Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
File: zkyvauzIwxB7S3EXTrKZdOD9hVs.mft (raw, json)
Hash identifier: jPfO5k9AMWjxohrO9D2gz1nzu9zwAcSKmKi0k2Rwu+Y=
Subject key identifier: 87:9F:26:DE:4E:01:2F:48:E4:0D:2D:10:5B:56:B5:C7:2F:54:B9:26
Authority key identifier: CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
Certificate issuer: /CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Certificate serial: 019CA9EB4DCBB3C65FC8351ED0C1ECAC14C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 15:01:36 +0000
Manifest this update: Sun 01 Mar 2026 15:01:36 +0000
Manifest next update: Mon 02 Mar 2026 15:01:36 +0000
Files and hashes: 1: 89g7xKjcRoLf08YN30kAkWgPW80.roa (hash: P8X4WuWL6NisJbBQ/NNr4p37Mppw9OurR9kU3npYcKM=)
2: zkyvauzIwxB7S3EXTrKZdOD9hVs.crl (hash: ZM0qX7Q2+HiqP2D8eJu2yqzc8YXR5pMZQ34OMRvEaNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:4d:cb:b3:c6:5f:c8:35:1e:d0:c1:ec:ac:14:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Validity
Not Before: Mar 1 15:01:36 2026 GMT
Not After : Mar 2 15:01:36 2026 GMT
Subject: CN=879f26de4e012f48e40d2d105b56b5c72f54b926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:59:c1:b3:89:d8:91:95:96:d8:93:dd:66:38:
42:5d:71:55:1c:c4:4e:c6:96:ac:d8:5e:cf:60:6f:
a5:76:11:e1:f9:e1:e1:95:13:09:93:ea:42:2c:57:
af:4e:db:d3:29:ce:e5:92:6b:d1:54:6c:b3:d3:01:
1c:28:ba:45:8b:22:ef:25:ad:33:2c:59:a1:d7:3f:
0b:13:b5:0a:f5:15:69:c1:20:87:3d:fa:8a:12:42:
4b:a9:cd:7c:5c:bf:b2:2a:99:7c:fc:e0:ca:ab:6a:
43:95:bb:88:45:dc:6a:8a:0b:2b:17:70:81:af:02:
e9:ce:e4:d6:a8:03:66:de:1d:ad:a1:81:52:d4:aa:
a1:54:22:95:1f:f1:9e:f0:b4:de:7c:8b:48:19:1c:
f7:4c:86:6f:00:fe:c2:2a:cf:69:35:88:48:aa:e4:
d7:80:17:cb:55:69:db:b0:03:ce:6f:97:96:25:6c:
53:bc:06:df:d8:4c:08:6d:ca:68:45:f9:d1:ed:8c:
c7:6b:0a:9a:3e:8c:82:ce:4d:40:fd:43:2a:95:0f:
4f:59:08:0f:11:10:c5:16:29:5e:1f:60:18:c7:b7:
d0:bc:7c:70:16:27:82:f2:6b:bd:55:b5:31:66:26:
50:c6:c4:d4:55:0f:ed:b9:ec:75:03:d0:0b:6f:47:
e5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9F:26:DE:4E:01:2F:48:E4:0D:2D:10:5B:56:B5:C7:2F:54:B9:26
X509v3 Authority Key Identifier:
keyid:CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:da:37:60:79:0f:7e:79:ed:32:c1:3a:e1:d9:d1:43:0c:94:
40:16:5f:f2:ea:b7:73:a9:1d:60:29:ba:35:5d:91:b1:ed:67:
23:1d:6b:65:76:a6:20:bf:9f:21:b2:f2:a4:e6:c7:88:a0:62:
bf:9d:2f:16:7f:38:49:0e:52:d1:f8:51:f2:99:41:71:25:ee:
1e:6b:c8:85:d5:fd:08:7e:d9:95:9f:9d:38:63:89:78:b6:4b:
de:54:65:e1:e3:62:68:db:23:66:c3:5a:c1:89:ec:b7:dd:6f:
06:f3:46:4e:9f:77:28:bc:b4:9f:59:50:c5:51:c7:57:aa:35:
c4:45:6c:21:30:85:6e:f4:74:79:87:37:18:3f:09:ae:d6:c9:
5e:5d:d8:e4:a5:1a:fc:b4:d9:ff:99:7d:83:71:43:03:ee:94:
17:b6:78:aa:79:01:b0:62:e0:c9:20:2b:9a:9b:44:49:65:85:
1e:e8:3c:43:8a:df:7b:15:8c:49:73:31:9c:b1:fb:4c:d0:46:
e1:69:9a:60:ee:30:9c:2d:b4:f5:89:bb:28:56:a2:cb:a9:35:
ec:42:58:cb:de:66:d4:86:90:aa:57:e8:c3:06:ea:21:27:f3:
91:5c:aa:12:d2:84:0b:d8:db:94:25:14:d6:c0:be:35:d4:46:
17:89:d2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:12 2026 by rpki-client