Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
File: zZeczxCv9fdzaU2fQ-XV20ctZIU.mft (raw, json)
Hash identifier: UsRXsiRW9SVL5oKWRLFgW2AkMovNikNgQpiyWhluxZ0=
Subject key identifier: 89:8A:CF:95:62:31:5B:A9:84:7A:E8:F0:1C:9C:78:30:19:CB:C1:D8
Authority key identifier: CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85
Certificate issuer: /CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
Certificate serial: 019CAAC61FE9D9CB87F93B7AC32F3A8C91E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 19:00:36 +0000
Manifest this update: Sun 01 Mar 2026 19:00:36 +0000
Manifest next update: Mon 02 Mar 2026 19:00:36 +0000
Files and hashes: 1: PolmcNKUOLtY-UeTb4jkSIvQsTM.roa (hash: b7erTVt5EQJ/JPRF7lrWpbLZEhrxU/WLeG3F+iBfhKk=)
2: zZeczxCv9fdzaU2fQ-XV20ctZIU.crl (hash: Dv+Q6DXYfeG4zosinuWabr5iRLGFlcg9DUjOmpYGbIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:1f:e9:d9:cb:87:f9:3b:7a:c3:2f:3a:8c:91:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
Validity
Not Before: Mar 1 19:00:36 2026 GMT
Not After : Mar 2 19:00:36 2026 GMT
Subject: CN=898acf9562315ba9847ae8f01c9c783019cbc1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:95:8c:fd:65:ec:56:b3:a1:77:32:fd:68:ee:
b1:f6:b1:01:bd:33:a3:52:c5:9b:10:be:98:35:8f:
9e:6b:2f:02:b9:13:42:38:cf:fe:b4:e8:d9:d8:29:
4f:c9:ec:aa:fc:93:f6:b5:40:c5:6a:d8:17:68:8f:
3c:3b:7d:db:87:de:51:50:82:e1:c8:d2:b0:f1:28:
96:c5:74:9c:9b:f1:a0:e7:5c:d5:35:cc:b5:4d:48:
25:4f:a3:df:d0:7b:ce:fb:ce:64:54:67:24:06:31:
f3:d4:b8:d3:b3:f7:9e:b2:bb:4d:37:fc:69:65:ae:
34:20:46:21:03:da:fa:b9:09:d7:87:d7:ef:04:36:
bd:99:8c:34:d0:c3:af:6c:8f:f3:91:5b:33:e7:e1:
45:d8:94:95:04:0e:21:6d:ca:f0:0f:34:52:c6:5b:
eb:99:f5:a2:c2:f1:66:7d:31:4b:7e:8b:49:f1:d2:
b9:26:e6:78:36:b6:2d:ba:8a:95:93:57:c2:c4:82:
fa:c4:6e:d0:e4:1b:8a:b8:5d:aa:d2:f2:28:2f:ca:
e4:7b:61:1e:d1:73:ec:79:ab:c5:ac:b1:12:08:bd:
3b:31:80:85:ed:89:99:b6:82:28:b2:fe:ba:84:a7:
6f:4b:3b:26:a0:a3:fe:ef:3a:4e:23:7e:64:8d:c3:
d9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8A:CF:95:62:31:5B:A9:84:7A:E8:F0:1C:9C:78:30:19:CB:C1:D8
X509v3 Authority Key Identifier:
keyid:CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f6:79:fb:0f:3e:e5:74:e4:3f:d9:e6:94:4a:f0:d6:57:84:
73:e5:9a:ed:b6:32:f4:c1:c1:a3:3d:0c:6c:83:b7:b6:f9:de:
35:74:ea:ca:b7:10:1d:a5:81:f3:ba:85:88:51:08:fe:1a:20:
25:94:c6:fd:88:fe:0a:c7:c3:15:ff:05:1c:38:99:3f:2d:ba:
ba:a6:01:25:0e:3c:95:b2:ff:1c:bc:71:5c:cb:63:7a:3b:7d:
a6:dd:4d:ec:13:37:0b:96:36:08:2d:cf:63:42:f4:c3:81:b4:
fa:13:8c:ae:ea:93:78:b1:ff:11:b2:91:d5:ff:22:4f:1c:d4:
e2:c4:a3:c0:65:42:ea:2e:28:b4:54:46:11:14:60:bd:5a:c7:
77:89:42:b4:40:86:00:56:21:cf:b0:de:74:08:b7:cd:0e:32:
b9:05:ed:6a:90:34:6f:af:7e:3e:f6:5d:a8:6c:99:4f:d6:22:
a8:d9:9d:31:82:fe:f8:ab:74:d5:cd:e8:23:a3:2f:99:85:28:
db:b2:c7:98:3d:a4:21:a4:6d:70:10:b5:fa:e3:e0:d9:7e:c5:
39:e2:dd:f1:96:ec:ca:56:6c:0f:04:65:6e:4b:9a:37:ce:42:
01:89:0a:02:bd:ed:ed:0e:ee:3b:34:02:c2:da:bc:5d:32:36:
3e:78:95:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:28 2026 by rpki-client