Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
File: ze5dkAYfoqckw2dCWGxinUceek0.mft (raw, json)
Hash identifier: HHtjqphupfcJmTs5nGxWzoN1Vkv5uShWfDuRHDrdUJY=
Subject key identifier: E5:C4:68:7C:66:1E:11:D9:25:71:7B:74:E1:7C:E2:95:3D:4A:D4:29
Authority key identifier: CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
Certificate issuer: /CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Certificate serial: 019CACB52232030F262DB74D58A37B65AD49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
Manifest number: 0D4E
Signing time: Mon 02 Mar 2026 04:01:17 +0000
Manifest this update: Mon 02 Mar 2026 04:01:17 +0000
Manifest next update: Tue 03 Mar 2026 04:01:17 +0000
Files and hashes: 1: 8a76FAqMjieN7aLSC8xEAc3hgOU.roa (hash: pAPcnCH+A+mHZKWJuKSuBMT8TzG5YvvwYe+EaHI/zYI=)
2: ze5dkAYfoqckw2dCWGxinUceek0.crl (hash: uMNDcadKVtnydr9mY+HFduU99FsUxsrkBbnn5Nv5nZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:22:32:03:0f:26:2d:b7:4d:58:a3:7b:65:ad:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Validity
Not Before: Mar 2 04:01:17 2026 GMT
Not After : Mar 3 04:01:17 2026 GMT
Subject: CN=e5c4687c661e11d925717b74e17ce2953d4ad429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a2:ec:c6:eb:ec:59:5a:31:3e:7b:64:cd:c6:
da:a8:f4:f1:ae:bc:e3:87:b4:8e:85:31:f7:49:ac:
41:67:4f:df:82:af:f1:52:0f:95:b0:68:02:b6:76:
2b:e3:73:08:5f:9d:7c:cf:02:14:dc:4b:ba:03:c0:
72:ac:39:d2:a2:3e:fc:e2:02:24:3c:64:13:56:72:
9e:72:1c:10:f6:15:44:85:75:67:8d:a9:7c:7b:a3:
b2:51:af:c1:8a:1d:74:00:6c:11:ef:58:f0:40:0b:
5c:c6:48:5d:74:03:92:96:99:c7:80:db:14:80:00:
97:e7:dd:44:b4:c1:ce:e2:7a:4a:1a:d7:94:e2:24:
a1:86:f6:35:21:62:b2:75:c5:0a:87:6c:e1:0f:fa:
79:cb:43:24:98:2b:f8:09:10:54:a6:b6:6f:f1:b7:
b9:d0:34:11:f7:80:09:e8:c7:c2:46:8d:ed:39:91:
8a:4d:c4:c6:5e:88:6d:a9:6d:f2:59:db:81:ba:83:
86:54:00:21:ee:bc:fc:3a:5d:14:5a:77:33:56:4c:
88:3c:3e:c0:0c:e1:52:d1:64:44:ad:6d:61:6d:e0:
65:f6:b7:ee:58:cc:66:6f:1e:cd:df:d7:66:bc:ab:
97:af:19:d6:c6:73:2a:f4:b3:17:b6:04:89:5f:1e:
65:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C4:68:7C:66:1E:11:D9:25:71:7B:74:E1:7C:E2:95:3D:4A:D4:29
X509v3 Authority Key Identifier:
keyid:CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ac:5a:eb:c5:44:73:c1:7a:f8:15:2c:7a:4f:86:8f:2e:c2:
50:13:94:66:f9:fa:4a:49:05:d0:63:4a:28:d3:66:1d:bc:20:
b4:94:93:ef:1f:12:46:ab:2a:c1:8a:18:7c:7e:da:2c:a3:40:
96:41:90:86:4c:ae:46:b4:9e:ad:c3:55:6f:af:3b:42:ce:9a:
64:ee:f6:9b:4f:ae:f4:a2:c5:82:f7:49:0b:e7:4a:3b:09:67:
da:c6:c5:bf:82:eb:22:0f:87:20:0a:77:f8:41:45:e0:53:3a:
70:59:c3:39:78:b2:57:ab:a0:06:1b:62:98:14:c5:1c:fb:8a:
16:fb:8c:62:1b:2f:47:e0:06:64:bd:c0:de:8c:fe:4b:59:20:
6b:93:4d:55:e5:82:8b:78:aa:2a:10:c1:8d:43:73:9a:a2:ef:
9b:07:69:77:64:c5:92:58:6e:01:c9:0b:d2:f6:dd:16:0f:52:
a7:31:22:f9:df:57:97:b0:a4:35:9b:9c:69:e9:c5:18:9c:10:
d0:d3:07:55:25:8d:00:d9:31:02:8a:a3:54:21:c7:12:31:3d:
b1:0c:ff:1c:62:3c:d6:bd:be:17:5c:c9:ef:e1:0a:e5:f5:f7:
2a:84:a0:3f:b0:e9:7f:b8:7b:84:e0:1d:5a:a6:45:d4:e8:36:
c6:8b:55:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:11 2026 by rpki-client