Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
File: M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft (raw, json)
Hash identifier: mz/ebvdxmIpPAUq5jEhgU5nqPSnD72gVF5z4xaMEiUM=
Subject key identifier: E1:F3:94:3A:09:2A:D0:75:66:BA:7B:8F:05:F7:4A:AA:1D:37:86:15
Authority key identifier: 33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93
Certificate issuer: /CN=33f650c0a0f16515a72dea601ce9ca2d4c164993
Certificate serial: 019CACEB9055DD08B5B4BE5A592C9FC19A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 05:00:44 +0000
Manifest this update: Mon 02 Mar 2026 05:00:44 +0000
Manifest next update: Tue 03 Mar 2026 05:00:44 +0000
Files and hashes: 1: 9_MYsPE4gd2lbb7TZYORycFaWd0.roa (hash: dw91LpI/SCTexr9LU7pGF2p5zGloMmSS6LWqMDLhx9U=)
2: M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl (hash: l4dW75nLiUP3p3A6LaZ+mfC29C7Xa/X21YtvABzyEdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:90:55:dd:08:b5:b4:be:5a:59:2c:9f:c1:9a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f650c0a0f16515a72dea601ce9ca2d4c164993
Validity
Not Before: Mar 2 05:00:44 2026 GMT
Not After : Mar 3 05:00:44 2026 GMT
Subject: CN=e1f3943a092ad07566ba7b8f05f74aaa1d378615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:27:9f:f9:dc:a4:a8:d6:51:ec:e0:8e:53:25:
06:81:65:5d:67:3b:d6:c3:22:4a:3d:ca:9f:e3:9b:
d5:a4:3c:ee:ec:36:ab:4b:23:4a:39:f2:63:9c:73:
16:95:0a:b0:83:b8:1d:a3:42:ea:83:72:fc:c7:98:
2f:47:bb:70:45:28:11:7e:44:3d:ec:14:0b:05:53:
df:b6:67:48:2a:28:ed:f9:24:a9:ef:6f:13:bb:95:
d2:b1:da:b3:19:2f:61:a1:81:7d:a9:ef:7f:73:9d:
07:cc:3e:cb:61:46:0e:c6:ca:9b:65:11:c5:7f:8f:
db:75:c8:e3:b6:0d:93:64:d7:e9:3f:d0:2e:f1:2b:
20:8f:da:6f:ee:43:ff:07:f1:61:e8:31:e5:ff:09:
34:2e:34:9c:63:c9:5d:13:d0:34:70:96:a1:08:44:
ed:c1:82:57:88:71:d3:c5:70:c2:40:6b:6f:c7:c1:
36:4a:7d:d5:d1:33:f2:3c:69:8a:90:cc:1b:e6:ea:
eb:38:41:8b:f2:da:6a:b4:ad:2c:eb:eb:82:64:1b:
22:af:d9:c7:25:03:02:81:62:98:27:ce:cf:bd:1f:
2e:65:32:22:34:2d:3b:7d:6e:22:c2:7e:2c:97:0f:
a9:1e:89:38:1f:ed:67:49:80:58:70:9e:57:d7:cd:
79:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F3:94:3A:09:2A:D0:75:66:BA:7B:8F:05:F7:4A:AA:1D:37:86:15
X509v3 Authority Key Identifier:
keyid:33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:46:df:80:2d:34:58:a8:ff:e3:42:45:2a:07:ea:21:7b:67:
6e:e6:34:df:b2:2d:cd:e3:05:92:6f:3a:5c:f4:d8:f2:c5:72:
2e:e8:b2:53:38:dc:5d:64:66:25:29:02:87:b8:a2:3d:ab:82:
33:39:30:fa:30:71:2a:88:9d:fa:2b:b4:97:f7:d5:64:94:d0:
9a:cf:54:62:2f:65:ab:72:2f:88:e0:8b:28:e4:09:5f:fd:dc:
00:9c:f0:d6:5e:fc:1a:06:01:f0:b1:b6:64:97:26:8d:0f:df:
d3:e2:68:fe:68:33:38:28:8f:c8:f2:b0:fa:7b:d8:a2:fd:90:
cf:95:a0:a5:ba:53:87:be:47:7c:b2:8d:fd:75:2b:61:9b:bf:
73:7f:30:f3:9a:c3:b5:74:ef:a0:a5:a9:5b:bb:62:aa:34:a4:
85:9d:62:d8:e0:ae:9d:a2:a7:0c:e3:29:d4:1e:f5:4a:5f:46:
3e:2c:ca:82:4d:b2:0c:50:1e:6e:03:28:8d:f2:93:b1:be:53:
4d:ee:3b:c1:b2:51:a3:75:3f:49:05:66:c4:d9:19:cd:17:00:
5a:11:78:11:e0:2e:87:33:9c:99:13:2b:6d:e9:9f:f3:56:0b:
fe:27:36:9a:dc:af:bd:d9:40:37:ae:48:bf:3f:c9:74:31:fe:
d9:73:c6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:08 2026 by rpki-client