Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
File: zhIoo6PQBlTUsRFzOHTjHYDAogw.mft (raw, json)
Hash identifier: FnMlaoVWB5lLR4YDH0kH/Jl+G3sPlBe08C7KkMxNvmg=
Subject key identifier: 55:62:D0:BF:45:0D:6C:59:DC:A1:E0:2D:63:64:4F:6C:6F:2A:43:A5
Authority key identifier: CE:12:28:A3:A3:D0:06:54:D4:B1:11:73:38:74:E3:1D:80:C0:A2:0C
Certificate issuer: /CN=ce1228a3a3d00654d4b111733874e31d80c0a20c
Certificate serial: 019CAF1119B72358D9248BD1DDC5CFFA3DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
Manifest number: 03C0
Signing time: Mon 02 Mar 2026 15:00:59 +0000
Manifest this update: Mon 02 Mar 2026 15:00:59 +0000
Manifest next update: Tue 03 Mar 2026 15:00:59 +0000
Files and hashes: 1: 1-kOi4nefmaukalzSye5kdhLHwjg.roa (hash: 0aXXszrWV6/bhcESEiK3I+iPJll6E210hDJhUqm+acY=)
2: zhIoo6PQBlTUsRFzOHTjHYDAogw.crl (hash: 1TZICRQ5TrE62yJ0Itwar9olciJ9aGYf9fms8IzsDI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:19:b7:23:58:d9:24:8b:d1:dd:c5:cf:fa:3d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce1228a3a3d00654d4b111733874e31d80c0a20c
Validity
Not Before: Mar 2 15:00:59 2026 GMT
Not After : Mar 3 15:00:59 2026 GMT
Subject: CN=5562d0bf450d6c59dca1e02d63644f6c6f2a43a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:81:3f:ba:25:5d:98:c2:1a:1f:da:c3:08:5f:
82:3f:a4:62:d6:d9:b6:d9:64:d8:29:c4:21:89:d1:
97:9d:73:fd:d5:23:65:b2:c7:87:bf:e2:d5:c8:42:
85:0f:09:f5:67:53:ce:42:c7:40:97:54:23:6e:cf:
43:da:f0:9b:a2:ee:06:8c:f9:58:b0:1c:4c:00:10:
db:ae:21:7b:12:e4:2b:a0:e8:26:6f:85:a4:c8:73:
85:24:ea:da:4b:6b:c4:75:30:6b:c6:03:f9:9c:ed:
a6:99:2a:38:73:71:89:00:ac:c1:75:5b:d1:5a:95:
35:62:a5:17:a6:02:20:66:a1:74:c4:2d:f3:8a:3e:
e4:eb:fc:04:0e:e0:b5:75:78:e8:83:40:29:1f:ad:
1d:db:b8:2a:ca:79:59:4d:0d:8d:32:94:39:8d:d4:
dd:30:70:c0:79:7c:e7:8b:92:0d:8e:ae:f9:48:30:
2e:2a:1b:ed:00:9a:52:bd:b1:02:4f:57:96:5a:96:
04:61:30:70:8f:d2:60:c3:f6:99:13:dd:87:ae:e6:
9a:59:bc:f8:35:42:26:1f:8d:87:8e:0e:15:66:26:
a6:ae:77:e0:4b:e3:dd:58:73:80:93:1c:55:b5:d9:
22:eb:57:93:03:63:64:f2:69:b4:ac:34:0d:53:15:
58:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:62:D0:BF:45:0D:6C:59:DC:A1:E0:2D:63:64:4F:6C:6F:2A:43:A5
X509v3 Authority Key Identifier:
keyid:CE:12:28:A3:A3:D0:06:54:D4:B1:11:73:38:74:E3:1D:80:C0:A2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:10:92:79:d6:14:92:53:d6:9f:01:e1:7a:ff:24:a6:49:7d:
66:30:1f:9f:5b:f0:be:0b:b4:a6:45:74:08:db:98:a1:56:8f:
c7:84:64:e7:36:5e:aa:61:96:b2:48:d4:86:c6:32:7f:fa:f1:
c6:f1:b4:ec:d3:24:65:92:f9:08:8e:44:c6:8b:61:80:a6:92:
22:fc:fc:1a:ab:97:b3:5b:cd:22:3c:50:58:01:a8:86:52:c2:
e1:bc:3a:6e:80:7c:5f:f7:e4:a9:e7:bb:0d:36:0c:04:78:2b:
d2:de:e2:a9:cc:eb:10:2e:0d:97:4e:3d:20:a2:6f:6c:f6:08:
3b:fa:ee:a8:a5:df:2b:5f:c5:36:e7:cf:f4:de:46:96:a1:9d:
8b:6a:79:c8:62:a6:17:fe:28:e1:d8:4e:23:db:af:03:bb:7b:
bb:4b:b3:61:fe:61:ab:27:02:3a:0c:83:b0:f7:9e:32:8e:2b:
3d:e9:27:6a:84:f7:a7:00:4b:cf:03:de:87:7d:f7:f3:78:8f:
36:06:33:49:6e:31:88:a1:f3:c0:6d:c5:2d:20:7d:04:dc:c6:
0b:13:2d:20:c2:81:ec:0f:36:96:ba:e8:7f:22:13:44:93:76:
73:a0:06:76:87:ec:68:da:2f:8e:80:73:7c:f7:00:8f:28:e3:
c0:35:8c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:36:04 2026 by rpki-client