Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
File: ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft (raw, json)
Hash identifier: AOWetSapUPQU2MMyq15DQuuwlp+4eY417r2mxkWpw38=
Subject key identifier: A2:CF:B8:E5:D5:B5:C9:CA:EC:40:9B:7D:32:AC:35:29:21:58:6C:7A
Authority key identifier: 64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C
Certificate issuer: /CN=644ca1f90518d4253f325947d7f32db78721647c
Certificate serial: 019CAC468E266627D78053B4210A0F138B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 02:00:30 +0000
Manifest this update: Mon 02 Mar 2026 02:00:30 +0000
Manifest next update: Tue 03 Mar 2026 02:00:30 +0000
Files and hashes: 1: ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl (hash: rBYKLqFMcohl4fXcswBZcEsft8QGCsHrPFNNb+Qyqbk=)
2: h-DdB5q6o6vGcwUvYQjItuQoHSo.roa (hash: R0KxdO/E8HjCSvDapDPgguWBk+j+4g//kGxl/YMu2PE=)
3: y1-SGhZC7LSQ3xAFEOGz9QyG038.roa (hash: G+7mp0FPcfU99vlwCxTLgDF4pbzcHad2tCEvXbWZJ1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:8e:26:66:27:d7:80:53:b4:21:0a:0f:13:8b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644ca1f90518d4253f325947d7f32db78721647c
Validity
Not Before: Mar 2 02:00:30 2026 GMT
Not After : Mar 3 02:00:30 2026 GMT
Subject: CN=a2cfb8e5d5b5c9caec409b7d32ac352921586c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:53:39:2e:50:d4:3f:85:68:ed:24:11:0e:16:
be:86:9d:bb:d0:1f:93:2a:e2:50:d2:2c:8b:5c:e7:
48:7f:75:ec:a6:a0:9b:c1:0f:39:e8:fe:63:bc:4f:
98:a8:6a:81:d4:c8:ed:15:c6:b1:dd:be:57:85:0a:
35:9d:b8:f5:99:62:7b:4d:ad:e3:3b:ac:5b:07:06:
68:6c:aa:fc:ca:76:14:1f:e0:31:1c:29:9e:31:74:
65:f8:63:da:45:d0:65:0c:76:45:29:6b:f4:f2:fe:
f0:87:40:ee:8d:0f:6e:33:0d:b3:7b:91:15:dd:7e:
c0:3a:f0:74:ea:0a:cf:51:ec:88:11:27:01:64:10:
72:73:bd:c5:46:e7:d7:76:35:cb:5b:a1:e0:12:3a:
41:b1:09:85:41:7f:50:cd:a4:49:83:e2:47:12:e8:
f2:34:1a:a2:8d:f9:73:4f:1b:21:bc:6d:70:22:33:
81:9b:85:92:cb:11:c7:de:09:db:7d:65:e8:8b:72:
02:c6:21:8a:89:12:79:41:5a:21:c8:74:21:55:3a:
af:5b:53:ce:8f:da:7e:d0:76:cb:75:6a:cf:56:4d:
b5:60:1f:fe:3e:7b:d7:c4:f0:ab:ee:3c:6a:8b:c7:
3c:a3:80:7d:ca:a2:16:fd:62:77:8a:97:0b:1d:b9:
0c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CF:B8:E5:D5:B5:C9:CA:EC:40:9B:7D:32:AC:35:29:21:58:6C:7A
X509v3 Authority Key Identifier:
keyid:64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ab:e9:2a:82:11:00:a1:93:ee:96:d6:f5:06:91:2c:6f:f4:
c3:e2:bd:f1:1d:4b:2b:a1:c3:b4:68:69:a2:5e:f0:c1:21:6c:
32:52:5d:2f:06:00:09:79:90:bd:55:af:15:e9:83:70:c2:61:
53:a6:39:bb:8a:cb:98:5a:4c:80:91:99:5a:96:30:d0:c9:d2:
5b:c5:8f:e6:ba:85:2b:d0:53:17:3f:b0:a3:1c:fa:8c:fd:35:
21:29:5f:90:15:76:2d:6b:1e:d7:4f:24:fc:ba:31:4c:57:e7:
44:87:19:4f:aa:d8:7a:25:9f:74:1d:cb:53:e6:97:a5:11:e9:
81:4b:e7:67:5d:75:2f:ef:a8:f7:52:a8:79:31:37:57:e0:80:
1e:12:0e:79:57:ae:26:eb:f6:e1:c9:ed:71:79:51:68:4c:12:
47:8a:d0:3e:ae:0b:9a:a4:47:db:d8:2c:2e:8a:58:b9:f3:bf:
69:52:e3:b2:e1:d2:db:70:61:25:75:9f:49:56:7b:e3:f3:cb:
83:d6:ee:66:52:a1:6a:ba:d2:32:f4:86:1d:c4:50:c1:62:8b:
34:e6:e0:1a:54:fb:4a:74:89:b0:06:94:de:1d:74:40:27:cb:
b7:fb:b0:99:7c:27:ef:a2:73:a3:74:a7:50:dc:42:22:74:4e:
da:0c:e2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:34 2026 by rpki-client