Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
File: zPae-KVIMMWntjeJH8PJCrEsung.mft (raw, json)
Hash identifier: 8h2qFUutvm0qODey6aWwpQ+asoDkG76ETZj1LyUYZu4=
Subject key identifier: 2C:12:F8:A7:19:22:2D:BD:EB:02:0F:F4:4F:2F:2A:6D:44:0E:13:A4
Authority key identifier: CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
Certificate issuer: /CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Certificate serial: 019CB0916AC8168DC783F15979C92810ADBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
Manifest number: 0277
Signing time: Mon 02 Mar 2026 22:00:45 +0000
Manifest this update: Mon 02 Mar 2026 22:00:45 +0000
Manifest next update: Tue 03 Mar 2026 22:00:45 +0000
Files and hashes: 1: SMSEOT3Bw8BdVDxGYRzfDIZdEU0.roa (hash: Q+jvQC3Cp7YojEH0cGPSd1xy7T9E3c9+3+jfE13JjeY=)
2: g8Z517-jOmVF6Xu2Nxp8NTAxGx4.roa (hash: OXnUsbk5vh8et8vrHb0/ntkeJcO9A+ORppXS73LPvXg=)
3: zPae-KVIMMWntjeJH8PJCrEsung.crl (hash: nEghlu0sWbt080VUr08fGzi2uTiNhOqs8DLeTcUWQ28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:91:6a:c8:16:8d:c7:83:f1:59:79:c9:28:10:ad:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Validity
Not Before: Mar 2 22:00:45 2026 GMT
Not After : Mar 3 22:00:45 2026 GMT
Subject: CN=2c12f8a719222dbdeb020ff44f2f2a6d440e13a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:03:f5:b0:17:78:20:ce:e8:5a:a0:f9:b8:42:
75:70:24:7d:1d:36:98:3f:56:f8:a4:1f:6a:bc:1d:
1c:3b:8c:ef:a7:cd:83:c0:0a:e8:5a:83:a0:31:c7:
37:5b:ab:34:d4:e7:23:78:a6:2f:48:f9:4c:90:8c:
80:16:80:1a:12:22:82:21:0b:2a:ea:8e:0a:cb:58:
07:b3:fd:36:e7:bb:c6:25:81:88:2b:35:2f:60:6e:
32:35:f9:64:98:bd:2e:51:17:d7:82:13:29:ad:28:
de:4e:1d:cc:69:f0:bf:0c:77:45:c4:2c:f3:81:ce:
79:d0:f6:97:77:0e:02:e5:d3:af:e0:64:9f:df:4c:
08:99:f9:58:8d:6b:d7:fa:dd:3d:8f:ab:75:a5:b7:
4d:9e:d2:9b:51:0e:9e:60:3f:76:11:8e:4f:c8:a1:
a6:fd:5b:3a:4b:32:47:be:03:22:fd:6c:a5:d1:94:
73:58:99:38:0c:a8:30:aa:16:29:5c:5c:dc:5f:7b:
b9:83:cf:bb:36:08:60:78:28:7b:44:ae:19:23:75:
6c:5d:c5:d5:a3:54:ef:24:16:8e:40:0e:28:5f:84:
5c:d6:e0:f6:3d:e1:47:9f:a3:39:9b:7c:2a:58:62:
a3:12:00:11:04:63:f0:e1:d6:d0:d1:a2:98:26:97:
9d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:12:F8:A7:19:22:2D:BD:EB:02:0F:F4:4F:2F:2A:6D:44:0E:13:A4
X509v3 Authority Key Identifier:
keyid:CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:6e:23:49:e0:36:a9:dc:58:90:19:74:f4:91:fe:34:2e:cf:
bd:42:88:23:44:1b:82:1a:f6:75:04:bc:a5:a4:20:42:da:aa:
2c:e1:c0:87:93:9d:91:2f:0a:0f:7b:69:ed:c4:11:08:39:7e:
68:05:4e:0b:80:32:8b:6b:6e:88:3f:19:3e:f5:4d:31:bb:fb:
52:47:f3:90:89:d4:bd:13:97:0e:2e:73:25:b4:ff:63:9b:59:
0f:e6:ec:74:53:e4:ea:56:6d:58:ab:21:e3:fa:3a:0f:31:00:
72:22:ac:a7:0c:2d:ee:fa:94:e5:fc:83:c4:bd:68:e6:82:58:
23:a7:ec:41:c1:ea:2c:ed:d7:28:8e:64:dd:ef:10:45:f8:60:
dd:b4:d4:20:14:39:24:74:6b:97:91:46:37:dd:9c:d7:10:77:
27:d9:25:e7:73:57:84:a9:c6:13:8d:08:5e:47:d8:37:23:59:
20:e3:cf:78:95:a8:76:ab:39:7b:33:f7:02:15:b2:35:28:47:
34:ec:b1:96:e8:ee:9f:db:ed:c9:0d:f3:88:92:f2:ac:1d:57:
75:d6:1f:50:15:43:dc:1c:68:f1:f2:b2:44:69:93:9b:d0:69:
e8:1b:c1:5e:24:d2:f8:61:f1:f3:69:f3:75:d3:81:29:3a:38:
e6:ec:08:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:31:28 2026 by rpki-client