Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
File: cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft (raw, json)
Hash identifier: I0xUj+hfJAU0pKJk/C0QDZZyZsVu3dSgP1w5+Cp/YHM=
Subject key identifier: 8F:B8:41:1A:F2:5D:56:27:1E:62:7D:E8:9C:90:EE:7C:67:76:D0:EE
Authority key identifier: 71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40
Certificate issuer: /CN=719e59b5017bfe634411949eff2d70ba0a07c540
Certificate serial: 019CAA8FCCD125B8C50AE74D51D76D15FA1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
Manifest number: 0DF9
Signing time: Sun 01 Mar 2026 18:01:16 +0000
Manifest this update: Sun 01 Mar 2026 18:01:16 +0000
Manifest next update: Mon 02 Mar 2026 18:01:16 +0000
Files and hashes: 1: 2d80ICWvEy2H06WqwwbbUkHjd9Q.roa (hash: Ddn5JpBKquVV9p/RAvUdBev4yfl/8irtR+M1x9mKoR4=)
2: 96h6MiWp1wcqYfMCzF-xeLLhEXw.roa (hash: GlwHj/dVbXF+2ZIP/5axQACN1GmbbfciiA08DFujCCQ=)
3: T8wO9YK42VrpaTKZVLl0hlhCgqQ.roa (hash: 2/LsWjUAgBK/sup3nVZAY9upc9OnAS/gP5lDONEvXDQ=)
4: cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl (hash: zba6rgBcAx6BVUX7GKQ/xWzse4SeyE3f3xhNN8/zIOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:cc:d1:25:b8:c5:0a:e7:4d:51:d7:6d:15:fa:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=719e59b5017bfe634411949eff2d70ba0a07c540
Validity
Not Before: Mar 1 18:01:16 2026 GMT
Not After : Mar 2 18:01:16 2026 GMT
Subject: CN=8fb8411af25d56271e627de89c90ee7c6776d0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:19:0c:db:2d:c0:ea:63:5e:2e:93:e6:8c:8f:
bb:77:1d:a9:e6:c3:e5:23:22:98:75:42:1c:b5:46:
ce:64:59:5a:6a:5f:26:70:f0:12:fc:11:eb:a6:2d:
89:b8:8e:21:f2:fd:19:c3:67:ee:b4:80:06:32:6f:
a9:89:07:ef:99:8f:2d:d7:e1:e9:93:9b:b2:d5:bd:
17:37:c1:1c:d3:0c:08:04:27:5e:14:7c:3b:77:8f:
6f:51:74:00:6b:a3:05:2a:90:7d:29:a4:a8:9a:e6:
c8:31:96:87:88:6d:35:9a:4a:f4:68:b8:65:bd:5b:
aa:8f:7a:e0:02:1b:2e:22:5a:46:4b:58:f2:46:31:
b5:6a:2b:89:0b:b1:0d:7c:ff:bc:a4:3f:7c:46:ab:
44:04:78:b6:73:17:14:e4:91:33:c0:18:79:22:c6:
38:2f:8e:ad:84:db:61:87:e8:2b:cb:2a:9a:17:a6:
82:6e:c6:f0:72:c5:01:5f:6c:b7:0c:22:73:a3:08:
76:53:92:4d:56:28:db:9d:8a:62:71:59:2b:74:b4:
99:7b:a6:90:d7:12:d3:f9:f7:98:ba:8c:1c:41:ac:
cc:53:ff:c3:9d:3b:6e:c7:36:16:1a:a8:ab:b4:a6:
2d:2c:cd:61:55:19:01:ec:b5:20:b7:07:3f:ce:24:
06:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B8:41:1A:F2:5D:56:27:1E:62:7D:E8:9C:90:EE:7C:67:76:D0:EE
X509v3 Authority Key Identifier:
keyid:71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a1:ef:0b:68:da:b9:d8:57:2f:11:71:38:d4:55:99:6c:c2:
82:e7:c7:56:7a:b2:7a:24:2e:76:09:f4:fa:15:e8:50:a5:cc:
6a:e8:8d:7f:16:ad:fe:4e:cc:4e:70:eb:ce:ac:1b:97:f4:29:
20:c8:bb:fb:29:3b:79:d2:07:da:8e:b6:42:e2:29:f1:e0:0a:
d8:e6:89:d7:92:bc:02:64:8f:cd:fc:f5:0b:46:49:5a:f1:07:
75:70:73:9d:f2:af:9a:f0:04:8a:8f:04:f2:c7:12:f5:99:03:
40:5d:d5:84:89:49:6e:75:4b:db:33:61:71:51:82:68:92:ca:
ac:0f:97:ef:26:20:93:65:90:4d:cb:78:c5:35:a0:f7:87:d5:
b2:a7:74:b6:9b:06:05:56:e7:f0:41:3d:b1:48:c6:09:c4:af:
a7:39:d7:8c:f3:a4:e2:36:2e:cd:9c:cf:e3:90:21:5d:55:3e:
dc:74:9d:00:5c:e2:d9:17:03:dc:51:eb:41:35:9e:92:88:e8:
bd:1f:4b:e7:d2:c1:ec:a3:8f:d0:b2:11:49:d4:87:c6:da:3c:
70:ae:71:07:cd:be:c9:ee:ba:ff:eb:dd:bf:8f:c6:9f:c3:a7:
5a:06:91:9d:9b:e7:a9:ad:8d:54:96:dc:a8:8a:62:46:a6:dd:
44:fc:b5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:47 2026 by rpki-client