Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
File: ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft (raw, json)
Hash identifier: m+wWIEJb6+UAHY6/I2iop8SU0l7hUWRgKte3XOik6UA=
Subject key identifier: 6A:48:BE:58:C1:A0:E3:54:9E:B0:CB:23:D9:7F:D2:B2:53:92:F8:16
Authority key identifier: CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
Certificate issuer: /CN=cdee78ad857607523b50b60acd9e22ca5a107854
Certificate serial: 019CAB342417BACC42485BEB187F98478B2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 21:00:46 +0000
Manifest this update: Sun 01 Mar 2026 21:00:46 +0000
Manifest next update: Mon 02 Mar 2026 21:00:46 +0000
Files and hashes: 1: jd-Obso-qia3Fzrm-rJvl_CyXrA.roa (hash: w+UMEthLd9XD2Eg9Qq+nBr2hQA3cH7TTPC5wOmg4x3A=)
2: vvIOu90M6kEZ71mN06u0tYK02eU.roa (hash: rr9r1oYZxg4M15XzRNVPfU9mZGnGg57yCNPY5TXNgYg=)
3: ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl (hash: JtrKSvX1zM9cXcxhcEjvcL1qmCirEETcUyWEYgOZkqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:24:17:ba:cc:42:48:5b:eb:18:7f:98:47:8b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee78ad857607523b50b60acd9e22ca5a107854
Validity
Not Before: Mar 1 21:00:46 2026 GMT
Not After : Mar 2 21:00:46 2026 GMT
Subject: CN=6a48be58c1a0e3549eb0cb23d97fd2b25392f816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b2:8b:be:63:52:3c:09:ae:ca:4b:6a:b0:50:
d4:95:5b:6d:a0:b2:39:54:da:bc:d6:2b:35:3c:fd:
33:81:c1:23:f6:5f:9b:45:54:a8:a8:95:ff:90:45:
0a:e5:3b:54:ec:40:1a:fa:12:98:3b:b2:be:56:c5:
f3:d5:53:cf:44:7f:59:74:e2:84:c4:80:fb:3f:01:
1f:33:3e:59:f6:6f:d7:30:df:aa:47:61:29:85:6f:
76:ea:58:91:1f:12:31:9a:3f:0e:ab:74:3e:89:4f:
22:8d:d6:c3:29:7b:23:3a:8e:7e:11:13:f3:c5:05:
e0:5a:8b:a6:38:7a:d7:93:bf:72:f3:c9:1c:a0:1b:
77:04:85:85:78:4e:05:62:bd:44:37:5c:a2:12:39:
0d:0d:5f:2f:ff:4c:8e:1a:35:03:a9:30:d0:d9:b1:
b9:e5:39:6c:64:56:dc:0e:64:77:d4:8a:b3:58:38:
8d:ed:05:4b:d7:67:27:0b:f6:00:ba:aa:e9:eb:31:
95:73:0b:b4:e0:9f:8c:7c:46:92:99:ea:54:63:a8:
4c:c1:85:e0:bf:15:1d:c2:38:5d:c9:20:8d:81:55:
84:50:56:df:f7:ae:34:38:11:d6:66:30:69:d9:7c:
70:2f:8c:08:84:be:a3:34:5d:2c:f6:93:ff:bf:b1:
83:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:48:BE:58:C1:A0:E3:54:9E:B0:CB:23:D9:7F:D2:B2:53:92:F8:16
X509v3 Authority Key Identifier:
keyid:CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:bd:05:18:e3:e6:3c:0b:fd:6f:85:b4:f4:9e:0d:fe:fe:07:
c1:9e:0f:65:05:b8:b9:d7:dc:73:f8:fc:36:79:5a:ed:56:c7:
09:01:48:87:51:29:e2:d7:ec:8b:d9:4a:4e:01:b6:82:40:b6:
8a:61:d0:55:1c:73:3b:97:9f:4a:71:3b:b2:7e:d9:29:4b:d5:
90:38:24:2e:aa:aa:fb:da:03:b5:54:01:75:56:99:a1:a1:b7:
64:ac:51:5c:7e:ae:02:48:8f:dd:47:16:95:64:02:66:37:88:
58:36:48:2a:16:0a:1f:c5:e7:e8:b6:b6:70:6b:6f:95:31:14:
53:51:24:36:8b:7a:6c:13:f4:8b:90:cd:56:4f:cf:75:5f:39:
35:64:0c:3b:89:97:83:0f:83:8f:ae:eb:0b:a5:8f:6d:2f:f5:
71:7a:aa:01:90:bf:83:18:4f:c3:e2:94:49:ce:bb:4b:b8:22:
11:07:cd:82:8e:42:a5:3e:27:2f:f9:98:40:53:c3:d0:5e:bf:
d5:0a:0a:3b:0d:84:e4:f6:de:b0:4b:fb:b8:21:05:88:1d:4a:
f9:c1:7c:bd:90:32:49:a8:30:f1:20:c5:76:db:86:f6:d5:c7:
21:1e:16:0e:1d:82:73:ba:ce:6d:85:0a:9e:c0:7c:8b:f3:cf:
22:cf:da:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:30 2026 by rpki-client