Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
File: Zs01lGjIuqmPw8ou8tkFg6aeABY.mft (raw, json)
Hash identifier: gz9mvMBdqzrfGtb/kj2inMZ5javAeZBeqlftDKpmGOs=
Subject key identifier: B4:0C:0F:F1:A9:2C:C3:29:2A:6D:1D:B2:CF:2F:D4:00:0D:30:E2:B6
Authority key identifier: 66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16
Certificate issuer: /CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016
Certificate serial: 019CAAFD9967518BA3DABFBDF90AD49385A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
Manifest number: C9
Signing time: Sun 01 Mar 2026 20:01:12 +0000
Manifest this update: Sun 01 Mar 2026 20:01:12 +0000
Manifest next update: Mon 02 Mar 2026 20:01:12 +0000
Files and hashes: 1: Zs01lGjIuqmPw8ou8tkFg6aeABY.crl (hash: sPfYtiDVcHc19E0nn7bH9MmB3zbzbAA4ejwT/jpD/Ak=)
2: rqJldLN-S-H8DV7_BXB9c6fFRDg.roa (hash: 8ct3OMMYCUQEAyF1g7DbkXYuvpJT+cTHy+wjPP6qYuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:99:67:51:8b:a3:da:bf:bd:f9:0a:d4:93:85:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016
Validity
Not Before: Mar 1 20:01:12 2026 GMT
Not After : Mar 2 20:01:12 2026 GMT
Subject: CN=b40c0ff1a92cc3292a6d1db2cf2fd4000d30e2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:60:bf:ad:45:c4:88:cb:57:be:64:ec:d7:96:
47:ec:41:f7:bc:cf:e5:eb:92:5d:9b:6d:5f:26:bd:
c9:45:2d:4c:af:dd:a2:a9:7e:26:cb:1a:9f:96:92:
92:e5:3a:79:87:a7:d0:67:de:c7:04:fb:f0:a8:b6:
43:cb:20:75:54:51:0b:f9:dc:07:1b:c2:7b:ec:e1:
89:58:5f:cd:3e:21:81:a4:15:8b:60:57:84:8f:81:
55:2c:ec:d5:f0:d9:86:5c:2e:5d:e1:48:08:0e:f3:
bb:76:f0:f2:01:c8:2e:69:c8:fd:b1:0e:a5:48:e8:
94:2d:41:b2:7a:4c:63:f9:a7:06:df:65:3f:58:9e:
6b:42:4c:1f:59:fc:c3:ae:45:40:34:b4:97:e4:bd:
26:9f:1a:d1:9d:45:da:93:91:6c:bd:1e:2b:ac:84:
a0:e3:66:00:13:81:7f:e7:7a:f3:66:e6:55:76:c3:
b2:01:82:be:30:dd:50:a1:f9:d2:79:43:c7:0a:84:
0f:22:b5:92:ea:c1:0c:9d:19:cb:c5:99:fa:13:3a:
07:33:b6:97:e9:15:0b:68:ad:6a:4e:22:7e:bf:ee:
e1:5e:64:b8:da:e7:ae:63:50:cb:76:15:0d:35:74:
f8:54:da:79:a2:73:9b:c2:22:ce:f8:c1:25:c7:ec:
92:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0C:0F:F1:A9:2C:C3:29:2A:6D:1D:B2:CF:2F:D4:00:0D:30:E2:B6
X509v3 Authority Key Identifier:
keyid:66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:66:60:75:f7:fa:ac:8c:79:25:a6:97:d7:45:37:31:fa:9c:
b4:bc:ef:fd:63:24:8d:cb:69:55:47:76:e2:7f:a6:2f:d9:f1:
f7:87:c8:e1:89:69:ac:da:20:7b:55:71:af:cb:f6:e0:4c:32:
86:79:2d:61:f7:8e:3d:29:9c:95:c3:a9:8d:82:1a:bb:9f:18:
05:da:07:05:f8:bf:22:58:fd:ca:3a:53:8a:6f:37:4a:b1:fb:
57:c4:5f:82:e2:7e:cb:e5:c4:ab:40:74:7b:ba:03:b7:83:4d:
36:10:7a:c0:ca:cd:dd:80:bc:b9:01:b7:7d:d4:00:76:9f:91:
75:b0:fb:0a:4f:f8:aa:15:c6:b5:21:9c:a4:9f:58:e5:1d:a4:
c6:bd:ef:c2:07:fe:7f:da:39:ba:93:a6:5c:2d:24:1e:5f:2c:
9f:8d:18:d5:97:c9:11:e5:5d:89:67:f3:2d:3a:6a:42:3f:d0:
7d:b4:74:bd:35:f9:29:df:5c:96:a2:9d:5e:1e:25:ff:30:ab:
79:9a:79:a3:47:71:28:a7:7c:b1:ce:6d:a8:08:ff:b3:7d:88:
d2:1c:38:7d:59:70:a3:5c:3c:35:65:78:27:10:a5:1c:c6:e5:
03:20:d9:6c:e0:e9:0c:b8:a0:94:e8:2d:29:3e:b7:a8:df:22:
5d:03:46:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:28:24 2026 by rpki-client