Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
File: rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft (raw, json)
Hash identifier: z562hDTAxRByjO0VI0BsZBlM3XES7x1OC9G4cv0jK94=
Subject key identifier: 37:E2:2B:B6:08:CE:53:A0:62:BC:BA:74:52:C3:21:88:24:5D:72:11
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Certificate issuer: /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial: 019CAC46DDF2B7DD040B324207A3DB19C2AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
Manifest number: 151C
Signing time: Mon 02 Mar 2026 02:00:51 +0000
Manifest this update: Mon 02 Mar 2026 02:00:51 +0000
Manifest next update: Tue 03 Mar 2026 02:00:51 +0000
Files and hashes: 1: 4QHBn9ucdlKQY-OkJvc7Ig6NIBo.roa (hash: 7wIOmcrsKNPm1pT+25Dr7MjY3mEMyojJiBNkSyV1lM0=)
2: KSdM6O1FKkRc_JqGqlUg5PGDzE4.roa (hash: l71hLYxyaBfjnzVG3OAC3KkLtPDUSTDHWl+YWeICYgs=)
3: RD3FrdJDiaSgh4hhQogjAnXqmq8.roa (hash: y0vVTwPbcsqwxMSYm4yZYZVCYuFlngknWzg7Heg5wGA=)
4: Zrny0yg3TVa-9PfRlD4jNDdwvaQ.roa (hash: KV55zi4mSfveBw4rPTBhd4Q9yfOZ75ZlhzyzEJkhajg=)
5: rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl (hash: 7zYdNl+K2C/5CxT/bG28gfBE0GyssBoO7VAoiZ/gA34=)
6: tbYt_1HgZu11ZUlS_9RFIWiny-Q.roa (hash: 0H367OeDFx32BeCSB2rFjNElX2FtZo0+OiydPHLocnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:dd:f2:b7:dd:04:0b:32:42:07:a3:db:19:c2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Validity
Not Before: Mar 2 02:00:51 2026 GMT
Not After : Mar 3 02:00:51 2026 GMT
Subject: CN=37e22bb608ce53a062bcba7452c32188245d7211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:18:2e:f9:52:62:c8:e1:42:e4:e4:87:11:94:
75:f0:70:0d:40:86:2c:2a:84:45:6b:95:89:a3:29:
be:62:0d:3f:50:d4:73:60:27:cf:cc:05:e4:de:0c:
bb:64:97:82:ab:08:eb:75:90:e1:fc:85:de:db:9e:
34:36:a4:92:6d:37:18:01:3b:e2:a6:f0:9e:30:c1:
ee:d6:2f:c9:6c:6f:18:88:35:df:d2:36:ad:32:79:
7c:28:a8:09:d9:f0:b8:59:b4:34:cf:c1:b0:77:25:
92:82:ab:ce:db:b8:49:ce:e3:08:d2:6f:2a:ba:96:
38:38:df:63:24:8a:e9:d2:4c:0e:90:1c:55:b1:ce:
8d:82:4c:dd:74:65:d3:f6:da:95:b2:57:a8:67:25:
98:fd:06:cb:d4:1c:6d:0a:96:8c:75:51:77:f4:b5:
f5:f8:b5:60:e4:83:8b:26:31:3b:ad:1c:01:83:8c:
15:23:73:8c:ab:cb:12:23:72:35:64:60:83:45:6e:
d5:a8:ee:06:9f:8b:1b:4f:50:ea:c5:98:d6:8e:72:
cd:11:f2:61:3f:ec:99:4a:a5:19:71:d8:b9:7a:26:
3f:4d:af:57:71:a1:82:42:1a:d5:87:3d:ad:37:84:
86:81:0a:ca:35:78:2a:db:05:67:72:df:ea:ba:a9:
4e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E2:2B:B6:08:CE:53:A0:62:BC:BA:74:52:C3:21:88:24:5D:72:11
X509v3 Authority Key Identifier:
keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:32:fd:4e:1a:92:84:3a:14:26:36:74:96:02:2f:66:4d:02:
ab:dd:16:29:be:38:42:61:45:29:c8:04:75:db:5a:68:a5:a3:
23:f2:47:38:d9:28:cc:dc:f5:f1:98:68:5b:de:24:93:ff:fd:
2d:28:4c:94:c2:dc:f5:16:e4:61:36:e3:63:69:9a:4e:6c:b1:
a8:b0:78:3f:89:12:ce:75:1c:e6:bd:4a:5c:cc:bd:23:98:98:
b5:f9:18:86:3b:81:35:03:2b:aa:b6:5f:16:be:f1:87:bc:3a:
ba:c6:eb:6c:56:18:a7:9d:9b:1c:22:a7:4b:5d:a2:d9:93:ec:
cb:47:b1:7b:92:ca:be:8e:2b:65:0a:31:11:7a:8d:63:6f:2e:
99:4c:3e:e6:52:a6:b3:88:0e:0d:13:f9:59:0e:24:d4:e1:fe:
51:b0:49:6f:6e:08:64:3c:bc:4c:d8:b1:8a:2c:a8:17:46:e2:
65:34:08:54:47:78:e2:c1:e9:b0:ab:fd:c8:10:65:b2:16:c8:
70:6f:a3:b6:1d:15:3c:82:80:7b:01:28:be:58:c6:f3:6d:1d:
1f:27:ad:b5:5e:dd:a8:0c:c9:0b:42:4b:a5:59:40:73:b9:7c:
df:32:22:32:22:a7:84:66:72:d1:bb:61:d2:bc:ab:65:4e:56:
5e:ea:81:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:47:14 2026 by rpki-client