Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
File: zEDZYkKwgu_ltPIliCCzBZOWGY0.mft (raw, json)
Hash identifier: PYosyWFj/Zx9LCrEOjkdY/LnhipRfdvKL+KMvuZX6rk=
Subject key identifier: 09:7C:5F:43:D2:41:B1:80:55:0C:8C:3F:FB:90:78:E7:0C:58:6A:CA
Authority key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
Certificate issuer: /CN=cc40d96242b082efe5b4f2258820b3059396198d
Certificate serial: 019CAB3479C9859495AAC58063AF951B9B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:01:08 +0000
Manifest this update: Sun 01 Mar 2026 21:01:08 +0000
Manifest next update: Mon 02 Mar 2026 21:01:08 +0000
Files and hashes: 1: 98fyEBb-PIBiroCj51bzkd-V_i4.roa (hash: 2RN0v3XP/euGb82/ECdLfjWteqkCXDXBbJynvO0cBWE=)
2: y97Q2cCIA4p_jfA1RbOfelZQKOo.roa (hash: oRmoVnYM94QBjpHDaFRFV+BA4jZYdHdlmrs4oEppUqA=)
3: zEDZYkKwgu_ltPIliCCzBZOWGY0.crl (hash: wxP8pBqqF+O/5j8WrtbJQHKB2QyLq1gUKV6a3HFHwyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:79:c9:85:94:95:aa:c5:80:63:af:95:1b:9b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc40d96242b082efe5b4f2258820b3059396198d
Validity
Not Before: Mar 1 21:01:08 2026 GMT
Not After : Mar 2 21:01:08 2026 GMT
Subject: CN=097c5f43d241b180550c8c3ffb9078e70c586aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f5:18:6a:c5:a5:7e:76:c4:38:f9:54:25:09:
92:9b:f6:b8:57:fb:f7:c9:83:eb:2a:68:f2:19:b4:
ee:4f:c1:0e:78:34:39:e1:4d:39:61:d7:30:7f:28:
12:be:f5:10:b1:e0:1f:c7:0e:66:8c:2f:bb:64:8e:
96:48:b3:e1:f2:10:d4:e2:1c:24:88:98:d7:55:58:
b2:ce:45:22:98:6a:c0:ba:93:0e:f9:5d:5d:44:da:
72:54:bd:b9:9b:ad:7f:11:8a:db:aa:0e:44:37:e4:
95:27:67:00:74:fc:05:bd:7f:bf:f9:a5:de:c0:da:
c6:1f:93:19:8c:06:05:7f:15:55:af:b3:c9:8d:52:
d2:6d:3f:c6:3e:72:23:44:9b:41:1a:aa:c4:d9:39:
49:95:11:c7:ec:6e:68:11:f3:34:3f:51:06:18:68:
53:9a:a9:62:4e:96:d3:5a:5c:4b:ce:0c:f1:32:7a:
18:d0:04:23:be:3f:3a:d5:53:40:3f:6c:54:41:b1:
9b:a7:fb:a7:32:03:80:bc:b1:8b:d2:63:e7:c7:1e:
d2:48:db:e6:e3:23:a2:71:c0:25:8f:ff:63:9f:83:
8d:13:63:ad:54:d3:1f:ee:71:6c:57:75:04:c6:df:
bd:88:f9:ca:be:86:c4:42:a3:37:f9:2e:87:14:d3:
7e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7C:5F:43:D2:41:B1:80:55:0C:8C:3F:FB:90:78:E7:0C:58:6A:CA
X509v3 Authority Key Identifier:
keyid:CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:75:90:92:2e:bd:31:0a:8e:75:cf:b3:ef:c5:cd:24:33:7e:
40:21:28:20:1c:b9:a3:39:45:04:f7:03:07:4f:e6:4a:67:de:
2e:a4:5f:e7:c0:43:6d:25:eb:a3:09:99:95:13:69:0e:1a:c5:
66:f0:a6:d7:c7:a2:cd:03:e8:76:e8:a6:f1:08:49:45:16:7d:
6a:2d:1b:d3:43:b5:85:be:2a:89:bd:24:f1:e4:fa:31:f3:fc:
70:6f:39:77:68:8e:08:aa:2d:6d:01:74:3f:2a:68:8b:69:71:
06:4b:39:b2:e9:88:b6:df:32:0f:b0:0b:55:e0:e2:b2:61:5e:
a1:46:1e:d9:b0:7c:5a:46:4a:7d:04:5e:d0:1c:ab:5e:9a:97:
b5:97:fb:4c:b6:b3:2f:9b:3e:b0:d8:fe:33:51:d6:6e:b1:70:
da:77:44:03:85:be:52:ed:cd:de:2b:81:17:3f:96:76:4d:e0:
0f:ff:40:87:0c:c8:bc:10:03:e9:cd:6c:ce:2c:ee:0a:02:d4:
00:b5:80:d3:a4:27:4d:89:39:89:f0:75:b2:c0:2f:3f:a0:fc:
d8:cf:75:2a:5c:5e:f3:bb:08:40:fd:25:2f:31:a1:a7:48:a9:
73:14:e6:fc:e0:72:06:4e:46:00:36:20:57:e4:95:54:10:64:
5e:2a:d2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:39 2026 by rpki-client