Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
File: zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft (raw, json)
Hash identifier: 9YUWc//eWF8+gUmWD4z9mCNlT/D75pDO5W0PauO8wbc=
Subject key identifier: 3E:D5:46:9F:E5:BE:85:19:D0:1F:B2:27:B3:0F:3F:57:1A:E1:52:54
Authority key identifier: CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
Certificate issuer: /CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Certificate serial: 019CABD963E024AB84AC8B2B995F55D0F5D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 00:01:16 +0000
Manifest this update: Mon 02 Mar 2026 00:01:16 +0000
Manifest next update: Tue 03 Mar 2026 00:01:16 +0000
Files and hashes: 1: 5gvppHvivcscRmJkd_-Ax4ZpaIk.roa (hash: Fv7SxnZFuKOYMVmrqeZiX9L2/02B+Ff1eXNebanWC4I=)
2: q07AwoeAHG6jHueO7q9HXMyxFjs.roa (hash: KbddfU+aGzifwawc6lQ9wXWnokH881+sm51JZkWk/6U=)
3: zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl (hash: f6s5lpamITc05L0iTjCYh8dmgQEJUVezcv8PEHFZ/1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:63:e0:24:ab:84:ac:8b:2b:99:5f:55:d0:f5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Validity
Not Before: Mar 2 00:01:16 2026 GMT
Not After : Mar 3 00:01:16 2026 GMT
Subject: CN=3ed5469fe5be8519d01fb227b30f3f571ae15254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:e9:e5:0f:f5:0f:c2:fd:63:4f:ad:40:6d:
b4:39:4b:3f:5c:85:e9:4f:65:aa:56:06:b7:92:cb:
17:69:22:07:aa:2d:44:b3:b6:92:7a:70:7b:7b:14:
5a:b8:df:d7:12:b0:02:d1:87:df:fb:01:2e:18:68:
b9:c9:b8:5b:34:1f:10:19:21:b7:19:dc:a3:b6:c4:
09:2a:ef:07:86:91:d0:a5:6b:18:32:59:8b:38:76:
b8:ab:14:8b:1f:b2:88:0c:5c:8f:50:0c:5f:ee:d9:
ac:4d:2a:53:5f:62:f8:49:c3:b6:96:fc:2a:c8:7b:
f3:d4:70:c6:b2:f2:3b:7b:dd:e3:af:a2:69:f1:b8:
7b:66:9c:4e:af:ce:0e:8b:04:a7:99:d2:8c:60:06:
8e:3c:96:fc:af:01:70:90:48:bd:e2:fd:a1:16:6c:
32:70:60:65:51:f8:c0:8b:db:d2:3d:af:83:fd:50:
6e:88:98:b7:22:32:64:61:90:2f:38:17:6d:13:0e:
f5:90:e2:30:b3:8b:f4:1d:70:b4:f8:a7:b3:93:6d:
01:cc:2f:60:fb:61:84:8b:b0:78:dd:9e:22:12:d5:
53:82:dd:92:0d:c4:74:4e:6a:56:cd:12:c7:4f:95:
15:7c:d5:d6:8b:e0:99:40:d8:96:60:79:da:f8:40:
93:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D5:46:9F:E5:BE:85:19:D0:1F:B2:27:B3:0F:3F:57:1A:E1:52:54
X509v3 Authority Key Identifier:
keyid:CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:9f:6b:bf:5c:1f:cf:ad:08:e1:f4:ae:e8:85:6a:19:56:3c:
9a:27:d3:a4:fc:97:61:1a:bb:01:34:1e:1a:24:58:8d:0c:22:
b6:97:90:7a:61:92:0d:c0:66:35:9d:1e:24:d9:89:93:a2:8a:
13:0b:26:b0:da:ac:8f:00:d8:aa:49:d9:2c:ed:89:32:f7:6d:
49:75:82:20:3d:98:e1:08:10:93:e7:bd:55:e7:dd:56:8a:ab:
96:e8:38:3b:e3:fd:50:78:4c:ab:a5:1a:1d:a1:f9:aa:8e:a2:
48:61:ff:ad:f5:17:02:04:9d:de:c5:62:86:65:97:f3:a3:65:
2b:56:d8:af:b0:ec:cb:2a:46:1e:f0:05:a9:25:1a:e1:c5:22:
d0:81:62:ef:46:ba:5f:52:32:83:38:8e:82:7f:6a:7d:24:7a:
65:d9:de:ca:81:af:00:9a:8d:37:6f:f4:c7:b3:f2:f6:cd:be:
71:42:3a:c6:13:8a:57:19:77:7a:a3:22:b8:1e:69:30:e8:72:
f6:06:a8:fb:c8:4e:df:dd:f3:48:03:ae:4e:15:d8:b9:63:de:
af:ca:1d:59:50:43:55:ba:68:9e:88:e1:11:f7:79:6f:d1:12:
86:cb:cf:4c:65:e4:a3:fe:39:c4:64:8e:14:8d:e2:7c:be:87:
f0:29:3e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:29 2026 by rpki-client