Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
File: ZxzQcdyWC9yCmwvn40trYc-LCx4.mft (raw, json)
Hash identifier: /IHhcgeEOPj0BCkQ5TcO8QheZvOBlLt8C450hSrZqEc=
Subject key identifier: BC:E3:53:56:FF:CB:20:7A:CA:E9:28:FC:E2:FF:E0:4B:D7:58:E8:2E
Authority key identifier: 67:1C:D0:71:DC:96:0B:DC:82:9B:0B:E7:E3:4B:6B:61:CF:8B:0B:1E
Certificate issuer: /CN=671cd071dc960bdc829b0be7e34b6b61cf8b0b1e
Certificate serial: 019CAB6B9D5926A8E7F69C5A8E779071B962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
Manifest number: 0221
Signing time: Sun 01 Mar 2026 22:01:22 +0000
Manifest this update: Sun 01 Mar 2026 22:01:22 +0000
Manifest next update: Mon 02 Mar 2026 22:01:22 +0000
Files and hashes: 1: B0kj7SdwSZWmEU9GKPX-vqJAVao.roa (hash: UN4l73RmEx8CBEkdPrS/+GtzsuSkIQeGfMIfQBPpbKI=)
2: Mdx0wPKImju2r6Wn-sTkPv2XXCk.roa (hash: KkcVte1gTb6znaz/vnrVSs9UtNLYEStRQ8bGw7/kCho=)
3: ZxzQcdyWC9yCmwvn40trYc-LCx4.crl (hash: fb50PFV3ao+zPQ/tCtwsEfOCx6aKEAkmw9iCsxfkhcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:9d:59:26:a8:e7:f6:9c:5a:8e:77:90:71:b9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=671cd071dc960bdc829b0be7e34b6b61cf8b0b1e
Validity
Not Before: Mar 1 22:01:22 2026 GMT
Not After : Mar 2 22:01:22 2026 GMT
Subject: CN=bce35356ffcb207acae928fce2ffe04bd758e82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c2:dc:8f:a9:e3:6a:26:2e:e8:7c:2f:22:0a:
c2:27:a3:9b:f6:37:0a:9a:3e:a8:5c:0f:6b:f9:96:
63:2f:5d:e0:d3:12:ed:19:b5:60:0b:31:49:54:0c:
dc:cc:66:7a:0e:09:d4:91:1f:3e:e0:dc:18:4d:f3:
6c:e6:bc:43:b0:a2:da:99:3a:fe:81:90:6e:7d:e9:
89:3a:72:3d:6a:3f:b9:25:09:2d:6e:40:37:ab:02:
5c:de:71:09:5c:d6:24:40:71:3d:90:d0:5d:b4:1b:
90:ca:eb:9a:2a:e9:fb:35:7d:a9:97:0e:f5:1a:1f:
7f:29:99:77:67:75:41:dd:8e:b3:99:90:3d:2f:c2:
07:16:de:41:f7:18:32:b8:0f:27:fb:8c:ed:b3:ba:
0d:05:54:0b:9b:d4:b8:55:19:5f:73:6b:fd:b4:29:
a2:4e:99:ce:49:c2:7a:27:88:d3:d5:9b:fa:db:b7:
cb:35:23:78:08:b0:ad:73:a3:b6:f4:4c:54:d5:8b:
83:e3:45:20:40:3f:8a:38:fb:8d:6e:10:ad:6f:bf:
ca:a3:99:1d:4b:09:5a:31:21:af:42:de:cd:13:f3:
cf:80:d7:71:bb:c2:ef:55:0d:27:a3:d0:03:17:a1:
64:ad:d5:63:08:61:ba:09:f1:e9:77:0a:6f:08:4a:
1c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E3:53:56:FF:CB:20:7A:CA:E9:28:FC:E2:FF:E0:4B:D7:58:E8:2E
X509v3 Authority Key Identifier:
keyid:67:1C:D0:71:DC:96:0B:DC:82:9B:0B:E7:E3:4B:6B:61:CF:8B:0B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:2e:2f:87:fd:08:55:03:ba:ca:ce:23:77:8c:85:a7:2c:a8:
87:88:4d:40:b2:ed:21:5f:f8:5b:a5:92:ab:59:65:ef:ff:94:
a3:cf:9e:57:5e:f9:0e:50:4a:ee:a7:7a:ce:17:42:10:e7:41:
5a:c7:df:6e:71:fb:0b:2e:9c:47:72:db:ca:3a:f0:79:52:0b:
b5:77:79:f5:59:41:2a:5a:a6:e2:54:62:20:06:52:a6:3f:98:
a8:c4:9e:da:e7:7b:51:6a:7c:40:ed:22:71:5f:49:e5:73:7e:
19:a8:f2:9a:18:43:f3:fd:1f:7e:fd:78:12:fd:b5:6b:5c:51:
fb:af:64:7f:9f:5c:4f:8a:10:d2:a6:48:6f:cb:ca:1e:b4:15:
6f:f4:9f:70:04:01:e7:d1:86:a0:af:18:3d:c8:e6:a4:ac:03:
b1:65:06:2e:9c:72:e9:ca:ee:84:b7:c0:84:37:0c:25:26:59:
41:87:4b:49:8a:92:e4:0b:88:9e:7a:7d:51:1a:e8:d1:a8:d8:
5f:0d:23:1e:81:fb:1e:2b:96:ea:aa:b1:b4:3c:bf:00:9f:40:
d1:47:9f:81:fe:b7:6a:92:d4:fe:66:00:95:81:70:d2:ab:04:
27:c6:52:cf:2f:59:60:a3:f0:f6:9d:c9:7f:a9:8d:f0:88:7d:
a9:67:d6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:48:53 2026 by rpki-client