Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
File: zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft (raw, json)
Hash identifier: gqEbkuldcdBMt8BrPXZPhiThdDkYX+zCBS/jm2LrbGo=
Subject key identifier: A7:D8:15:62:5B:AE:E5:FB:6E:A4:44:CD:E3:B1:4A:CB:A5:43:27:91
Authority key identifier: CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3
Certificate issuer: /CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3
Certificate serial: 019CACB5918AE9302F35E0DA8A88CF3130FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
Manifest number: 1842
Signing time: Mon 02 Mar 2026 04:01:46 +0000
Manifest this update: Mon 02 Mar 2026 04:01:46 +0000
Manifest next update: Tue 03 Mar 2026 04:01:46 +0000
Files and hashes: 1: GnEvIAlaB-UByoYHOt2F_BVdPQE.roa (hash: fX8z3h8g/jt3tVZ0Hy99MVng9ZbtXgnxN+T6t3Ums8A=)
2: zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl (hash: B9bWQ3Hib8oIbY/UbThxPtu+eTLtDBEN/6eDADP+iXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:91:8a:e9:30:2f:35:e0:da:8a:88:cf:31:30:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3
Validity
Not Before: Mar 2 04:01:46 2026 GMT
Not After : Mar 3 04:01:46 2026 GMT
Subject: CN=a7d815625baee5fb6ea444cde3b14acba5432791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d2:3c:f6:61:75:70:64:cd:ee:0c:e2:42:39:
b6:05:57:db:1b:70:62:70:89:0e:b9:29:6c:d2:bd:
41:5c:d4:92:1e:e4:76:36:98:22:bd:3b:c7:cc:1c:
83:ed:28:af:9f:e2:a3:74:b8:f5:9c:a0:17:4d:c2:
e0:fe:fd:ed:6a:4d:4c:9e:0d:e8:d0:c9:76:8b:99:
4e:27:cb:82:3d:d0:07:bf:21:dd:ab:44:38:08:60:
57:e1:bd:b4:29:35:4e:cf:45:27:e1:cf:3d:ed:3c:
b5:d2:f8:11:3e:a8:84:c1:f8:4f:e4:fe:fc:88:91:
80:98:8d:83:01:c6:a8:9e:7a:b3:3d:d9:2e:20:c6:
34:0b:33:22:89:ee:bd:54:21:29:d9:c0:8a:3e:0a:
a7:a0:0d:9c:e4:0f:ec:fb:52:74:5e:92:44:da:f7:
a7:a1:8b:11:16:9f:c7:90:79:8e:bb:58:39:ee:cc:
c9:8d:5d:c3:60:f3:5e:ea:2e:28:85:29:d9:80:d7:
1d:86:ed:55:db:31:d1:34:8c:a1:fb:85:2b:81:90:
20:78:e8:d7:76:5b:ee:8d:03:39:bc:c0:34:fc:87:
e6:8c:54:e2:b8:0e:35:d4:c7:89:03:10:20:16:8d:
62:3e:1e:26:31:b6:af:7a:b6:0f:a5:06:b3:68:b0:
59:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D8:15:62:5B:AE:E5:FB:6E:A4:44:CD:E3:B1:4A:CB:A5:43:27:91
X509v3 Authority Key Identifier:
keyid:CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d6:c3:a8:b5:67:1a:22:1a:a3:ba:62:fc:f4:71:34:2e:31:
aa:8c:20:f1:32:34:b9:ce:6b:47:ce:e2:4d:fd:ef:fa:9b:00:
9c:0b:07:a8:fa:89:ae:fd:d0:87:a6:2b:aa:9d:d1:23:32:2a:
56:7f:97:f4:76:4b:be:70:c9:e9:fa:e1:f5:bc:57:79:dc:de:
ee:eb:8f:4a:be:c0:3c:dd:61:dd:0a:6f:3d:98:47:a7:28:ef:
c1:64:98:08:8d:22:e2:53:51:7c:98:e3:a2:ef:89:03:e3:16:
da:92:77:38:dc:93:c6:cf:34:76:85:0c:4b:28:5d:4e:5a:aa:
52:67:e0:78:2f:a7:b8:d6:b6:77:2b:80:4a:db:ab:3a:e9:05:
a3:b3:ae:07:71:43:f0:b5:ca:76:4c:3e:e1:0d:a0:90:fe:06:
e6:e9:09:17:02:62:01:e8:f9:de:65:e5:d2:30:ff:7f:3a:31:
04:4a:ba:14:64:86:02:e9:9b:df:e9:71:ea:f4:a9:cd:8b:b0:
53:9c:e0:53:e4:96:70:8b:af:1f:d3:45:e6:8b:c6:2c:4c:a8:
46:bf:66:a1:97:e3:9c:8a:de:fb:42:da:8d:05:78:dc:4f:aa:
9c:a3:af:f7:d4:b5:ed:d4:c0:a3:84:4a:1e:97:24:1f:06:30:
d8:c9:3f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:17 2026 by rpki-client