Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
File: znQefeZX5KEPk8qSxReoGywLJR4.mft (raw, json)
Hash identifier: PMYdfjKo6LvhVk2D4rUADSfEdJGwAr6zcoT2rahwrlM=
Subject key identifier: DA:3B:B1:6E:6A:4A:07:01:2D:8F:10:92:3D:50:8C:81:C9:35:BD:D4
Authority key identifier: CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
Certificate issuer: /CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Certificate serial: 019CAE6BF353C891190DA285BFA3D271361F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
Manifest number: 0E3C
Signing time: Mon 02 Mar 2026 12:00:36 +0000
Manifest this update: Mon 02 Mar 2026 12:00:36 +0000
Manifest next update: Tue 03 Mar 2026 12:00:36 +0000
Files and hashes: 1: 9As_XsenM5-QTmM1X_BCn4yPeqA.roa (hash: Dxtnn5XYXXhgv4gymsVhkJbLhB4m0DGlBCGRadS6kHQ=)
2: znQefeZX5KEPk8qSxReoGywLJR4.crl (hash: O/wYxDbQdm/utpWmGtoJY0+06SJZK0+jzqmgaF9m8TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:f3:53:c8:91:19:0d:a2:85:bf:a3:d2:71:36:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Validity
Not Before: Mar 2 12:00:36 2026 GMT
Not After : Mar 3 12:00:36 2026 GMT
Subject: CN=da3bb16e6a4a07012d8f10923d508c81c935bdd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:de:de:d2:b6:09:3a:72:36:5d:48:55:66:f3:
5f:66:7a:44:49:25:8b:e7:62:7f:bf:e2:fb:a8:24:
c7:51:7f:91:4a:04:4e:00:6d:67:21:ab:bb:89:a2:
a9:fc:c0:a4:b7:40:68:b6:e5:18:6d:0f:75:00:7a:
19:e2:dd:c8:cb:03:8c:06:bf:7a:8e:99:c6:3d:58:
27:00:18:77:1c:47:75:c4:b0:ef:33:99:ea:6a:d3:
c9:94:3c:5f:ec:0e:7d:7d:5c:d1:1b:55:a9:19:4a:
74:11:cc:05:94:77:c8:4a:2c:08:52:06:f2:89:8c:
c7:74:c7:15:af:65:0c:ca:01:c7:79:0a:60:d3:7a:
1c:fe:6b:e9:5d:0f:3e:84:ca:b0:71:48:6d:1b:f0:
56:55:f6:93:34:bb:f0:2f:37:81:27:a4:fa:2f:19:
15:d9:eb:e2:a9:6f:cf:5a:b1:24:7d:39:ee:a9:71:
19:6b:c2:c7:27:bd:41:0b:80:4b:87:1c:47:cf:07:
df:70:72:eb:65:e0:27:09:e8:db:39:2c:53:95:7a:
0f:6d:69:b4:f5:7a:b4:c8:c4:6b:07:cb:e4:0a:7e:
cd:2d:77:24:fd:0f:8e:fa:08:bd:ac:19:78:51:b0:
a4:7a:15:1e:5b:4e:b7:a9:12:74:d9:f8:4c:e3:fb:
30:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3B:B1:6E:6A:4A:07:01:2D:8F:10:92:3D:50:8C:81:C9:35:BD:D4
X509v3 Authority Key Identifier:
keyid:CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8f:27:39:17:b7:48:ba:74:98:c9:ef:06:a5:f5:28:f7:0a:
02:91:cf:98:f5:58:8d:98:2d:89:f2:fc:d0:81:d9:9d:69:bc:
f0:dc:69:3c:0b:4c:94:14:cd:d8:4a:7e:04:66:24:d3:d4:37:
84:20:3b:92:41:f9:31:4b:e0:68:e1:39:50:ab:e2:4a:bd:92:
1e:64:7e:13:8b:b8:68:71:ea:ff:32:4e:aa:41:e3:d1:57:be:
96:4a:33:fb:f8:42:11:41:f0:9e:24:4f:5e:0a:54:89:79:9f:
ae:86:c2:bb:e7:29:ec:5b:17:62:07:f6:30:90:c8:8d:dc:92:
01:6d:59:21:84:57:61:46:e3:73:24:6e:e8:eb:91:c7:af:fd:
a0:2c:50:a3:c6:6f:c3:b3:aa:bc:e0:b1:78:af:c8:d4:a3:d1:
9d:6f:75:30:1a:5a:60:af:8b:45:d5:33:7a:ea:b9:bd:b8:bb:
28:5b:6a:ba:43:3e:c5:04:d2:c8:d0:b9:45:b3:46:5d:c3:23:
ed:e2:ef:31:18:49:cd:c4:31:42:66:75:5d:b8:a9:38:a6:cc:
42:45:2a:e1:d3:80:ee:bf:be:f7:c5:e1:62:ca:ce:bc:18:81:
47:45:db:cf:58:01:2a:89:b4:b4:17:3d:0a:a8:dd:36:37:cd:
72:15:b7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:52 2026 by rpki-client