Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
File: zepK3ugLBlGc5A3T0T8oup9XWVc.mft (raw, json)
Hash identifier: kcquNkooSYImM0oOSixcpVLsR1SucIxYylJP5+RUGvQ=
Subject key identifier: 42:B4:4A:B6:57:CF:E5:BB:C6:6F:2A:94:1D:B4:BD:F9:58:33:B4:3E
Authority key identifier: CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
Certificate issuer: /CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Certificate serial: 019CABD9F2B1CF77F3363EAEB90D27FCCA84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
Manifest number: 1557
Signing time: Mon 02 Mar 2026 00:01:53 +0000
Manifest this update: Mon 02 Mar 2026 00:01:53 +0000
Manifest next update: Tue 03 Mar 2026 00:01:53 +0000
Files and hashes: 1: q_Sdx_pDux5HG_B-3KML3ZxV1Q4.roa (hash: ht/8yca5f/4MvUCuC03a4MjP5eq5Ql1KG2x7zVYULEQ=)
2: v8cGXi_NSEn4R2Pj8ik0gEWzS6g.roa (hash: Tc7POOVIwZMXLz0qNFWoVFFcyKsqMyAM9BmZSJShLfc=)
3: zepK3ugLBlGc5A3T0T8oup9XWVc.crl (hash: vs5u9dJ86/CCdxPM23LAZ4jga8qqv5Y3wpTXrmbzF8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:f2:b1:cf:77:f3:36:3e:ae:b9:0d:27:fc:ca:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Validity
Not Before: Mar 2 00:01:53 2026 GMT
Not After : Mar 3 00:01:53 2026 GMT
Subject: CN=42b44ab657cfe5bbc66f2a941db4bdf95833b43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:86:66:1c:52:a1:b0:7e:06:14:4d:03:7e:7c:
d6:94:17:ab:a4:54:06:41:0b:e7:0d:f8:34:64:24:
b8:d0:9f:08:ef:8a:c1:9a:29:f7:95:53:5d:29:7e:
a8:af:45:bc:dc:d3:54:1f:94:f8:e3:35:cb:81:4e:
b6:e4:4f:77:5a:dc:ad:58:17:6e:c3:59:47:0b:e8:
50:79:f0:96:7c:7c:d1:86:ca:78:b0:2d:c9:7f:56:
85:38:f1:52:60:ae:0a:9b:a3:55:6f:0c:c0:86:6b:
e6:26:8b:4c:22:f5:7c:39:60:90:3e:21:49:6b:86:
cc:55:b6:d3:b0:ab:70:05:cb:c4:cb:1f:21:bb:18:
4b:83:2a:70:17:92:37:bb:96:6e:34:3b:71:c9:16:
ed:51:e4:db:2e:7d:74:97:f0:cc:60:7d:02:00:20:
32:12:64:a1:6f:46:61:50:c3:62:95:fd:69:e0:4a:
34:23:6c:dd:98:3c:55:da:82:f4:d6:e9:80:c9:38:
1f:e3:98:5b:e3:02:f8:b0:97:bd:c5:17:e3:81:ff:
07:fd:0c:8d:3b:d8:92:8a:6f:f3:91:c9:00:59:24:
93:ec:85:2f:ec:e9:a1:72:71:12:17:9b:e7:1d:e2:
65:40:3a:a0:d5:5b:f0:1a:05:31:d7:09:af:06:0e:
d4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B4:4A:B6:57:CF:E5:BB:C6:6F:2A:94:1D:B4:BD:F9:58:33:B4:3E
X509v3 Authority Key Identifier:
keyid:CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:66:e6:a3:4e:8a:35:04:5e:8b:57:b8:a0:ea:17:96:aa:8e:
1b:df:c7:37:9a:50:15:aa:5a:54:ea:7c:66:6d:f1:d2:93:88:
75:ad:1e:23:f6:28:6a:35:bd:24:0b:12:8c:1e:bf:7e:e0:9a:
fe:19:bf:65:07:fe:d5:dd:51:9e:b3:2c:52:99:03:72:ae:e3:
22:15:9b:96:26:95:15:a8:e1:be:d1:d8:70:85:89:e4:61:49:
de:35:d2:53:bf:dd:64:78:fd:e1:e2:42:53:13:3c:16:1c:3a:
cf:a1:89:25:00:94:a9:b0:7c:4c:94:8a:f6:93:ec:d4:d6:28:
ce:3d:b4:dd:19:36:7c:21:9a:db:18:e6:46:d1:71:37:bd:00:
71:c5:cc:e4:5f:f6:df:bb:88:1c:51:a9:f8:c2:5b:3a:fd:cf:
86:a1:d4:39:32:5e:bb:b3:ba:27:91:1b:3c:ea:e6:13:48:e1:
8b:18:4c:6f:d2:58:f4:7e:06:4d:2d:e3:e3:ca:17:07:9a:e0:
ef:f1:da:54:30:f5:77:49:84:c2:24:28:36:f3:14:7c:84:4b:
72:c0:e8:b9:75:d1:fd:6b:6a:6c:a8:ea:10:d4:f7:b5:c8:fc:
7e:b2:bb:42:3a:3b:06:07:62:80:35:04:a3:e8:cf:53:ea:8f:
7e:25:15:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:31 2026 by rpki-client