Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
File: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft (raw, json)
Hash identifier: eQ4bvia5LJ9TlGJlnCtO2HR+aL+SdJ2A38lbfbnznoE=
Subject key identifier: 16:79:9F:4B:35:06:57:C4:EF:C8:BD:0A:57:56:86:F4:D7:B5:D4:E9
Authority key identifier: CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C
Certificate issuer: /CN=ce1c5bea595d890f21307c1b336519fb0edc089c
Certificate serial: 019CAB6B78DA8760594A0DCFCBCE9790EFC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 22:01:13 +0000
Manifest this update: Sun 01 Mar 2026 22:01:13 +0000
Manifest next update: Mon 02 Mar 2026 22:01:13 +0000
Files and hashes: 1: dyIfoHvYEfN77rehdk6Hr_OLRAE.roa (hash: xcmHvUmEQ2Xk7WqYhP6N4oZ9W7Pc6AjsjVYgGRTZexw=)
2: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl (hash: KInyxm5txAc9wHADZFHhBu8bwQJWZPqt/if9ZNro+BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:78:da:87:60:59:4a:0d:cf:cb:ce:97:90:ef:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce1c5bea595d890f21307c1b336519fb0edc089c
Validity
Not Before: Mar 1 22:01:13 2026 GMT
Not After : Mar 2 22:01:13 2026 GMT
Subject: CN=16799f4b350657c4efc8bd0a575686f4d7b5d4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fc:8e:ef:14:da:99:90:91:51:6e:a9:9a:eb:
5b:60:06:53:7f:d2:79:54:65:e0:54:3b:ea:b7:d1:
cc:98:d6:91:cf:87:c6:ff:d9:6a:a2:b6:cd:1a:0b:
6b:b8:df:d7:da:ce:3d:2e:e3:1f:87:3d:a9:da:e9:
54:d6:17:59:98:26:77:47:31:f6:61:f4:7f:d4:6e:
7f:28:36:b6:0f:f4:5b:8a:a5:0b:dd:c9:66:8f:d5:
5d:ac:42:14:2e:4a:06:93:de:d2:5d:0b:d9:ec:29:
ab:27:f3:9b:e2:ef:97:82:b0:88:2c:c3:a2:da:ff:
ad:0a:10:9c:70:18:3d:97:12:5e:bd:6c:a0:69:96:
99:8c:d7:8d:30:fc:0e:28:a8:b3:3e:f7:09:de:d3:
ce:0d:23:6f:14:66:ff:b4:27:97:10:e8:d1:c0:c4:
bb:1a:ae:dc:ee:7c:52:7f:07:6b:a7:05:7b:cd:a1:
27:af:5e:f1:fd:8c:8c:43:0a:c5:fa:08:d8:20:42:
c5:21:2c:97:30:ed:e4:f4:6f:ed:b3:40:56:b9:5e:
32:95:23:bc:6c:81:8b:57:32:71:eb:f8:f4:99:aa:
b1:c0:de:c7:df:62:82:c0:28:6e:eb:25:f7:de:2e:
54:be:95:2e:15:4a:ec:17:a6:32:b8:8d:f6:f0:7c:
bb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:79:9F:4B:35:06:57:C4:EF:C8:BD:0A:57:56:86:F4:D7:B5:D4:E9
X509v3 Authority Key Identifier:
keyid:CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:31:56:de:22:df:72:9b:06:cc:50:0c:2f:27:83:7c:0a:a6:
04:37:ac:c6:b2:6f:d1:78:c1:b4:d3:91:34:23:2f:70:8b:67:
94:b6:b2:c9:c3:ea:f3:4f:63:c7:ac:b9:df:f1:26:9f:2d:a7:
91:76:20:a1:0a:eb:10:20:f0:8a:9f:48:a5:c7:4c:8a:d6:c9:
42:f6:e3:83:82:65:ef:05:e6:f9:68:22:f2:fc:06:31:21:6b:
89:c1:55:83:fe:9d:4d:4a:eb:ac:3a:c8:22:25:57:4f:3b:19:
eb:38:71:67:4b:b0:07:09:e6:6d:1d:f0:1e:63:dd:41:18:79:
2e:9f:86:6a:fc:f8:f6:5e:da:15:4e:a1:ab:ee:f3:99:22:f4:
22:e8:8b:1f:b8:29:52:a1:8b:23:1d:fc:7c:05:7f:6a:9a:5f:
5a:3e:98:9f:3f:3b:f1:9e:b8:cd:30:42:13:2b:78:d2:86:40:
f8:02:3c:d5:55:0b:ea:33:6a:01:f3:fc:f5:fb:0d:ec:b2:5a:
8f:cf:c2:c7:e5:08:8b:bb:18:a0:35:65:64:08:98:59:cc:f2:
8b:b9:9a:b1:72:f7:d5:5d:7f:03:ab:96:b7:8f:ec:9f:f0:de:
30:44:b9:30:72:1f:22:e4:ac:c3:ae:b4:c7:f3:2b:af:20:f6:
3a:ff:d0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:18:51 2026 by rpki-client