Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
File: zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft (raw, json)
Hash identifier: EgzGSCQRK6EhgNOof0HvNa8S1PCqPh8/kEqPz0kwXFg=
Subject key identifier: 6D:97:D1:E9:BB:46:96:98:D5:9E:FD:3E:1E:05:CB:42:5C:F6:0B:69
Authority key identifier: CD:7E:E4:B0:32:79:96:30:4C:F1:8A:12:8E:26:55:78:0C:9D:6B:9B
Certificate issuer: /CN=cd7ee4b0327996304cf18a128e2655780c9d6b9b
Certificate serial: 019CAD22A243BE0682C74133CC945C387ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
Manifest number: 0DE3
Signing time: Mon 02 Mar 2026 06:00:53 +0000
Manifest this update: Mon 02 Mar 2026 06:00:53 +0000
Manifest next update: Tue 03 Mar 2026 06:00:53 +0000
Files and hashes: 1: Q8ZJJ74q6bMVlfcvJJudps61QXo.roa (hash: 3ZMgLTga1etNt6/GjM7UgVlhZAFMLoY4B0xB96tmQlk=)
2: zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl (hash: JXiIrup8EFW0bXBTB6fNkS5eJEUiSHTtI2+wkxzC9fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:a2:43:be:06:82:c7:41:33:cc:94:5c:38:7e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7ee4b0327996304cf18a128e2655780c9d6b9b
Validity
Not Before: Mar 2 06:00:53 2026 GMT
Not After : Mar 3 06:00:53 2026 GMT
Subject: CN=6d97d1e9bb469698d59efd3e1e05cb425cf60b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d6:95:2c:03:0d:2b:b1:e5:fe:e3:6c:86:90:
75:3d:29:bc:fa:76:1a:28:6e:41:7b:c4:ee:05:e6:
14:e5:37:6f:37:01:80:66:9a:60:54:db:c7:5c:9f:
e9:62:cd:e7:9a:50:42:2d:76:91:72:6b:7b:ff:68:
59:ee:ab:80:97:5b:c2:a5:fa:d0:75:2f:37:3d:f9:
53:37:58:51:08:23:24:e8:db:12:45:e4:f8:e8:35:
13:ad:ad:5a:45:06:2a:80:c8:b7:c2:52:4a:97:ab:
45:57:65:93:b2:cd:ff:1f:a5:59:0c:35:39:45:ca:
1a:90:c2:72:7b:39:c7:f7:67:a5:12:e2:2f:40:0b:
53:88:d0:25:d5:8f:48:f9:8b:79:1a:3f:a6:a4:52:
61:ee:bb:aa:78:8a:ae:41:b3:72:ef:71:7b:ff:54:
fe:f0:a3:f5:73:d8:9a:fa:96:b8:88:4a:ae:c9:92:
8e:a1:a3:7a:4a:f8:8c:09:32:00:26:66:af:18:26:
05:1a:a0:8c:7f:e7:be:52:88:42:31:9c:73:ec:8f:
db:64:d4:f5:e1:35:61:a5:fa:f6:e3:e0:50:3f:bd:
ff:6d:10:fc:3a:c6:81:f0:1e:ed:25:fc:fe:1b:4d:
d8:87:6d:5f:8b:99:6f:4e:4c:21:77:ff:be:74:f7:
72:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:97:D1:E9:BB:46:96:98:D5:9E:FD:3E:1E:05:CB:42:5C:F6:0B:69
X509v3 Authority Key Identifier:
keyid:CD:7E:E4:B0:32:79:96:30:4C:F1:8A:12:8E:26:55:78:0C:9D:6B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:10:52:e4:6d:91:24:74:e1:a3:32:2e:89:65:a6:33:c1:36:
84:7e:70:3a:d8:26:de:fc:93:65:86:b0:99:11:42:43:e3:b6:
e0:36:17:da:ae:ca:46:1f:79:c4:8e:08:49:d3:08:de:ce:48:
3a:0b:2e:5e:51:e7:47:43:c6:dc:de:38:6c:13:14:0b:bc:26:
6a:a6:dd:b8:0c:6f:55:c6:ca:6c:20:f5:6c:8e:2c:31:3f:91:
f4:33:cf:d7:ae:6d:ed:f5:0c:0f:45:00:61:42:e2:8f:f4:3b:
98:3e:65:4b:78:b7:15:9f:c6:49:f0:fd:00:06:2f:1d:56:f9:
08:32:53:26:e7:94:34:66:de:f2:7f:c7:3b:87:90:15:35:bc:
da:ce:a7:53:31:81:cb:0d:65:75:8b:fd:c6:c5:f0:36:5c:10:
fb:b7:76:26:7d:03:bd:d0:2d:cf:ae:a6:21:e3:49:89:31:59:
44:29:0f:09:89:97:5a:84:e2:7d:49:ca:1c:b9:de:5c:e3:aa:
c9:c0:bf:62:a7:98:06:45:f0:ac:b3:75:b3:2f:54:87:59:04:
d8:c2:74:c8:23:26:a7:3f:34:eb:7c:0b:8f:79:33:77:aa:9f:
ba:89:ed:f0:4c:df:e7:c8:58:28:6d:64:f2:ff:b9:7e:43:d6:
33:a1:d5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:09:53 2026 by rpki-client