Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
File: zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft (raw, json)
Hash identifier: BCa7B6KuVxRP9l/70g3K8eaNaUb9Q3y65lNm3wvmD3Y=
Subject key identifier: 72:2F:1A:07:A9:BB:3B:AC:BF:1D:C2:06:DA:21:E7:67:24:B3:CB:78
Authority key identifier: CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52
Certificate issuer: /CN=cce57dc8234df5f59d67fdc6856bb262e7193f52
Certificate serial: 019CABD9AD8EF1598A5B26AF6C9F8F30144F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
Manifest number: 1012
Signing time: Mon 02 Mar 2026 00:01:35 +0000
Manifest this update: Mon 02 Mar 2026 00:01:35 +0000
Manifest next update: Tue 03 Mar 2026 00:01:35 +0000
Files and hashes: 1: HpXjeYop5-9dbwuBCfkZCDXpE9s.roa (hash: 8cPnpIvED13OzR+/chtPAusOqJJ0JWVG5pHQBGp1xGI=)
2: zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl (hash: Zjb7ZkDaH4zhgKHLfCLNNaBVTGcQ+owpebk+JkIHRvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:ad:8e:f1:59:8a:5b:26:af:6c:9f:8f:30:14:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cce57dc8234df5f59d67fdc6856bb262e7193f52
Validity
Not Before: Mar 2 00:01:35 2026 GMT
Not After : Mar 3 00:01:35 2026 GMT
Subject: CN=722f1a07a9bb3bacbf1dc206da21e76724b3cb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:45:6b:82:2d:6c:59:a4:3f:b2:80:93:66:
87:09:c3:94:d2:d6:48:3a:a6:d6:71:8e:e2:bf:fc:
c2:76:c4:09:31:c4:16:eb:e5:d1:5a:e6:dd:62:9d:
99:36:41:b0:c4:57:59:39:fe:76:54:9e:c6:9e:41:
48:9a:27:bb:43:90:e9:8d:5b:3f:8a:46:6c:7e:d5:
95:d4:eb:12:80:3a:a6:fe:36:bf:2d:45:e4:ab:58:
49:25:12:b9:88:59:f9:b6:4f:38:3e:58:59:8d:ff:
61:c1:6a:af:8d:10:a4:40:96:19:01:98:a6:0e:42:
8d:82:9a:19:46:2d:87:cc:64:34:21:c7:e6:94:70:
52:d7:a9:c8:0b:89:39:31:ec:66:c6:1b:1f:da:8c:
6e:16:7e:67:95:59:02:ba:96:64:bd:a0:28:e0:9a:
fa:1f:e8:5e:b9:0d:6e:3d:5c:65:52:75:14:7e:83:
0f:e6:84:7d:fc:9f:fb:8d:2b:dd:71:6c:bf:5c:95:
5d:80:5b:d4:33:a2:40:05:20:27:b1:74:48:6e:a4:
91:f0:2e:48:9f:d6:73:1f:5f:a1:9c:3f:da:dd:46:
14:cf:3b:d3:0e:9b:f0:4a:d6:fb:88:b2:27:c6:e7:
6b:4f:3b:b8:b7:2c:55:df:57:27:95:34:2c:cc:a8:
8d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2F:1A:07:A9:BB:3B:AC:BF:1D:C2:06:DA:21:E7:67:24:B3:CB:78
X509v3 Authority Key Identifier:
keyid:CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:16:6d:c4:0f:3d:0d:08:96:e5:98:e2:1b:43:3d:84:a7:ed:
b6:93:b4:01:8e:fd:c6:2e:64:15:63:19:09:58:d3:2d:7a:2d:
7a:1b:0e:11:47:0d:3a:26:57:52:f5:d2:15:d1:d6:2c:92:75:
5a:61:f9:5b:94:d5:1f:1f:03:5a:52:54:6d:de:aa:f5:38:69:
c9:df:1e:9c:d3:8f:21:22:65:16:8a:0f:f9:c5:5e:cc:5a:1f:
2e:d5:d0:67:e6:ff:82:65:ec:f2:63:44:21:df:d9:f2:79:14:
31:77:ed:c1:59:48:68:16:4a:44:3c:1e:4a:57:de:3e:1f:d5:
76:50:9b:e5:d1:00:e8:24:5b:64:06:c1:80:5c:4f:06:8c:26:
12:2c:e4:ed:51:b9:5d:ec:ac:5a:bc:79:ea:6b:71:81:54:a5:
27:15:87:bd:98:4e:5c:fd:cb:33:97:bf:ad:0c:c4:94:6b:97:
7c:d7:40:68:7e:9e:81:56:76:14:6f:8d:e2:a8:04:10:3f:dd:
4a:e1:19:a7:c6:30:c6:69:77:08:56:90:76:db:1c:5c:21:09:
f6:8a:07:66:57:bd:8c:b8:da:84:cf:28:2e:43:54:5e:f1:cf:
f2:6b:4a:cc:fc:d5:fe:f8:d5:4a:26:46:f4:e4:ef:53:f1:f8:
67:cf:ae:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:42 2026 by rpki-client