Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
File: ZfASDuO28PjbUtDbgcAeREfY5Lo.mft (raw, json)
Hash identifier: WUywnlfLgjl77kdWBJSFQFUx5nIBZz3rnizjaDfCPVI=
Subject key identifier: CC:03:02:22:B6:AF:20:72:5D:8B:59:A7:BE:E1:DA:7A:C2:3D:6C:C0
Authority key identifier: 65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA
Certificate issuer: /CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba
Certificate serial: 019CAA8FC27B162C1676138F417653DE778A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 18:01:13 +0000
Manifest this update: Sun 01 Mar 2026 18:01:13 +0000
Manifest next update: Mon 02 Mar 2026 18:01:13 +0000
Files and hashes: 1: Tthj6IAisEXh8B7T83zOvQFpSgE.roa (hash: swp/iMSfoovOUEacEZNjOCFIiISihBeFVFi87XAxBPg=)
2: ZfASDuO28PjbUtDbgcAeREfY5Lo.crl (hash: g23qVgPIccNKo3+4HEXOWiRpIGkQZdkrPDfQdDbs928=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:c2:7b:16:2c:16:76:13:8f:41:76:53:de:77:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba
Validity
Not Before: Mar 1 18:01:13 2026 GMT
Not After : Mar 2 18:01:13 2026 GMT
Subject: CN=cc030222b6af20725d8b59a7bee1da7ac23d6cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6d:b6:c8:ab:ac:7c:e9:a9:88:3a:b9:bc:b4:
0e:58:ab:c3:fa:51:af:b2:52:b2:09:15:0e:73:71:
75:07:38:9e:62:dd:51:72:2c:c2:20:fc:60:93:fa:
33:e0:d9:23:4f:4e:34:9e:ec:f7:f8:1b:b3:1b:ad:
c2:08:2d:9c:a0:d2:23:34:c8:3f:46:7b:ef:35:6f:
e7:f2:cb:19:7c:48:48:d7:da:d4:82:46:94:ec:b4:
63:e7:a7:97:33:a5:a0:a5:03:b7:6e:a1:63:80:e9:
f7:85:94:a3:d5:50:e4:8a:69:c5:82:3a:a7:8a:ab:
76:be:3c:67:32:dd:bd:5f:a4:15:a0:b7:4f:b4:2a:
35:36:e9:3a:4f:a8:dd:f0:4d:ce:f9:45:c5:6b:f3:
3a:a3:89:5f:d6:67:c1:ae:02:de:89:cf:c3:5e:dc:
b2:6c:67:fe:96:7d:f9:6b:bf:b6:fb:af:2c:13:d1:
99:16:d6:96:5f:e5:82:89:94:82:69:13:82:af:27:
d2:db:25:fc:51:cc:9b:4e:86:36:af:37:5b:2a:b6:
e2:cd:5d:40:d8:6e:f0:16:c2:dc:b7:b3:60:fa:24:
70:f7:4b:ab:82:78:3c:02:64:fa:3c:33:c5:53:17:
93:66:7b:57:07:4e:b3:31:be:45:d5:0c:8b:f0:67:
d7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:03:02:22:B6:AF:20:72:5D:8B:59:A7:BE:E1:DA:7A:C2:3D:6C:C0
X509v3 Authority Key Identifier:
keyid:65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:69:20:3c:2d:57:b3:e5:d4:df:0c:21:d2:1e:c6:86:c0:a0:
af:94:b4:9d:c8:e0:8f:36:54:ea:5f:4e:f8:8a:42:82:3a:84:
1c:a0:53:fb:b0:2d:a2:1a:9f:fe:bb:96:4d:ed:e9:c3:17:5d:
f8:d2:d7:d1:cd:ac:d7:67:47:7d:00:af:0d:ea:54:93:bd:cb:
67:9a:ee:8f:4f:06:58:ac:41:87:e7:12:17:ac:b8:44:31:d7:
b1:e9:50:61:73:a2:5c:12:cf:4e:77:68:5f:d4:ea:19:23:83:
66:e0:29:60:de:a1:7e:a7:c3:a5:ac:66:d8:8b:58:7a:6e:a8:
a9:44:fa:51:9a:69:a8:23:65:d1:9d:cc:4e:62:5d:ce:4d:0c:
ea:a5:a2:d9:91:67:ca:e8:c5:29:ff:b5:c2:22:e2:56:c2:c4:
b2:d5:d6:46:12:cb:a0:01:f5:60:08:2f:e0:81:a1:d0:59:eb:
14:5d:10:cc:f5:b3:0e:59:7a:16:3f:67:f0:ae:5e:5d:60:95:
5a:68:33:07:2c:5f:62:98:d3:d0:5d:be:55:b8:53:b7:03:ca:
91:16:1c:4c:4b:dc:09:e2:7a:01:73:9e:e0:c6:0e:5f:6a:f2:
43:fb:21:49:5d:0f:68:d6:f1:be:e7:ca:0b:71:b3:e6:1e:82:
2e:b2:ca:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:49:48 2026 by rpki-client