Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
File: zsY7h6iuwJPb5H3MqShg6oQSKOA.mft (raw, json)
Hash identifier: Qxnt7ZQl24vg3I5IK+hpDPucrdpYaAJBcrgZB2++fCQ=
Subject key identifier: 92:85:00:EA:20:43:70:E6:95:92:E5:E0:BC:F2:E4:AA:1F:AE:FB:7C
Authority key identifier: CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0
Certificate issuer: /CN=cec63b87a8aec093dbe47dcca92860ea841228e0
Certificate serial: 019CABDA0916143804F8E2C647E70B786339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
Manifest number: 0D4F
Signing time: Mon 02 Mar 2026 00:01:58 +0000
Manifest this update: Mon 02 Mar 2026 00:01:58 +0000
Manifest next update: Tue 03 Mar 2026 00:01:58 +0000
Files and hashes: 1: hl2ItpSJbgNc8RoWoL4bCpNDXxw.roa (hash: ThfYHLL+zFBLeQn7rt4aKrE2rh3ZM5jimecJ6acAoR4=)
2: zsY7h6iuwJPb5H3MqShg6oQSKOA.crl (hash: 9T+Yz6VHa4wzanBnXa2JA8ILT8Gj3VufWL+UBrBypLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:09:16:14:38:04:f8:e2:c6:47:e7:0b:78:63:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec63b87a8aec093dbe47dcca92860ea841228e0
Validity
Not Before: Mar 2 00:01:58 2026 GMT
Not After : Mar 3 00:01:58 2026 GMT
Subject: CN=928500ea204370e69592e5e0bcf2e4aa1faefb7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fd:f8:1b:59:cd:ed:fa:cd:66:a0:2a:7c:cb:
94:9b:db:0b:0c:68:bc:17:d1:de:08:42:6e:0b:8d:
c6:f9:c3:a0:ac:bd:f9:c4:5b:a9:c0:24:0f:08:89:
8a:72:75:10:e5:f5:a7:dc:ca:1e:8e:b5:b5:d2:98:
29:3a:2d:ed:11:81:73:c4:0a:88:b8:3b:f0:62:ca:
9a:bd:0b:74:54:50:99:1e:79:1c:20:30:69:8b:c6:
c5:d2:4e:ed:0e:e5:59:80:11:02:84:43:e6:fd:fe:
34:8d:8d:61:29:23:31:d7:43:0d:2f:ae:e8:49:66:
5f:02:2b:f1:28:96:a1:21:39:35:6a:d0:7b:be:2d:
ce:42:60:62:82:ef:3a:31:38:72:c8:20:28:d5:29:
3a:7d:64:58:a6:9e:e0:05:e8:bf:6e:c2:98:40:e1:
b1:c8:91:dc:8f:67:27:d0:05:43:9c:b6:37:ee:44:
3e:e8:72:b4:0a:c9:6f:3e:57:5b:a3:0d:c7:e2:9c:
0d:61:b1:de:01:2d:19:4b:52:a8:33:9c:f7:81:6b:
0b:96:d5:5f:02:67:2f:c1:03:8b:fc:44:25:fc:86:
de:10:33:f7:81:19:5c:48:1d:06:92:01:ce:05:9f:
17:3c:34:60:0a:c6:3d:bb:4a:39:50:6f:f2:e1:6c:
19:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:85:00:EA:20:43:70:E6:95:92:E5:E0:BC:F2:E4:AA:1F:AE:FB:7C
X509v3 Authority Key Identifier:
keyid:CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a5:50:17:49:c2:fb:42:fa:41:e9:a0:da:b2:b1:a7:b6:a7:
3d:3f:9e:f3:7b:76:ca:d6:86:54:1a:ba:7e:d8:52:51:23:5d:
42:90:6b:d1:0c:a2:aa:d3:5b:15:f0:5b:02:57:c1:5a:c1:76:
c8:2b:67:45:2a:a6:32:92:5e:2b:5d:0f:00:39:c5:40:36:f8:
2d:9b:00:2f:ec:9c:48:c8:9e:5a:c6:86:ce:c0:9e:d5:d5:34:
3d:32:e9:23:a0:2a:8f:e0:e1:45:e3:5b:77:d9:8c:d4:5e:06:
dc:30:0b:65:f8:6b:54:62:3d:86:09:95:92:07:d5:ce:c9:f4:
c5:b9:a3:4e:de:57:13:85:8c:9c:11:18:d5:fd:74:66:e4:b6:
29:a6:5f:78:ce:29:06:34:52:36:e4:c6:ed:47:f8:a9:80:03:
5a:2c:b6:4f:14:7d:63:b3:73:e1:ae:63:c8:65:36:22:63:84:
77:9e:3d:35:22:8f:7e:95:90:d7:75:3a:36:89:6d:f6:66:3d:
0e:ba:61:49:55:06:a8:f6:6c:c7:ef:70:15:57:e3:64:96:ba:
30:60:cd:97:8f:0c:11:ae:6d:a2:cc:9e:8a:a4:ce:2e:a2:8b:
79:d5:38:12:62:05:22:b7:90:d7:7a:c0:9e:4e:36:d2:42:b4:
84:40:77:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:29 2026 by rpki-client