Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
File: zfYsvWz36AgiT2z4cl424qllNSw.mft (raw, json)
Hash identifier: 2wcyYNwWKpqxD647kUt4BFanUZenaFVJv4ODxSmmUTM=
Subject key identifier: FB:71:60:FE:BE:C6:F3:3F:11:FE:51:20:F9:E6:08:C7:63:CF:8C:2F
Authority key identifier: CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C
Certificate issuer: /CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
Certificate serial: 019CABD98A29B5A4F7C1588DE56A4FF8E1AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
Manifest number: 0ACE
Signing time: Mon 02 Mar 2026 00:01:26 +0000
Manifest this update: Mon 02 Mar 2026 00:01:26 +0000
Manifest next update: Tue 03 Mar 2026 00:01:26 +0000
Files and hashes: 1: Xp1_bdYXI9U3hQygHMzTkT43K1Q.roa (hash: lsd6lPp/ulgto4+3u4nnsXd9a7lg4D4o9xZaATfNY4Y=)
2: zfYsvWz36AgiT2z4cl424qllNSw.crl (hash: /6O564ngtzjXhBKacDd4IQXzfP/fiPxUjJqFFrTdIkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:8a:29:b5:a4:f7:c1:58:8d:e5:6a:4f:f8:e1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
Validity
Not Before: Mar 2 00:01:26 2026 GMT
Not After : Mar 3 00:01:26 2026 GMT
Subject: CN=fb7160febec6f33f11fe5120f9e608c763cf8c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:02:fe:04:cc:10:08:59:48:48:31:1e:c9:69:
4a:04:98:3f:cd:bd:e8:bf:c1:29:17:ec:34:65:12:
85:65:1f:85:3b:dd:ad:15:74:16:12:b8:0d:68:85:
19:bc:54:52:a9:3b:81:8a:90:5f:b7:8a:d4:45:ad:
0d:78:3a:9e:8c:78:5d:65:8e:8d:85:3b:9c:5c:5e:
a1:c3:3a:e3:ef:6e:61:94:79:b3:ed:4c:3e:2d:d8:
6a:b8:68:cc:51:79:99:e9:6b:71:e7:35:7f:19:27:
12:90:24:1a:06:1d:27:e9:aa:1e:82:b0:b5:37:53:
9f:76:22:9f:1a:e6:9b:7c:5e:34:a2:85:a4:66:da:
36:54:99:36:bd:5c:15:7b:21:cf:30:2d:2c:a5:aa:
eb:c1:29:da:a3:0e:18:83:5d:82:c7:5d:fa:d1:e1:
5a:f0:36:d7:94:42:64:e8:6e:bd:d4:28:51:1f:fb:
16:83:86:3d:36:f1:94:14:b1:cd:21:b4:96:5e:f7:
d4:cb:11:3b:1d:1c:bd:c3:f9:cc:f1:77:31:b0:6a:
7d:30:6a:d4:a7:d0:43:dc:0a:92:66:24:4f:eb:57:
a2:0f:31:19:8b:58:cd:f0:37:d4:41:62:d8:a3:e8:
ca:4f:43:ab:0a:76:80:ec:98:93:d5:30:0f:5a:cb:
74:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:71:60:FE:BE:C6:F3:3F:11:FE:51:20:F9:E6:08:C7:63:CF:8C:2F
X509v3 Authority Key Identifier:
keyid:CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:cf:d3:72:e2:f3:39:9d:30:b5:6f:a3:a3:83:8b:ae:21:cd:
bd:4d:1e:e2:0c:e1:c5:3c:76:f8:d1:28:cb:0b:b3:ca:17:f8:
f3:e1:da:86:a4:27:2c:09:07:11:29:41:f6:42:3b:e3:31:58:
4a:cb:51:ec:58:68:8f:74:0e:31:88:d8:a1:56:b1:96:24:24:
46:2c:f5:fe:4e:86:ca:1c:81:13:99:67:0d:f9:d0:51:c3:e9:
8d:e6:7f:cf:f4:db:de:d4:c2:cf:97:e2:9a:a6:88:dd:3e:5f:
14:d1:b9:af:2f:f3:f2:7e:58:14:2a:01:04:e4:f6:ac:13:9e:
a0:06:99:91:83:cd:3a:5a:16:01:68:ed:46:c4:26:71:f6:bc:
fd:c1:91:f6:e2:1d:56:f8:13:7a:a1:0f:e2:d9:c9:68:f5:57:
8a:73:cc:df:93:42:bf:96:ef:e4:28:04:98:ab:85:15:86:0d:
5e:af:04:0d:30:14:25:9d:73:7b:a0:0b:d4:c6:cd:95:03:35:
bb:b4:91:48:bf:61:a4:14:ef:e0:a4:f4:c4:a2:5a:f1:99:87:
8b:f2:03:92:90:f8:91:e5:90:f0:d3:5f:11:0f:71:fc:54:df:
bd:3e:38:c9:96:fe:77:f8:cf:d8:cf:90:96:98:06:97:6a:d3:
5f:b5:6e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:25 2026 by rpki-client