Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
File: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft (raw, json)
Hash identifier: m8u2TVFJdXI8GSBkPrFZ0n6Ex9zKaX0Yc859FHcBQvo=
Subject key identifier: F4:54:52:E2:5A:24:17:A6:AE:E9:85:00:8E:C3:C5:43:C4:13:71:D4
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 019CAC7E5E9B0AF58534FCA22858844C848C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
Manifest number: 1852
Signing time: Mon 02 Mar 2026 03:01:28 +0000
Manifest this update: Mon 02 Mar 2026 03:01:28 +0000
Manifest next update: Tue 03 Mar 2026 03:01:28 +0000
Files and hashes: 1: 0GL7DdIdoFqMUjvFhCRfHpKPMbA.roa (hash: pZia0ALckAxbVwXjSvk9ZitHob5JnbAYRMcyTh/GAHw=)
2: 4CJ3InuHwPxMIYug15LfFjf4TFE.roa (hash: AqjwYTvPMHv8KhwXl422zB5jGiNZqfOiCwgbFsHZ07g=)
3: H6jlQnwQ3aiH-RYU25LA_SCJ8YQ.roa (hash: z0WYajZ68GEteUnmX5OmcBfJ0ynCGdGVIvLSKmVhonU=)
4: VxmBydPNDVkjAwNW0HlCl0mcW2A.roa (hash: 2uX2f6w9d7FkhAQJ79lByeDaz04Av+toag4OFSNYkF8=)
5: X4rKfB3PDI3kjmwak5Qpg6vv3Qo.roa (hash: rE1Gy+5Y3N/6nRhiVvsTgzmZ/j4C83X5X1jx7h+hjs0=)
6: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl (hash: LVWn2jnrPSFVll9xIlem/DSpiD/CeFxqC4a12RowC9w=)
7: srwZqD3NLb6Mgfkh0xVjrlQc7p8.roa (hash: WOqlcZKIxr5sVUqyyKJNHMiLfFbk3vNnFX+UsNkt18I=)
8: zPyNAFdQmlJqV2qKRKA-eSuuTJY.roa (hash: WQ7fB4l+y3xXDPGETnFXWLdLLeTLH4yREUZKhvFa6Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:5e:9b:0a:f5:85:34:fc:a2:28:58:84:4c:84:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Mar 2 03:01:28 2026 GMT
Not After : Mar 3 03:01:28 2026 GMT
Subject: CN=f45452e25a2417a6aee985008ec3c543c41371d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:58:a5:40:8e:cf:b1:ef:1b:21:5e:a3:ea:35:
0a:92:60:c5:f7:1d:ac:ec:03:9f:11:eb:83:34:4e:
35:2a:3a:42:c2:c2:05:10:ef:90:55:32:b5:1b:bc:
53:a6:1f:5b:39:5b:c4:e9:4a:62:0f:de:35:46:d8:
eb:f1:0b:d3:4d:f4:72:b8:a8:0f:1e:3c:ba:eb:eb:
ea:78:69:5e:22:20:bf:9b:a2:d0:5e:66:fd:52:a1:
57:bb:4a:c0:dd:ba:f3:d6:8c:b8:b5:cb:6d:70:d1:
8a:06:8c:c2:45:67:47:1a:72:d0:05:28:9b:a3:a1:
e1:0b:d3:6d:54:51:0f:db:4f:28:30:81:f5:a8:9f:
a4:93:cc:9e:77:ef:18:ce:aa:c0:07:84:1e:76:29:
87:1e:6c:a6:d8:08:55:df:f8:6c:4d:4a:55:a6:f6:
51:47:7f:11:49:9a:59:83:8b:9f:d3:15:37:14:59:
b7:76:8e:b3:5a:5b:4a:c9:17:58:20:f4:bd:a1:7a:
29:b7:0b:d1:e0:2a:11:10:87:57:eb:b1:40:73:25:
ea:7a:df:7e:45:32:9b:ba:80:b4:a7:ad:25:65:b3:
bd:84:7e:77:5d:cd:55:dc:e3:a1:11:7a:38:a6:b7:
f7:e7:cb:9f:7d:5a:a0:4f:d6:24:05:1a:98:b2:cd:
36:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:54:52:E2:5A:24:17:A6:AE:E9:85:00:8E:C3:C5:43:C4:13:71:D4
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:5b:fe:86:b6:4a:ef:e1:fa:8b:70:e2:4e:fe:b1:38:3d:de:
b8:34:e7:ce:d4:5b:b4:33:db:ee:d0:6c:49:d7:a5:da:f4:56:
4e:7c:ae:07:9a:da:3c:bc:6f:0c:84:7e:fd:13:b2:6d:37:0c:
84:08:7e:1c:cd:e7:21:db:c9:b2:0e:de:cf:a3:1f:86:60:8e:
cd:71:50:8e:31:fb:a9:0a:62:22:4b:de:f1:38:a5:16:95:5a:
5b:94:bf:9e:c6:b9:72:12:a4:39:0d:90:3c:3e:73:8f:8f:16:
25:81:ff:23:22:b3:0d:dc:72:0e:3d:d4:1a:25:4b:0a:79:20:
7c:f0:e6:67:73:c8:f9:4d:30:b5:32:b6:d5:14:46:9f:bb:69:
ae:b2:92:e5:cd:ca:9c:3f:01:e6:85:85:ee:6f:ba:ca:9e:0d:
f7:07:45:1a:f5:36:54:c6:87:a3:90:13:6e:a3:a3:85:55:9d:
9e:8f:77:d4:31:58:da:05:e7:23:46:5f:0a:6f:7c:91:6e:13:
0e:33:b2:16:ef:c6:79:80:f1:c8:04:02:52:fb:40:01:c3:2e:
69:d1:4d:f9:ce:82:67:71:f9:11:06:78:bd:f5:aa:cb:b7:04:
44:4b:cd:61:88:9a:cf:10:c5:c7:a9:f6:29:70:be:5c:61:ec:
df:02:f3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:08:17 2026 by rpki-client