Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
File: zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft (raw, json)
Hash identifier: ffFx/l35rFyVni5XncXZbCNw8V4KWFgbCmNG5VHOIhI=
Subject key identifier: 32:F0:8A:1E:C5:2E:20:86:23:E6:8A:CE:71:B9:F9:36:44:85:C7:0B
Authority key identifier: CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC
Certificate issuer: /CN=cef501d2d052185d4f6569218c28bf35859000fc
Certificate serial: 019CAFB57CC5F52F06199706E2A06B96996C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
Manifest number: FA
Signing time: Mon 02 Mar 2026 18:00:32 +0000
Manifest this update: Mon 02 Mar 2026 18:00:32 +0000
Manifest next update: Tue 03 Mar 2026 18:00:32 +0000
Files and hashes: 1: VtiYaN97FHtpr9nyOV9FFG85g5o.roa (hash: YRi8yVEk1+9sLs2A+db3vBfa8pzorD5js8IjbX492Nk=)
2: gIvmrtP4qhP-p_HNvQknynsugUc.roa (hash: T7F6BSJaNt+yN8P1agGWT43ZlvcgWoTw7wuq3mofmEI=)
3: zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl (hash: 3e/rUtlaTiDwkNMLGhxRpGQIoq180gBNW8Grf1o9Cxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b5:7c:c5:f5:2f:06:19:97:06:e2:a0:6b:96:99:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef501d2d052185d4f6569218c28bf35859000fc
Validity
Not Before: Mar 2 18:00:32 2026 GMT
Not After : Mar 3 18:00:32 2026 GMT
Subject: CN=32f08a1ec52e208623e68ace71b9f9364485c70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8f:a8:0b:0c:dd:0c:30:a8:99:69:af:bd:21:
f2:74:cd:70:86:af:9a:fa:16:65:ab:c9:22:9c:a4:
1d:b3:72:47:16:97:82:ae:5d:28:d1:d4:71:c7:af:
fb:68:13:bd:e6:9d:d9:1a:7a:f3:fa:bd:47:f1:f4:
a5:ee:6b:52:66:49:9a:b2:f3:43:e3:07:80:23:dd:
37:9d:da:7f:5e:ac:e6:b4:33:83:44:bc:ce:c2:85:
73:1a:99:d0:77:30:4d:62:2b:d1:4d:57:a9:3b:3b:
d5:4e:2c:67:b4:8a:97:1f:06:d2:d7:d9:8e:3a:f3:
27:74:87:fd:d8:9a:8d:35:46:96:05:82:64:26:b2:
e7:0a:0c:cf:6d:9d:ca:e1:fc:19:64:db:8a:3a:7b:
5f:e6:fa:8d:ce:7c:4f:91:f6:0d:41:df:b4:21:44:
be:7e:d4:7e:11:0b:ff:e9:5f:8d:bf:99:57:dc:2d:
6c:ff:36:97:51:9a:90:be:f2:04:ff:ac:1a:b5:29:
7b:8c:ff:06:22:8f:b7:98:7b:04:83:56:6e:4d:59:
2f:83:9a:14:a0:17:bb:3e:87:fc:45:82:25:37:6a:
1b:68:ad:9f:05:51:c5:2c:19:0f:37:4a:ca:20:e2:
1a:f1:15:12:a5:4a:fd:38:fe:7b:2b:f2:65:7e:f0:
d8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F0:8A:1E:C5:2E:20:86:23:E6:8A:CE:71:B9:F9:36:44:85:C7:0B
X509v3 Authority Key Identifier:
keyid:CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:66:0e:d1:07:ec:89:e6:25:e8:9b:a7:21:1e:c8:d4:f9:a6:
ef:31:f7:08:f3:6f:b3:9b:f2:70:26:f1:41:48:7f:85:68:30:
f1:ee:1e:d0:06:b7:2b:d8:40:a7:85:23:5b:da:58:0e:f6:b7:
98:24:28:e8:9c:d3:c7:bd:f9:ab:7d:60:f5:c0:02:07:4b:b0:
7c:22:8d:72:51:fe:22:d3:5f:df:ae:da:41:2d:49:11:1b:62:
5f:e8:f4:50:22:73:d7:80:c2:38:b5:1d:f8:3f:d1:a5:89:d4:
9e:19:d4:66:53:63:16:38:3e:6c:9e:51:69:62:3f:aa:69:17:
63:d7:b0:31:29:d7:eb:2e:96:07:26:e2:a7:7b:c5:af:8a:50:
3a:f9:65:74:23:4e:91:2d:d3:aa:b6:fd:de:ad:8a:7f:2e:b5:
2b:2e:f1:3b:1d:6f:98:13:17:01:c1:f7:97:23:6b:23:ce:4d:
07:48:61:3c:26:c8:a0:7a:eb:e9:e6:ad:38:f4:93:52:3a:44:
70:c3:c0:75:83:ad:bc:69:1b:7c:e5:41:5f:db:ea:9b:10:56:
f2:b2:da:a6:fc:a8:18:83:88:5e:20:9d:47:bb:06:1b:62:fa:
0c:d5:5c:77:d4:56:98:ab:17:ba:e5:df:25:52:13:ea:c9:34:
f5:b1:0a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:24:56 2026 by rpki-client