:D5:83:21:72:C0:85:E7:81:2A:C2:B8:8F:72:85:50:64:C3
Authority key identifier: CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0
Certificate issuer: /CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0
Certificate serial: 019CAA8F5EFE4EDCD33EDC25370E7DF7F526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 18:00:48 +0000
Manifest this update: Sun 01 Mar 2026 18:00:48 +0000
Manifest next update: Mon 02 Mar 2026 18:00:48 +0000
Files and hashes: 1: aSaj4x_eEi9R61JBcv_KlqSjEVo.roa (hash: e0WEFFwimfYALBRW6v2KlOISxXFOHzRtxX7qcK+LLls=)
2: znD-aY5Nrp18MrwVbEGAZP3P9LA.crl (hash: DmnPcQZalq5NBmMXXdb2tBreSmjVeQ4FARn/6EygmAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:5e:fe:4e:dc:d3:3e:dc:25:37:0e:7d:f7:f5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0
Validity
Not Before: Mar 1 18:00:48 2026 GMT
Not After : Mar 2 18:00:48 2026 GMT
Subject: CN=04c22ed5832172c085e7812ac2b88f72855064c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0e:ce:44:f4:f0:2c:5d:13:f9:2d:ff:cc:98:
fa:f8:e0:b4:91:03:0e:e4:5b:34:5a:5c:8f:4b:1d:
a4:4e:92:dc:c9:2c:19:28:da:9a:e3:4f:72:48:83:
08:34:39:97:47:87:8b:2a:36:22:1c:6f:d4:d2:42:
48:f5:4d:06:6d:5c:e2:80:69:c7:d8:7e:70:1c:9d:
9e:a4:44:10:80:58:34:ac:a6:94:5d:ed:09:9b:3e:
26:e0:08:9d:f0:e2:d6:79:57:37:34:14:54:76:1e:
32:92:e5:f7:b1:d2:79:30:07:d7:de:aa:bc:b3:58:
42:7e:ca:32:e2:49:85:25:f9:40:d2:9b:ec:dd:42:
7f:3f:8e:34:e7:b6:1e:20:67:e1:44:e4:82:8f:cb:
e6:88:19:10:95:c8:14:e2:80:56:69:5a:a7:44:71:
d2:a7:83:a4:a3:5d:0a:67:55:0c:5a:83:cf:41:58:
97:ed:20:72:6b:0b:f1:dd:04:f8:1d:2f:97:a7:a8:
d3:dd:d1:96:65:21:0c:05:c5:2d:4a:9c:3d:f0:c8:
0c:a3:1b:be:99:22:2a:7a:24:71:19:d7:1e:bf:56:
2c:fd:94:49:e4:01:01:53:dd:e1:c0:6e:87:5f:8a:
18:cd:79:ee:4d:09:fd:dd:25:f7:6c:50:8d:34:21:
51:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C2:2E:D5:83:21:72:C0:85:E7:81:2A:C2:B8:8F:72:85:50:64:C3
X509v3 Authority Key Identifier:
keyid:CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:fe:53:da:60:31:c7:ab:bf:d3:8a:6e:24:ac:a2:46:87:0f:
32:ba:96:bc:08:97:64:30:19:b4:b1:47:6a:a0:f4:6a:76:c7:
8c:0a:58:82:dc:77:9e:4d:9d:d8:91:4f:c9:71:19:94:77:cb:
2b:1f:24:ca:22:6b:65:62:ba:d2:3f:38:a3:d9:62:9d:f4:b4:
cc:16:1c:b2:fe:41:ec:9f:50:94:aa:a8:49:be:8a:10:47:da:
ee:47:e5:45:34:dc:ee:28:55:17:6f:aa:a7:aa:57:f8:bb:66:
26:dd:b6:6b:f0:42:e9:a9:cc:cd:34:79:81:df:04:89:40:00:
73:ea:4a:ac:2a:d1:30:b0:87:cb:20:18:89:69:8f:d0:92:db:
a1:c1:9f:37:78:ae:56:39:53:cd:36:0b:ab:d8:6b:e8:d1:ae:
9a:17:a8:c9:1d:40:13:af:c8:05:11:39:d3:a4:33:2c:5f:6e:
ae:4e:aa:6d:0a:d2:5c:1f:9f:09:9c:8f:19:2f:e4:62:b7:a1:
f2:e8:56:7c:04:b4:a1:d6:46:b2:df:61:ef:17:c6:61:d1:b5:
6c:60:60:9b:a0:57:3a:5d:59:01:06:f3:a8:12:4b:64:2f:ba:
5d:8d:bd:28:46:e2:1f:08:c3:6f:11:c3:73:cc:b0:be:68:d2:
52:22:1d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:43:24 2026 by rpki-client