Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
File: zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft (raw, json)
Hash identifier: wR6VnIH2Lii3Ak+jm29R1TWQqXvmGb3/It4Gc6hrojI=
Subject key identifier: E1:47:24:23:C5:CC:35:C4:69:32:CF:38:22:D5:3D:A9:92:85:C2:2C
Authority key identifier: CC:78:BF:CE:B4:1B:AF:EF:C0:2F:79:52:E1:AA:24:80:E9:86:F0:37
Certificate issuer: /CN=cc78bfceb41bafefc02f7952e1aa2480e986f037
Certificate serial: 019CAD22E06EA9235D013C367D604086A0D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 06:01:09 +0000
Manifest this update: Mon 02 Mar 2026 06:01:09 +0000
Manifest next update: Tue 03 Mar 2026 06:01:09 +0000
Files and hashes: 1: cFxRCCQN4YXEL_mFbkEo5k1pnIo.roa (hash: 3gOkanUhjfYhiX9/Lx+CjQ0DSnaWLj1dJ1oGqbwVrl8=)
2: zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl (hash: CRd2KqqZVGihNQZyofbG13gid0HE1opxqFMG9WdFEAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:e0:6e:a9:23:5d:01:3c:36:7d:60:40:86:a0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc78bfceb41bafefc02f7952e1aa2480e986f037
Validity
Not Before: Mar 2 06:01:09 2026 GMT
Not After : Mar 3 06:01:09 2026 GMT
Subject: CN=e1472423c5cc35c46932cf3822d53da99285c22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:e5:8f:ec:20:6a:d0:30:c5:fc:94:25:ae:
b8:d0:ce:c5:03:12:79:b2:dc:29:16:60:58:5a:01:
d7:71:0d:71:32:eb:43:3c:d3:a1:51:f6:00:47:7a:
74:1c:bb:59:56:0a:e6:6c:5a:1e:d5:00:81:7e:e7:
de:ff:81:85:18:fc:39:11:14:22:9a:63:54:1b:41:
e3:64:0c:c1:87:b6:a5:5f:26:9f:f0:91:5d:ae:f0:
47:e8:52:bf:ed:50:ae:bb:38:48:1e:43:b3:3b:ba:
fe:de:d5:64:92:92:a4:6e:4b:dc:d9:9b:f8:85:7d:
05:d5:4e:e0:10:16:8a:b8:6e:d8:a7:84:15:3d:07:
c7:3f:f8:37:8a:47:4b:eb:22:98:be:eb:9d:4a:64:
d9:a3:4f:34:66:14:c2:6d:fa:09:26:d3:4c:6e:fd:
d6:68:85:3e:ba:05:60:75:a6:58:d4:14:24:84:6b:
b1:f1:02:88:60:9e:9a:af:6f:23:69:f1:19:c8:d1:
0e:7a:9f:70:2f:85:f8:e5:d8:89:84:ce:ec:6a:77:
ca:72:40:06:06:6f:4e:ad:df:1d:b3:bd:21:42:cd:
ab:b3:a0:54:8e:3f:91:02:ba:9f:2c:e3:02:69:99:
cf:e7:9b:91:e5:a2:05:d8:f5:bb:5b:8c:08:8e:84:
cf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:47:24:23:C5:CC:35:C4:69:32:CF:38:22:D5:3D:A9:92:85:C2:2C
X509v3 Authority Key Identifier:
keyid:CC:78:BF:CE:B4:1B:AF:EF:C0:2F:79:52:E1:AA:24:80:E9:86:F0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ad:50:fe:f1:4d:18:47:31:38:d3:33:3b:db:41:b2:90:ef:
15:e8:32:cf:8b:eb:87:0b:a1:8d:90:4e:b2:20:10:13:1e:eb:
76:3a:02:0d:a7:12:63:b0:16:e4:5a:19:67:74:d8:3d:5f:81:
d3:bd:5b:19:6e:74:5c:35:74:1c:18:d2:06:74:14:92:62:b6:
34:77:a6:97:95:78:2d:63:c9:90:6d:ce:71:73:e5:7c:c5:b7:
f8:71:5b:ce:b8:bd:f2:48:8c:80:e4:cf:20:bc:26:08:ed:1e:
33:91:69:64:ea:49:41:9c:52:c8:f4:89:1f:b6:9c:3c:65:ef:
17:f8:88:72:ee:aa:4d:ad:b4:5d:a8:a3:5c:36:01:42:e1:92:
49:1c:bc:4b:70:13:62:2e:ce:b2:0f:72:75:99:e6:ac:72:7f:
32:8e:ab:95:3e:ce:ec:42:36:f7:dd:3e:c6:ea:12:62:53:64:
fd:73:7e:bc:30:ab:21:d4:f5:e3:04:d6:1e:ed:60:f8:c4:83:
22:01:b1:6f:46:84:c3:da:27:a4:12:a5:e9:19:c9:a4:60:8e:
de:79:4f:95:2d:94:1e:60:ef:9b:2d:a8:b9:43:d8:c6:69:ef:
a5:9c:0c:b2:b6:4a:ba:83:9b:ae:fd:7b:c2:76:2d:5f:24:f3:
b0:8e:d1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:16:55 2026 by rpki-client