Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
File: zJd-nVKvvEd5nTl1_O6KxRygz2o.mft (raw, json)
Hash identifier: rT13mqyVECmBSZtUBab55HBGoB7MUe6O57CGXnCtF2s=
Subject key identifier: 71:04:54:5B:74:1C:C5:E7:B0:1F:B0:10:86:F7:BB:5B:4A:7B:3F:55
Authority key identifier: CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
Certificate issuer: /CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Certificate serial: 019CAAFCEC1A6FB57C8DC8EABBA6E6DDC54F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
Manifest number: 1719
Signing time: Sun 01 Mar 2026 20:00:27 +0000
Manifest this update: Sun 01 Mar 2026 20:00:27 +0000
Manifest next update: Mon 02 Mar 2026 20:00:27 +0000
Files and hashes: 1: Sq1CvQy8o0B9tgh2Xu1eMwRJZtk.roa (hash: HdfFsuae+bs6Px2O/nXidzw9nHeIbmVY360ACfcO/uA=)
2: apKWJZAqjwjRd0dehHbbTa9ZY3A.roa (hash: nVaIovGi66UncedynfpwyGBTPpXsXon+jV7FMQbYQEg=)
3: zJd-nVKvvEd5nTl1_O6KxRygz2o.crl (hash: I9MJwzDoi4c9XcJwEAXzjkmzAcdMhCvbZKHg68vgmN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:ec:1a:6f:b5:7c:8d:c8:ea:bb:a6:e6:dd:c5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Validity
Not Before: Mar 1 20:00:27 2026 GMT
Not After : Mar 2 20:00:27 2026 GMT
Subject: CN=7104545b741cc5e7b01fb01086f7bb5b4a7b3f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:62:bd:23:6b:b8:a5:c8:f4:1c:c1:31:f0:
eb:d5:c5:c0:e6:b6:e6:d2:d4:7b:9d:b7:b1:40:55:
77:e6:7c:28:9e:e0:45:27:51:3c:29:9e:f7:2f:27:
db:0f:f7:87:b5:21:e7:06:e4:66:0a:95:c1:95:f9:
36:ac:de:e5:54:d3:62:6f:c9:7e:a3:ff:b9:8d:33:
0c:49:b1:0a:06:8c:7e:c1:d5:9b:ff:d5:e5:a8:d5:
df:b2:84:f0:ce:50:3c:0d:25:70:69:91:f7:2a:d5:
4c:0a:0d:23:ef:fd:a5:6d:9d:bc:19:3c:8d:05:4a:
bd:5c:1e:1f:62:67:9a:6f:98:eb:e2:02:99:ac:9a:
60:57:69:bc:e1:c6:00:31:2c:fb:bc:3a:76:72:55:
0c:0d:91:ff:0f:48:dc:ac:94:78:e6:68:55:a5:80:
ff:df:6d:93:f2:85:f6:66:73:41:9e:01:3a:be:99:
a0:1f:f3:13:41:10:41:ca:62:d7:20:83:1e:ca:e8:
a4:11:53:80:ed:13:3c:94:e9:d9:c6:8d:71:af:ee:
bf:d6:c0:06:90:14:9f:de:8b:6b:09:96:0e:a3:78:
94:66:25:7b:a3:75:ad:87:45:94:fe:7e:9e:9d:f7:
ee:18:3c:25:de:78:96:46:cd:b5:e2:10:9e:28:b7:
0b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:04:54:5B:74:1C:C5:E7:B0:1F:B0:10:86:F7:BB:5B:4A:7B:3F:55
X509v3 Authority Key Identifier:
keyid:CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:9e:8b:09:3c:ec:18:0f:6c:78:cb:f0:65:f0:00:d2:b5:04:
4e:e8:41:b4:01:7f:1c:7c:fd:ad:ca:89:0c:ce:7b:08:db:6f:
65:39:c7:a0:e9:93:2c:31:37:3a:5b:96:01:96:3d:73:88:63:
d6:c9:f1:fc:ec:21:b6:9c:fe:63:06:12:44:2a:2e:4d:ef:8c:
72:68:47:aa:1a:5f:da:fe:dc:1a:39:37:88:57:f7:14:af:7c:
2b:7b:52:9d:a9:40:e7:3f:9a:fc:6b:98:fb:d0:9b:bb:3e:de:
44:92:10:17:1c:0f:da:75:3f:87:98:59:ed:40:3b:4c:e8:46:
a1:d4:94:59:73:6e:9e:b3:83:ea:83:e8:d5:10:68:04:1d:d5:
79:f1:a2:22:6a:c6:1c:ae:d9:f5:0e:44:7f:58:bd:b0:aa:a6:
04:74:60:35:ee:2e:44:7e:10:b9:e0:e9:ff:d8:cf:b7:65:2c:
ee:e6:c9:4d:88:63:92:78:a4:85:08:e9:8d:75:8f:67:36:cf:
e3:0f:ee:bd:a9:f8:64:2b:74:64:05:e3:94:e1:f1:03:28:90:
aa:72:62:41:1d:53:1e:8b:84:b4:9e:b2:06:4a:81:88:8b:d9:
41:0d:4b:48:60:f4:9a:d3:08:e3:b7:c2:e4:a7:00:18:da:c7:
10:f2:6c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:35:53 2026 by rpki-client