Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
File: z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft (raw, json)
Hash identifier: aJchDZKUlNSazIlKzy2RjZBV1CLMhkroJQAMETAN98g=
Subject key identifier: A9:41:F9:E2:21:36:FA:A2:4B:5B:5E:55:F4:2C:B7:77:83:80:A2:21
Authority key identifier: CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4
Certificate issuer: /CN=cf9cc33182e44d897f4eacf14213467ef88711d4
Certificate serial: 019CACB58CDEF32713F95116A111A1395EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
Manifest number: 0FF9
Signing time: Mon 02 Mar 2026 04:01:45 +0000
Manifest this update: Mon 02 Mar 2026 04:01:45 +0000
Manifest next update: Tue 03 Mar 2026 04:01:45 +0000
Files and hashes: 1: m5cCxh_PhsabAGIRJfH-lY0-6rI.roa (hash: sPrlMxEkxZrDcF6KQs3latR2l78VhegB/Bdy2kmEXaw=)
2: seVR3O1dae1fOLAeXT1ZaF261rk.roa (hash: JmrPbibwTZTU1bBXfvUDUkidxKjk9p3hVn5swMWj1a4=)
3: z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl (hash: EfPWua0VESMnjipDYjBJpA8ngrr8P4PblFPJFCIeFTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:8c:de:f3:27:13:f9:51:16:a1:11:a1:39:5e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9cc33182e44d897f4eacf14213467ef88711d4
Validity
Not Before: Mar 2 04:01:45 2026 GMT
Not After : Mar 3 04:01:45 2026 GMT
Subject: CN=a941f9e22136faa24b5b5e55f42cb7778380a221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6c:f7:2c:aa:d0:59:e6:45:b4:59:3d:80:12:
66:50:56:03:72:c4:82:6f:3e:43:c6:f4:ee:d9:3f:
4f:8a:fe:2c:6c:66:85:b4:0c:df:2c:2c:26:81:0f:
a2:49:44:f8:cf:b3:77:7e:e9:3a:4b:36:9a:70:f5:
45:d6:e6:c1:5f:ed:cd:8d:60:a8:f7:f3:a2:c9:9d:
f8:a3:3e:0a:8b:42:96:3a:20:93:51:73:2c:b6:cf:
30:d1:03:f6:7a:a9:dc:9f:62:81:1c:99:c4:05:b4:
03:6c:33:c2:82:92:e2:d5:c6:98:24:f1:27:70:d1:
f8:e3:78:97:84:d5:05:9b:9c:de:24:e2:0a:6d:b8:
db:7f:2e:e7:b3:8d:e6:2c:ff:1d:6b:36:61:3a:68:
17:7a:b8:14:67:0a:3f:28:94:cf:23:68:c8:23:ed:
2d:f6:78:7e:7c:42:bc:78:4f:c8:8a:04:f1:65:40:
72:f7:96:b7:a9:b3:d7:31:fb:0c:76:e8:cc:de:be:
7b:30:34:fc:7b:0b:df:9c:11:2f:b8:3d:bc:b0:f7:
31:c9:c9:65:fb:ad:72:d0:53:a7:1c:d0:c3:54:53:
cc:80:a7:4f:dc:a8:cd:97:52:e8:28:44:6a:91:53:
ea:80:c3:eb:21:74:05:ac:ed:e8:82:a9:f6:26:ce:
64:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:41:F9:E2:21:36:FA:A2:4B:5B:5E:55:F4:2C:B7:77:83:80:A2:21
X509v3 Authority Key Identifier:
keyid:CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:73:47:60:18:7a:10:91:e4:fe:07:67:20:bf:53:e5:d0:8c:
92:39:d8:22:a1:ae:b5:b5:a1:93:6a:63:de:d7:e8:4c:63:10:
a1:36:44:d8:4d:be:98:fc:08:15:10:f4:45:82:eb:00:2f:b7:
54:41:a9:8c:09:12:40:7e:b7:14:66:ec:72:c1:39:bf:bb:e6:
4a:7f:01:18:cd:c1:ae:f0:fb:0d:8f:4d:6b:4c:ca:9b:10:e9:
60:6c:e7:3d:66:b0:b0:3d:f1:d0:44:a1:38:d9:7a:5c:14:2b:
af:f5:78:44:12:da:20:58:a6:ef:99:e2:2c:ff:07:80:47:31:
e2:96:af:2c:61:22:77:29:82:2e:c6:53:5a:08:8a:e7:59:08:
8d:99:37:17:aa:82:7a:73:8a:79:7d:14:78:aa:47:62:92:d7:
8c:ed:1b:71:13:2a:0f:a8:c5:62:16:85:d2:4b:f4:40:54:ae:
84:b0:49:aa:21:c9:29:d8:2c:16:0c:39:81:a6:3e:cf:b6:ac:
82:f5:48:9e:b1:f9:b0:d9:6d:d1:40:4b:8c:04:b8:0f:4e:eb:
4f:85:13:c9:72:22:f9:d2:cf:72:be:9f:9b:a6:af:da:1a:cc:
74:6b:41:35:57:f9:75:2c:aa:25:f7:16:fe:e2:6a:fd:19:af:
59:1b:2f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:13:34 2026 by rpki-client