Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
File: ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft (raw, json)
Hash identifier: YzhxtOM3B7TRXoQpZQC4YghUFNAF3EtsGMxSsKyMKa8=
Subject key identifier: 14:82:E1:D7:1E:1B:33:A2:9D:64:AD:49:67:E4:69:16:B4:A5:7B:17
Authority key identifier: 67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22
Certificate issuer: /CN=67047b987be9742785ba8e8b33ac077bf9c7a222
Certificate serial: 019CAAFD5722AEAD103B6E87DD1C1584D3B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
Manifest number: 0FE1
Signing time: Sun 01 Mar 2026 20:00:55 +0000
Manifest this update: Sun 01 Mar 2026 20:00:55 +0000
Manifest next update: Mon 02 Mar 2026 20:00:55 +0000
Files and hashes: 1: JZV9Wmscw-_tBZW5yLoO12kB4nI.roa (hash: 9OD9YsHNLfEzpjHohpylUNvgGqpABxz0jPfe6Fwb8Ws=)
2: ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl (hash: KNJhgPy3fJ1uBVTWpIhusKuzWVffmJefIZbk9ZT8b7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:57:22:ae:ad:10:3b:6e:87:dd:1c:15:84:d3:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67047b987be9742785ba8e8b33ac077bf9c7a222
Validity
Not Before: Mar 1 20:00:55 2026 GMT
Not After : Mar 2 20:00:55 2026 GMT
Subject: CN=1482e1d71e1b33a29d64ad4967e46916b4a57b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b1:ac:b9:29:a5:e8:56:6f:ec:90:af:d5:b8:
0c:63:62:86:35:b9:91:54:5c:3a:01:96:80:4e:25:
e5:bc:a5:ec:2f:01:a2:5f:ec:83:92:7f:18:f9:7c:
a6:d3:bf:51:97:f6:a5:b9:3b:7a:fc:4b:b5:d3:d4:
3c:51:d7:e5:14:78:8e:c1:81:fc:c9:ed:81:e1:44:
a5:d5:c8:7f:8d:7c:d4:d2:a4:5a:f7:d7:aa:80:d4:
0a:02:c3:cc:dc:4f:cd:39:e1:96:2a:12:6a:d7:c3:
a3:06:61:47:68:da:21:44:64:7d:4e:c8:59:ad:2b:
75:59:da:72:45:97:3a:a2:65:45:85:fe:a3:98:30:
a4:69:2a:d8:0e:a5:ef:a0:a7:36:b2:78:24:aa:98:
73:a4:e4:a7:b7:8f:18:fb:d5:46:ca:a1:4b:e2:83:
1e:66:56:75:78:0a:7d:15:7a:c5:8d:c8:75:8b:1b:
15:7d:ef:5c:81:b7:de:fd:f6:9a:73:4d:94:73:c4:
5a:af:9b:ab:90:02:69:84:df:78:d7:e5:94:60:93:
88:48:c6:32:25:70:92:26:6b:49:d8:dc:4f:fe:58:
94:28:37:99:2e:ac:e9:1a:7b:b1:73:14:f1:0f:73:
4f:5f:cf:6d:68:b1:97:cf:f6:9b:27:54:04:ee:c4:
ea:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:82:E1:D7:1E:1B:33:A2:9D:64:AD:49:67:E4:69:16:B4:A5:7B:17
X509v3 Authority Key Identifier:
keyid:67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:84:76:b0:a0:8f:ec:76:f9:0e:0a:50:03:7e:0a:f6:d5:c3:
9b:d8:96:b2:bb:40:da:60:1f:67:4a:d3:62:8f:91:fd:32:0f:
2f:b7:2f:09:8d:6c:26:67:c5:26:c5:b8:43:08:e7:89:16:eb:
c9:42:59:7e:a1:e7:1b:b9:45:92:05:91:22:ab:0f:cb:40:38:
1f:d6:a1:c7:7c:a6:04:d1:af:f3:d3:16:94:09:fa:1d:5b:4f:
5b:9b:ee:19:26:c0:4c:dd:06:1d:a3:08:b2:32:cb:8f:45:ea:
87:ae:96:8e:ae:db:a8:80:a9:fd:63:28:18:44:d3:64:c4:cb:
bc:13:a8:b9:a0:b6:ac:48:70:09:ce:c6:91:48:53:9e:0c:bb:
bd:5f:32:3d:43:05:15:b4:d0:50:4b:8c:c8:de:5b:91:ee:2d:
83:22:d0:9e:b2:5f:b0:41:50:63:16:bc:d1:08:f2:8d:c7:23:
ca:81:a2:f7:6b:a8:8b:48:32:a9:cc:06:8f:28:92:8e:2b:d5:
6a:f9:df:28:12:c0:ff:4d:c6:82:04:9e:8f:73:77:35:9d:fe:
5a:67:51:f5:d3:a8:4a:36:c3:2d:b8:6d:f6:34:a7:6e:5a:14:
b4:b5:3d:3a:59:28:54:61:72:b0:aa:45:e7:3e:02:13:1e:03:
00:04:8e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:26 2026 by rpki-client