Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
File: z65GEYj_we8vOhR0VxqUOaVTdKw.mft (raw, json)
Hash identifier: O6mfpUqLig8k3lXIUyPAeQ/2ZCzbLqgE80whaVI/uxE=
Subject key identifier: 31:07:7A:E7:25:E8:C9:DB:97:4C:B6:E4:4F:BF:BA:01:1F:8A:7F:C9
Authority key identifier: CF:AE:46:11:88:FF:C1:EF:2F:3A:14:74:57:1A:94:39:A5:53:74:AC
Certificate issuer: /CN=cfae461188ffc1ef2f3a1474571a9439a55374ac
Certificate serial: 019CAC7E6D784A28CFA9CE076F19204805D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
Manifest number: 0560
Signing time: Mon 02 Mar 2026 03:01:32 +0000
Manifest this update: Mon 02 Mar 2026 03:01:32 +0000
Manifest next update: Tue 03 Mar 2026 03:01:32 +0000
Files and hashes: 1: X7bd6lhwCTS9gshWbVNBD-T1x7E.roa (hash: OdFNs5uEDNlf80PtTDUu5XNrjiIU+VK7u1fw+Wm4wjc=)
2: z65GEYj_we8vOhR0VxqUOaVTdKw.crl (hash: 3yJzgPXQ4n3DZYCUs0jtQ4bcElbPNJc1PUbxHle4u6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:6d:78:4a:28:cf:a9:ce:07:6f:19:20:48:05:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfae461188ffc1ef2f3a1474571a9439a55374ac
Validity
Not Before: Mar 2 03:01:32 2026 GMT
Not After : Mar 3 03:01:32 2026 GMT
Subject: CN=31077ae725e8c9db974cb6e44fbfba011f8a7fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:5e:37:ff:39:28:48:32:82:07:56:58:b9:
bd:9d:7a:b5:22:cd:da:5c:41:38:2d:4a:29:f5:b4:
7f:38:1e:32:33:f2:dc:8a:9d:66:45:ed:25:ec:ef:
e8:e5:6a:9a:1a:fb:ae:1d:5f:9c:ae:6c:62:c6:a9:
41:74:f1:02:1d:6e:72:18:33:81:f9:2c:ca:90:dc:
ef:43:5f:29:eb:d2:16:66:de:30:fc:5c:54:bb:24:
32:79:77:06:76:e4:11:96:43:76:47:54:0e:78:d2:
85:4a:f1:ea:33:7a:3d:eb:90:01:08:8c:b2:ce:aa:
4e:c3:ae:12:2d:44:f2:88:a5:e6:ed:e9:b0:11:44:
1d:f7:19:81:ba:fc:dc:a3:0e:52:23:e6:60:c8:de:
fd:d7:e3:53:24:9d:36:9c:e6:0b:5c:40:37:3b:7b:
40:54:cf:0f:58:a6:98:95:ee:65:9d:68:0c:d4:13:
39:32:b8:db:9c:67:59:95:26:9a:1d:dc:3c:0a:4f:
69:d1:af:d8:1d:22:55:09:1f:59:7b:15:1e:ef:e0:
44:d7:11:8b:b7:16:ca:44:7e:d5:62:9f:8e:5c:5f:
d4:be:c3:ea:fc:2f:54:59:0c:8e:4f:61:f3:e8:05:
06:54:f8:aa:53:54:cd:9c:54:d8:1c:ff:35:97:32:
3a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:07:7A:E7:25:E8:C9:DB:97:4C:B6:E4:4F:BF:BA:01:1F:8A:7F:C9
X509v3 Authority Key Identifier:
keyid:CF:AE:46:11:88:FF:C1:EF:2F:3A:14:74:57:1A:94:39:A5:53:74:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9c:6b:bb:49:87:73:25:99:65:19:0e:b6:32:de:81:c5:9d:
8b:13:14:af:53:f1:89:c4:ca:62:f2:13:43:de:12:2d:be:d5:
3c:f3:96:ec:87:d1:96:38:75:6c:8b:86:2b:31:ae:71:8a:eb:
17:e4:ce:da:fe:16:dc:78:e5:12:f1:00:6a:9a:99:eb:c5:71:
a7:4e:e4:02:53:c8:a6:c0:36:a0:77:73:fd:cc:e6:a3:0a:44:
74:c1:93:9e:05:83:f6:d1:a8:de:f6:c6:03:e4:8e:41:3c:22:
3d:dc:de:39:01:b2:3f:71:e2:d0:c1:12:ef:0e:e2:25:cb:5e:
57:97:eb:ee:05:4f:49:13:8c:09:e5:e2:10:26:4f:58:6d:41:
da:81:c4:79:13:9f:15:d7:f7:5d:1c:9a:19:d5:05:c8:6d:31:
c7:bd:84:1d:4f:d3:dc:a8:04:33:09:c6:83:d9:33:8d:cf:2a:
fa:ee:5e:50:53:1e:28:40:47:27:67:71:e3:be:3f:ff:ce:72:
7a:b8:27:56:47:cf:33:c0:e7:64:42:0d:4a:09:f8:f5:fe:88:
16:77:3c:04:29:97:ff:76:ee:7f:53:f2:5e:28:ee:0c:f7:28:
5b:90:d3:06:7b:dd:a7:c7:ac:86:8d:43:13:8c:5c:71:bf:36:
58:47:f5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:00:11 2026 by rpki-client