Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
File: Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft (raw, json)
Hash identifier: xemlKKZiKlSDI4U/kSpMz7GX/mmz2StqQxL6cAcWJOc=
Subject key identifier: 61:30:66:69:15:A7:57:76:19:F1:E6:03:5F:C0:03:FF:8B:04:5B:03
Authority key identifier: 65:CD:78:03:F4:1F:E4:99:E8:00:66:4E:0A:AC:AD:EE:19:B6:6D:9D
Certificate issuer: /CN=65cd7803f41fe499e800664e0aacadee19b66d9d
Certificate serial: 019CAAFD738F0BA2BC93866AE64F141E2D6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 20:01:02 +0000
Manifest this update: Sun 01 Mar 2026 20:01:02 +0000
Manifest next update: Mon 02 Mar 2026 20:01:02 +0000
Files and hashes: 1: Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl (hash: o7TD3huCGsXiOwqscYyN3oz7vVMNTLUgVF5lkMcvW+A=)
2: cTl1BoIjoBM0xgKkijgr095D4yM.roa (hash: DZztADygEBvCauPefXUXIG2C159CdAX09TCUW+E8dVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:73:8f:0b:a2:bc:93:86:6a:e6:4f:14:1e:2d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cd7803f41fe499e800664e0aacadee19b66d9d
Validity
Not Before: Mar 1 20:01:02 2026 GMT
Not After : Mar 2 20:01:02 2026 GMT
Subject: CN=6130666915a7577619f1e6035fc003ff8b045b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:07:82:bf:24:5e:da:fb:9b:e3:d4:b5:c5:30:
a2:7a:17:f5:22:ee:12:e0:b1:0e:9b:5a:98:cb:fe:
79:88:a9:45:c6:7e:5b:c0:1d:32:2f:05:a7:f2:ec:
14:21:1a:78:ba:a1:7d:e2:ac:cb:04:f6:cc:99:6a:
35:8d:7f:93:79:94:df:72:29:e4:81:c6:90:98:5d:
e6:cf:cb:06:93:a2:9a:ee:e6:ff:20:45:29:33:c3:
ff:16:80:6b:97:47:35:ca:d1:3d:33:c1:4b:e3:6a:
ca:44:bb:d6:dd:bf:ac:3c:1c:0d:b5:4f:8d:b3:69:
06:09:36:d9:0f:70:e6:7b:a5:e0:5c:fd:23:8f:d9:
a7:b4:d8:27:36:94:39:c5:75:d3:5f:15:ba:fc:d6:
97:bc:7c:29:7e:1b:67:50:2d:d4:db:3d:5f:ed:bd:
fc:6a:17:bd:bd:6e:9c:74:70:46:eb:40:d6:2b:38:
a9:20:5a:d9:e1:a5:b5:ef:6c:d8:a3:d7:3b:15:fd:
4b:1d:ad:27:a3:49:b1:91:56:39:28:ef:80:3f:46:
76:f2:69:4c:ba:9c:e8:a9:cb:47:31:65:09:61:e1:
57:fd:dc:61:60:5c:81:67:24:5e:24:00:f6:04:76:
59:46:38:9f:2c:7a:47:d1:06:d7:10:5c:38:17:11:
72:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:30:66:69:15:A7:57:76:19:F1:E6:03:5F:C0:03:FF:8B:04:5B:03
X509v3 Authority Key Identifier:
keyid:65:CD:78:03:F4:1F:E4:99:E8:00:66:4E:0A:AC:AD:EE:19:B6:6D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:85:2a:40:27:ea:9e:ef:40:2a:ab:f4:72:09:91:73:b8:b2:
fd:d0:e1:44:8f:be:ce:57:7d:1a:06:1a:11:0a:79:73:e7:d5:
aa:52:b1:14:54:ee:9e:a1:b8:01:9f:8d:9e:58:83:c0:8e:ff:
83:02:b0:7a:91:2b:64:5d:b9:fa:81:0c:35:5b:a6:2f:45:e8:
70:06:30:14:35:9a:5d:01:d3:a2:57:dd:82:df:0b:e9:ad:dc:
86:c6:29:1a:8c:dc:0d:27:4c:0a:f9:f6:10:b1:4f:0c:b7:c7:
c0:39:c4:cd:76:41:d3:bf:4c:45:0e:47:12:9f:b0:04:13:6e:
da:6f:d6:83:be:4d:08:2e:5d:fe:e7:ed:a5:db:95:8c:d4:12:
50:e0:d6:ca:00:7f:dc:dc:13:9f:d8:63:03:d0:0d:f7:dc:c0:
ae:cf:04:e6:7f:bd:49:b4:98:08:9f:55:b5:b4:ae:42:54:4b:
f3:2a:19:f0:d3:cd:9c:1e:42:e9:bf:02:e4:ad:4f:c0:ac:01:
66:05:f3:53:89:d9:3f:40:bb:7d:22:d1:c1:fc:26:a8:65:ea:
33:bf:3a:e0:5a:9e:bf:15:06:24:2e:ef:43:5b:66:73:24:b1:
12:1e:2b:bb:7e:4c:8f:1a:6b:65:ce:e0:1d:c9:7b:4b:a5:03:
ce:3f:39:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:40:05 2026 by rpki-client