Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
File: zm4aIgj6PxufPTj_8fjiw02RHzY.mft (raw, json)
Hash identifier: TOeqr9k1lTBNhShWGjT/r0BiokU55G5Bd2QRWZFq4oE=
Subject key identifier: 20:84:34:C8:A7:ED:31:BC:F7:B5:C6:EE:CF:D0:69:46:64:C2:0A:D3
Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Certificate serial: 019CA9EAED9DB1E2BF051EA4019B04198511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
Manifest number: 1142
Signing time: Sun 01 Mar 2026 15:01:11 +0000
Manifest this update: Sun 01 Mar 2026 15:01:11 +0000
Manifest next update: Mon 02 Mar 2026 15:01:11 +0000
Files and hashes: 1: gvoNw609bD_6W2IwVPcUpI-Guaw.roa (hash: ye+ihzO9nCFXOpOHQxxGEqHh0UKlaKr0ZU9zZSsc480=)
2: zm4aIgj6PxufPTj_8fjiw02RHzY.crl (hash: FOx9YTaC/yAvpkNCn73HJfvqnO7ZzYDjEskuGL/llg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:ed:9d:b1:e2:bf:05:1e:a4:01:9b:04:19:85:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Validity
Not Before: Mar 1 15:01:11 2026 GMT
Not After : Mar 2 15:01:11 2026 GMT
Subject: CN=208434c8a7ed31bcf7b5c6eecfd0694664c20ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b0:00:de:7c:98:64:00:b2:a5:57:c1:00:c7:
4a:9f:ce:44:3a:15:5d:fd:e6:9e:cb:38:67:e2:68:
8e:e8:cd:ee:74:ab:f3:1d:78:4f:61:79:31:08:ab:
c6:66:39:dd:30:d4:d4:e0:3f:a2:ad:97:5b:9c:c4:
ba:6e:78:db:28:20:5b:9c:8f:b7:20:d7:82:47:df:
71:1a:e4:af:40:da:df:9e:30:cc:2c:f3:7e:d1:7a:
2e:f1:bf:bb:f7:01:09:58:fc:9b:8d:4d:fb:8d:e9:
38:39:fb:2f:2d:20:51:90:f7:69:29:32:8c:0d:db:
aa:e7:b4:cb:3b:e1:f3:f5:22:a9:bf:66:89:4a:8b:
d2:63:12:93:7e:9d:03:10:0a:c5:18:76:ef:ac:66:
3c:ce:71:a0:81:8d:3a:a9:6d:aa:13:30:00:20:a7:
7b:c2:90:c1:2f:63:d5:b7:5f:80:fb:64:5c:3c:86:
38:41:e8:96:9b:a5:0f:10:0f:ee:c4:6b:59:85:a6:
c9:01:fd:dc:b7:79:29:f5:51:aa:68:ef:17:17:d9:
ac:03:1b:bf:cb:95:a5:3f:5e:72:36:1d:9a:42:bf:
e1:ef:73:2d:56:fe:bc:79:8e:5c:d8:c2:65:8b:0e:
11:09:6d:d7:1f:ad:92:7f:d8:c6:ec:9b:0d:b8:c8:
ee:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:84:34:C8:A7:ED:31:BC:F7:B5:C6:EE:CF:D0:69:46:64:C2:0A:D3
X509v3 Authority Key Identifier:
keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b4:ae:f7:74:67:a4:5e:3e:0f:9d:3b:dc:78:ee:cd:ce:fb:
46:c0:7e:44:36:26:c0:da:c9:ca:73:27:e9:f4:12:71:0a:72:
22:de:9a:84:9b:47:21:50:14:11:c0:10:c8:1f:0e:7f:bb:18:
9b:80:0d:a2:17:7d:94:83:65:7c:21:50:f7:8c:c9:8e:8e:ba:
43:e2:f8:dc:0a:cb:77:a7:8b:e1:cf:33:76:fe:8d:09:f1:b9:
73:ca:16:a5:e9:1b:5c:82:e2:45:74:4a:b5:c5:08:94:8f:c3:
eb:f5:a3:8a:7a:d2:9e:cb:43:bf:f5:a6:80:ca:cf:30:98:cc:
d5:69:af:5c:d3:b8:14:01:f2:33:f5:e7:40:4d:ed:ed:3e:a5:
ae:69:9e:f2:69:13:a2:ac:eb:64:eb:c8:e7:e9:56:d3:6e:8b:
31:d2:b8:1d:d2:67:34:33:c5:74:1c:8a:b5:df:56:a8:1e:d2:
1a:05:d3:9d:1a:4e:b7:a9:3d:b8:f1:36:b5:7a:fb:57:47:0d:
1a:1d:62:d3:61:03:6e:5d:33:9e:0c:cd:02:52:35:1a:51:03:
e9:12:3d:05:0d:3a:66:d9:d5:aa:00:02:73:33:53:ce:86:d4:
0c:cb:55:17:e6:b6:68:9d:93:7e:12:62:0d:cc:b4:a9:d5:19:
c2:e1:9b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:38 2026 by rpki-client