Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
File: zDnmvkDYASiJbM0TH2WlWtmKQK8.mft (raw, json)
Hash identifier: /NKxKq+khpnYLqW2raF3W1rlMz2fnUVfRcPbtKDDjF8=
Subject key identifier: 9E:64:BC:DA:71:1D:90:4B:A7:9C:DF:F5:E9:A8:1B:DE:15:E4:DC:8F
Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Certificate serial: 019CAB34516F5F4EF94EB7AD2987AD8F6DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:00:58 +0000
Manifest this update: Sun 01 Mar 2026 21:00:58 +0000
Manifest next update: Mon 02 Mar 2026 21:00:58 +0000
Files and hashes: 1: h8MAjW2nwR1TuDpY3gaR4GIp5Is.roa (hash: YMOvJ9hakU4xTrKD5f+aHfr6VChVy5zYjPbZPORV+p4=)
2: hq6cHZZmfTc8iDuXctwL9j8vYGA.roa (hash: gnwIM65nm0H3pqLfxC4cpwXQNNz6WAkiHxWYF953SRw=)
3: zDnmvkDYASiJbM0TH2WlWtmKQK8.crl (hash: 5eR/Ln+xAr8PBpSEJvoELzNlVk0/BRIM4dq1+HMlKME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:51:6f:5f:4e:f9:4e:b7:ad:29:87:ad:8f:6d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Validity
Not Before: Mar 1 21:00:58 2026 GMT
Not After : Mar 2 21:00:58 2026 GMT
Subject: CN=9e64bcda711d904ba79cdff5e9a81bde15e4dc8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:c8:08:f6:0c:18:89:d2:fb:57:f9:41:c5:
76:0e:90:9a:66:fb:85:3e:22:16:c1:76:5a:11:05:
4d:58:a5:85:5b:27:ac:13:0a:5a:22:21:4a:45:77:
3d:7d:15:41:3d:2e:7a:e3:fc:9f:a9:13:f8:f9:60:
52:e2:f9:36:d7:ce:ed:58:e5:a1:f1:07:42:f9:79:
62:a1:22:7f:b9:57:29:01:66:71:83:a6:2b:41:b4:
8b:8e:50:cc:41:b2:9f:6a:2b:66:a1:06:71:5d:95:
da:3d:f1:66:d7:a5:50:aa:05:32:95:be:18:ca:73:
83:0f:bb:c3:5a:87:51:19:57:60:8b:cc:c8:28:48:
db:5b:ac:e9:3c:5f:bc:e3:65:02:08:18:f6:26:07:
e8:e9:14:b9:4c:80:78:a9:e6:9c:b3:d4:29:89:27:
3d:72:ac:97:27:c5:76:07:84:e5:2c:b3:35:38:31:
8e:ad:dc:5c:06:4e:08:f9:7e:26:a9:e8:f8:27:8a:
f6:5c:47:86:0e:12:67:86:21:3c:4c:0e:f9:dc:13:
a0:c6:1e:69:01:b7:b0:29:f2:39:98:6d:f9:3b:a3:
5e:ce:5f:06:1c:23:a8:7a:ed:c1:df:03:24:7a:65:
c0:01:b0:c1:0d:00:03:22:82:5b:ab:97:4d:9a:98:
52:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:64:BC:DA:71:1D:90:4B:A7:9C:DF:F5:E9:A8:1B:DE:15:E4:DC:8F
X509v3 Authority Key Identifier:
keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:22:9c:86:3d:dc:0a:93:10:ff:6b:72:96:f9:b4:2f:0f:87:
ce:3b:05:6e:0b:ed:50:2a:c2:fb:89:b7:d8:97:2d:8f:46:df:
ac:de:a8:f5:a8:a9:a6:42:95:cb:a1:13:14:39:e6:d8:1b:6d:
0a:6c:6e:3e:7f:59:9f:15:32:b4:b5:08:e0:19:7b:22:25:6f:
09:1f:6d:7d:62:e1:9e:4f:b8:c1:d0:71:3c:de:4b:c7:52:29:
52:b3:31:c0:1e:c3:13:62:7d:2a:14:20:28:f3:dd:73:06:d7:
a3:03:cc:47:20:ba:9b:57:0d:65:07:ff:58:c9:c6:62:65:ae:
c7:63:07:b4:ff:ca:01:7c:39:5d:e6:f5:76:54:86:77:35:40:
af:5c:3f:f9:dd:7a:41:88:80:5c:11:bf:32:01:1f:ab:4e:a1:
50:9d:50:2d:b5:49:7b:54:35:4b:c0:24:4d:83:61:29:1b:ad:
6c:da:9b:2c:39:7c:aa:78:96:4b:87:37:b2:3b:8e:bd:55:11:
26:b1:80:9d:5b:f9:27:92:34:e9:e8:08:da:d2:a7:48:0f:74:
26:ba:ac:80:5f:60:fe:43:a6:8a:db:d0:d4:15:f3:2b:80:27:
34:a1:a1:68:16:6e:22:2a:46:61:92:12:d8:71:c0:a6:26:27:
5f:18:ff:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:04 2026 by rpki-client