Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
File: znGAxLrTz0JaUGcuHLep0qx44gw.mft (raw, json)
Hash identifier: wtoE358x7TU5r2v5chK1Aj59hXQ69pUXwdSVyY5LL7k=
Subject key identifier: 50:C0:27:27:16:43:43:F1:3E:87:05:15:86:0F:FA:98:14:EC:F8:C6
Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Certificate serial: 019CAC7E0DF98C5EB3E3CE6DB1B366CDEF29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
Manifest number: 14EE
Signing time: Mon 02 Mar 2026 03:01:08 +0000
Manifest this update: Mon 02 Mar 2026 03:01:08 +0000
Manifest next update: Tue 03 Mar 2026 03:01:08 +0000
Files and hashes: 1: CmEbUhenhDmMKvHKSkFpe9LG8X0.roa (hash: Jsb+hfYBWXp4dm2lj3dTAoFqYAK6O+6kl4dBC77ANZE=)
2: GtNJ0lmoQ9ZuqCpl3-J4Re7um1k.roa (hash: OD5qNfz5l9josRO/cRdoZZIkXHpha2NNc9udJTgh6/s=)
3: SQ9ZxRxAMd1xoAu9tA2c2yS9YUQ.roa (hash: MYiap9ADnfYQb/YwxbWyM4PVhhzPTbhg8edINlxn310=)
4: znGAxLrTz0JaUGcuHLep0qx44gw.crl (hash: c1CA4s+2nAzmTwgX8NfVSQsDV+l925IgnxCHHfuXKAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:0d:f9:8c:5e:b3:e3:ce:6d:b1:b3:66:cd:ef:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Validity
Not Before: Mar 2 03:01:08 2026 GMT
Not After : Mar 3 03:01:08 2026 GMT
Subject: CN=50c02727164343f13e870515860ffa9814ecf8c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:96:23:96:42:ba:ce:af:35:e1:15:af:bc:41:
3f:a4:8b:3e:ba:a5:96:55:6b:bd:07:d3:81:c8:e2:
9d:14:33:ab:96:cb:3f:ff:79:fc:35:bb:35:4d:e5:
79:9a:cc:7c:00:ff:11:06:46:ab:67:7e:40:d3:89:
d2:9f:d5:3f:eb:f5:cd:b8:af:bd:a3:ef:3b:e6:5d:
d4:3f:3a:d3:8f:fe:01:92:bb:69:2b:2f:63:1c:52:
b4:f5:54:78:0a:b7:ee:30:74:6c:53:84:80:b3:d5:
b5:8b:3c:65:2f:4a:18:4f:57:72:8e:33:d8:f8:52:
a1:ef:a4:74:ad:16:df:67:3d:70:c8:92:6c:3c:f6:
85:78:3a:af:60:3d:dd:09:a9:68:5d:46:16:77:33:
03:5d:96:0b:9e:85:cc:1a:70:2b:35:25:2e:cb:09:
9b:a1:f7:72:91:5e:42:f1:4c:be:35:c1:cc:f9:81:
23:9b:1e:0b:ec:90:67:1c:28:c7:d7:49:b5:10:3c:
f4:09:77:56:55:0e:54:60:d7:d7:33:2e:60:09:c0:
45:7a:d4:05:08:24:01:81:42:b2:bf:5c:63:55:65:
9b:b3:3c:43:f4:07:97:1d:b2:f3:e2:36:96:21:c3:
91:d7:ff:3a:91:e2:f7:52:80:a6:3a:d9:50:2f:46:
c0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C0:27:27:16:43:43:F1:3E:87:05:15:86:0F:FA:98:14:EC:F8:C6
X509v3 Authority Key Identifier:
keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:95:04:60:13:ab:53:a1:15:79:a7:7d:c8:ef:c8:15:16:71:
6a:5b:f0:bf:1e:89:57:c9:cb:a4:55:3c:a3:4b:69:ea:d6:d3:
1d:a6:8b:4a:20:d6:5e:1f:48:b3:6c:68:da:da:ac:c8:75:58:
73:9f:34:ac:49:83:50:4d:48:42:a3:8f:5d:d5:5c:bd:94:12:
6b:39:02:51:54:75:49:96:8a:79:33:92:19:42:14:77:f2:f9:
f6:f5:73:fe:fb:8c:16:fa:96:92:1e:9b:6a:0e:95:17:00:c4:
f5:a3:b0:17:42:f9:77:af:ca:f2:fa:26:05:79:67:77:92:ef:
77:c5:7e:da:fe:31:14:2c:b0:6c:7a:c2:24:e9:5b:17:a6:3f:
fa:15:87:a1:77:86:c8:04:c8:f2:31:68:d9:8b:df:bd:d8:04:
d6:09:f3:e4:0e:7f:e0:39:1b:ae:e5:21:ea:a3:00:96:a7:64:
4b:4b:35:7c:23:dd:e5:dc:ea:d9:19:75:3f:a1:6b:24:ee:b6:
f3:22:91:15:2d:ca:de:e0:88:b1:97:fe:04:77:29:de:c0:ed:
73:a8:ea:33:23:d6:c7:74:b8:e4:a2:dc:43:14:aa:4b:28:8c:
97:69:98:99:4b:ee:c4:8d:66:c2:40:5e:0b:82:18:87:ea:5f:
4e:9e:10:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:49 2026 by rpki-client