Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
File: _z7T1NR7joJfv9B5SC96DCHcke8.mft (raw, json)
Hash identifier: gLfUfm4kna0s8ie9xM0UQBzUKaaopn5lRt7O2Zxv8sE=
Subject key identifier: 2C:A7:13:67:8E:3A:B1:18:74:58:A6:C1:09:9C:6D:CB:A6:5D:EB:BA
Authority key identifier: FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
Certificate issuer: /CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Certificate serial: 019CAC0FA281A66D7E99D1EA799449C7FAAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 01:00:31 +0000
Manifest this update: Mon 02 Mar 2026 01:00:31 +0000
Manifest next update: Tue 03 Mar 2026 01:00:31 +0000
Files and hashes: 1: 2fZ1bQhJblUq5fcVHhL0C_-Td54.roa (hash: pAu1H6XJd6QLNwtCItbi85jUBgZSBz8c5zchsEegiak=)
2: _z7T1NR7joJfv9B5SC96DCHcke8.crl (hash: uWfPWXnSM+6nSJK2dThuxaw/i5FXylqTw9wjqqyjd6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:a2:81:a6:6d:7e:99:d1:ea:79:94:49:c7:fa:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Validity
Not Before: Mar 2 01:00:31 2026 GMT
Not After : Mar 3 01:00:31 2026 GMT
Subject: CN=2ca713678e3ab1187458a6c1099c6dcba65debba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:64:6c:d5:f8:da:60:87:27:cf:2d:7e:7d:df:
e4:fd:ab:fa:ca:26:13:b1:08:cd:62:4c:6a:d9:e5:
d6:0d:00:2b:ea:21:ae:18:9f:15:ba:cc:9e:3a:7a:
eb:1f:31:e3:80:34:14:5d:b2:a4:8e:ba:59:a8:2e:
64:33:df:fb:63:3a:82:09:eb:91:04:13:ab:1e:18:
42:14:86:3b:11:85:2a:fc:bb:7b:e1:c3:62:48:58:
eb:d7:73:9c:be:60:ca:7c:99:a8:b5:cf:b7:49:88:
43:0a:a9:30:3c:80:c0:e5:2e:74:1b:ae:2f:4d:6c:
ff:13:ff:81:35:38:8f:67:f7:42:9e:17:99:7b:b9:
c3:a9:c6:14:69:70:a9:b8:cb:55:80:5e:be:c9:62:
d3:4e:c0:43:80:2b:5e:e6:0b:a7:de:2f:cd:ec:5f:
80:70:59:c3:ec:c7:0a:35:58:cf:36:86:fe:38:48:
61:4a:e2:e5:c0:fa:36:6f:54:8d:b2:da:a8:15:e2:
1a:fc:73:ea:36:3e:10:b6:ef:36:79:96:1d:1b:24:
35:35:f2:94:e1:32:da:92:57:b9:9b:57:95:89:c8:
2b:44:56:10:31:b9:42:c3:ff:2d:eb:ae:7c:ce:aa:
f8:d1:76:d1:ef:1a:09:5e:0f:99:60:89:a4:2b:48:
1d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A7:13:67:8E:3A:B1:18:74:58:A6:C1:09:9C:6D:CB:A6:5D:EB:BA
X509v3 Authority Key Identifier:
keyid:FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a1:5a:43:64:2d:74:77:10:3e:6c:de:1f:2b:45:be:22:fd:
7a:9b:92:8b:61:47:6d:fc:ae:40:cc:fd:47:8f:e9:c5:01:2b:
aa:f0:a2:aa:b8:89:12:f1:03:4c:7f:91:8a:7d:cd:b3:9a:49:
a7:3a:f7:77:3d:a6:60:37:91:71:c9:b9:52:c0:24:a1:2f:eb:
40:41:a1:76:0d:76:ab:09:6f:e9:5d:f7:f2:97:c5:56:c7:d6:
31:8e:f8:1c:ae:1e:06:70:85:2c:b4:8b:89:d2:7d:49:69:64:
66:29:82:3c:45:55:e6:be:67:30:52:7b:83:35:ce:3a:80:02:
31:af:24:cc:65:9b:5a:aa:cd:1a:27:f2:76:9e:c8:7d:a2:e3:
38:be:31:8b:a0:87:ee:4d:9e:bf:71:43:f9:43:2b:ff:fd:e5:
4a:b2:38:0d:1f:84:07:26:9d:bd:9a:72:cd:ef:11:67:1c:13:
37:9a:61:7c:1f:db:7f:9d:9f:cd:24:1a:73:89:56:15:0b:15:
49:80:f9:f9:7b:21:f1:07:e2:90:06:3a:e7:82:7b:c5:0f:04:
3e:82:fd:ed:1d:dc:d0:bb:bd:2e:24:d1:ab:f9:ad:fb:98:5b:
20:c0:70:4f:72:02:08:82:5b:8b:fd:98:27:fa:f0:27:1c:f3:
8c:49:e5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:31:37 2026 by rpki-client