Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
File: zig0CiCbK6Eq6QOnTLteLiOu0jg.mft (raw, json)
Hash identifier: ZWbRd3Yn6gwBXG6VwIUsF/vYmrnwNvRQZ20lNY2UABE=
Subject key identifier: B7:21:7A:0F:10:23:D7:C3:D2:3E:8E:65:76:C9:7E:59:43:18:AF:91
Authority key identifier: CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38
Certificate issuer: /CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
Certificate serial: 019CABD980F2C60C0891116E2E8B301E165E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
Manifest number: 17E1
Signing time: Mon 02 Mar 2026 00:01:24 +0000
Manifest this update: Mon 02 Mar 2026 00:01:24 +0000
Manifest next update: Tue 03 Mar 2026 00:01:24 +0000
Files and hashes: 1: _c_Ge4KlyXooIVPQ3URHN_DCCOc.roa (hash: zZr72d4ktyBj5RLLYIViykO4UzrMMtJKZidkjGHFvsc=)
2: zig0CiCbK6Eq6QOnTLteLiOu0jg.crl (hash: W09CuKTMPBBo9UPi0guDlg3/H2v2tEpMyWKILR1bKEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:80:f2:c6:0c:08:91:11:6e:2e:8b:30:1e:16:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
Validity
Not Before: Mar 2 00:01:24 2026 GMT
Not After : Mar 3 00:01:24 2026 GMT
Subject: CN=b7217a0f1023d7c3d23e8e6576c97e594318af91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6e:57:39:9a:b3:76:e5:26:68:04:de:bb:d9:
64:9b:f4:b7:2c:91:8b:29:c5:63:dd:c1:46:98:ab:
75:8b:26:6a:06:da:a8:e6:e0:bb:3f:0f:16:13:fe:
77:b8:50:82:4b:af:f7:31:ed:9a:ce:9d:1f:21:d7:
44:79:62:91:36:10:e1:9c:11:16:8b:d7:7a:dc:2a:
a4:b2:ce:64:5c:ce:08:e8:cf:de:2d:d4:8c:2c:9c:
3b:ed:d3:00:c8:a1:12:4a:3f:a7:00:21:ce:51:a6:
37:e5:8f:39:26:fd:17:e3:7b:0b:f0:27:a1:e6:1a:
72:35:7a:82:fc:c9:43:58:52:e0:52:f2:6e:c1:50:
5f:83:f8:f1:db:12:d9:90:53:e0:8a:a5:9c:eb:61:
d4:b7:13:57:17:0d:54:23:af:f9:2a:3a:d0:80:1b:
a7:57:b5:17:3b:5e:f7:23:4d:9d:e1:65:b9:8d:50:
71:d1:db:87:02:74:c7:b1:0c:86:c9:4d:28:11:80:
b9:df:ad:3f:27:fc:53:92:2e:13:06:2e:b1:10:a2:
75:6d:c7:82:06:96:d9:81:55:7e:f4:92:fb:dc:c3:
2f:5d:07:55:5c:bc:b9:2b:40:cd:66:9d:4a:cf:11:
3c:e2:af:82:b3:e2:ec:a5:58:62:f6:0e:8e:ba:a6:
3f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:21:7A:0F:10:23:D7:C3:D2:3E:8E:65:76:C9:7E:59:43:18:AF:91
X509v3 Authority Key Identifier:
keyid:CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7a:c6:c2:2f:6e:46:12:a2:10:96:42:00:e1:b7:5f:dd:ba:
4e:c8:3b:90:2a:ed:e2:cc:4f:80:78:be:f6:65:76:0f:3d:35:
13:a7:d3:85:85:bb:dd:ba:74:80:15:fe:70:a9:1e:c4:c1:28:
32:a1:91:2e:f8:29:8c:6c:71:d2:4b:86:ef:a8:24:56:c1:ec:
f5:d2:30:09:ee:84:84:ee:94:b8:21:54:19:6a:03:ee:b3:15:
f8:2a:c1:e7:2c:98:20:9c:87:2d:3b:d4:89:51:d9:29:26:bf:
33:2a:07:5b:c0:ba:06:72:93:ba:39:63:e1:67:f3:d3:79:11:
0f:59:5f:1c:b3:d5:04:82:4a:ca:33:cf:23:72:5a:f7:86:d4:
60:6e:ad:d1:a8:9b:9a:95:0b:58:7f:8a:b8:ef:21:d2:70:d7:
70:00:44:7c:5b:b5:9c:8b:8b:b4:d7:11:12:6d:f9:61:00:ad:
6f:53:30:ea:31:08:68:67:5f:eb:9c:9e:72:58:db:68:7d:c6:
90:7d:1b:6a:fb:63:93:60:02:6e:8e:b5:10:e5:59:62:84:09:
22:4d:d0:26:6f:57:2c:a0:97:6e:17:f9:12:1e:c2:eb:d1:01:
ab:01:79:10:23:04:07:71:1f:59:9b:80:47:72:6d:bd:ea:9c:
72:fc:bd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:34 2026 by rpki-client