Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
File: Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft (raw, json)
Hash identifier: ESX/3fikF4BwV8imp7tmdlUYmhhlGqA05MuXt+voWZc=
Subject key identifier: 31:32:76:64:D2:D3:E5:4A:33:BC:FF:F2:39:5E:4A:F0:A7:85:6F:5F
Authority key identifier: 66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C
Certificate issuer: /CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c
Certificate serial: 019CA9B39DD771EC13A545D2EAF66AA33573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 14:00:46 +0000
Manifest this update: Sun 01 Mar 2026 14:00:46 +0000
Manifest next update: Mon 02 Mar 2026 14:00:46 +0000
Files and hashes: 1: 1yqrC5cFVqno3yUjEb2JEevt8hU.roa (hash: ALDcP7GRoyghMSXeDYW2VCy+XpgGkyrbpJ7hv982jsc=)
2: Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl (hash: ZuwjzglB1XV8EuM039Y7wGHVkc5cV3/OCOhUteYAsSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:9d:d7:71:ec:13:a5:45:d2:ea:f6:6a:a3:35:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c
Validity
Not Before: Mar 1 14:00:46 2026 GMT
Not After : Mar 2 14:00:46 2026 GMT
Subject: CN=31327664d2d3e54a33bcfff2395e4af0a7856f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:57:be:d3:5c:7a:27:88:f3:39:a9:a6:9c:a9:
0e:72:70:49:4e:64:68:a2:5e:47:7d:be:0e:a2:e1:
6d:3d:be:ca:79:65:67:1b:dd:2f:fc:9e:d5:f4:6e:
bd:8a:f9:ec:87:37:32:ff:d8:de:82:81:88:da:5b:
43:65:1c:c2:33:01:9b:30:4f:53:77:f8:66:1e:f7:
80:e6:75:da:c7:45:a4:4f:02:11:bf:be:32:7c:87:
20:d9:45:94:36:59:05:d5:c8:33:10:76:58:3f:91:
fd:5c:97:0e:e0:b0:15:c9:7e:fb:e4:a7:ff:f0:9c:
ea:94:fb:46:86:c3:64:e9:78:b2:c7:37:4d:96:6d:
63:45:36:90:a5:b5:10:bb:97:a6:9b:c6:98:ee:17:
b3:fb:49:0d:31:d8:97:1e:a7:1a:a3:3e:b7:b6:56:
5c:c1:a6:d8:a3:47:92:a6:be:37:c7:f2:ce:c9:72:
84:43:40:f6:d8:2c:af:70:a3:d0:66:c8:14:82:b2:
48:f7:96:d2:b1:21:b3:8c:4a:c4:1e:0f:fa:29:9d:
87:3a:91:17:27:f0:8e:8c:6f:da:3e:16:ad:9a:a0:
80:c0:61:fa:0c:6d:d1:80:ae:5a:52:4c:1a:b0:5a:
5f:c3:6a:e9:07:3c:fd:f5:c6:28:07:b5:dd:a7:0a:
67:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:32:76:64:D2:D3:E5:4A:33:BC:FF:F2:39:5E:4A:F0:A7:85:6F:5F
X509v3 Authority Key Identifier:
keyid:66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e6:e1:f2:69:b4:36:f0:a1:cc:59:53:09:1c:15:1d:17:e7:
f6:06:2c:2e:f8:8f:cd:b8:31:04:85:9c:7d:c1:f9:c0:4c:26:
34:bc:72:b6:e8:c3:fb:d6:28:9b:a4:62:04:8c:18:eb:8e:5c:
02:2d:e6:08:52:5d:de:3c:13:c6:b4:15:48:9a:50:70:ac:eb:
10:9d:50:1f:24:3d:6c:0d:94:75:60:39:0b:f1:4b:cf:5a:63:
d9:da:d9:b8:b0:ad:34:cf:06:54:4c:52:35:a2:6a:a9:12:30:
67:28:c5:ce:08:d0:a7:f6:3b:c5:41:25:ee:29:95:dd:21:33:
f0:96:4c:e9:51:08:74:42:70:ce:8c:3e:15:a5:55:1d:31:3f:
be:40:e0:7f:58:c8:d2:f6:7e:d8:45:29:55:b1:5c:56:8e:9b:
fd:2f:48:dd:9f:dc:4f:9e:e4:c0:7c:c0:1d:0f:02:d5:77:61:
50:10:01:4b:f9:d9:96:34:8f:3f:a9:a1:30:6a:b7:32:b9:3a:
7b:eb:e8:63:26:f6:a5:d6:b9:bd:d4:3c:54:49:02:2d:43:e0:
fa:09:47:dd:b3:eb:3e:3e:46:51:2e:d7:35:7c:be:d5:e2:fe:
88:0f:fc:20:52:5b:11:f1:f6:ba:e7:06:da:a0:02:17:ca:7b:
bf:ce:45:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:54 2026 by rpki-client