Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/872097-b0a6-4d08-a6ff-1e88bb278f7b/1/ZwzXsrz7N0o5gMzg0ICSI4dU6gk.mft
File: ZwzXsrz7N0o5gMzg0ICSI4dU6gk.mft (raw, json)
Hash identifier: KygUAlM8C+5efiyKJj3L1JV49vMiDe5i73i9QSRb8tQ=
Subject key identifier: 20:31:E2:A0:61:4C:37:E3:C1:4D:B5:7E:80:D7:CC:75:25:9A:48:83
Authority key identifier: 67:0C:D7:B2:BC:FB:37:4A:39:80:CC:E0:D0:80:92:23:87:54:EA:09
Certificate issuer: /CN=670cd7b2bcfb374a3980cce0d08092238754ea09
Certificate serial: 019CAED9D05649AEE983FE8DF5D9FD3F71CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwzXsrz7N0o5gMzg0ICSI4dU6gk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/872097-b0a6-4d08-a6ff-1e88bb278f7b/1/ZwzXsrz7N0o5gMzg0ICSI4dU6gk.mft
Manifest number: 5D
Signing time: Mon 02 Mar 2026 14:00:35 +0000
Manifest this update: Mon 02 Mar 2026 14:00:35 +0000
Manifest next update: Tue 03 Mar 2026 14:00:35 +0000
Files and hashes: 1: ZwzXsrz7N0o5gMzg0ICSI4dU6gk.crl (hash: becAwlqb4x9SsCFP4/DPMBs9CL+c43ydaANb83gNjfo=)
2: pEVSsM5N7hm3Og32HXsDhg7pL1s.roa (hash: lkqZ6UHBpwmZdzRaUJjyZFpwtlAHVK4YjoLQTGnDAAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/872097-b0a6-4d08-a6ff-1e88bb278f7b/1/ZwzXsrz7N0o5gMzg0ICSI4dU6gk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/872097-b0a6-4d08-a6ff-1e88bb278f7b/1/ZwzXsrz7N0o5gMzg0ICSI4dU6gk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwzXsrz7N0o5gMzg0ICSI4dU6gk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:d0:56:49:ae:e9:83:fe:8d:f5:d9:fd:3f:71:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670cd7b2bcfb374a3980cce0d08092238754ea09
Validity
Not Before: Mar 2 14:00:35 2026 GMT
Not After : Mar 3 14:00:35 2026 GMT
Subject: CN=2031e2a0614c37e3c14db57e80d7cc75259a4883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:b0:a9:1c:e4:db:c3:bd:fc:d7:42:7b:ba:
82:63:7c:7d:b1:a8:8d:e6:06:8c:ef:58:3c:19:bd:
95:3c:27:27:e1:bd:64:79:fd:1f:8d:ac:20:d5:6a:
09:7d:88:61:ab:36:d2:5c:17:4f:4b:46:da:d4:34:
27:7d:48:48:91:21:fe:86:c9:08:bf:c3:78:78:b7:
54:d0:05:0e:91:ac:b5:8d:b5:2f:70:ff:f2:9b:c9:
cf:7c:d3:3c:19:93:87:7e:98:4c:ab:03:4d:16:14:
14:97:31:74:30:ac:d3:5b:01:56:98:1c:fd:77:ca:
ae:c4:b8:47:69:86:a4:2b:e7:97:c5:1a:6d:45:f3:
db:29:6b:ae:7d:ad:a1:52:06:3e:aa:e8:8a:18:9f:
4e:ea:77:d8:e0:38:90:5e:4d:c3:71:83:f9:db:d6:
3c:7a:a3:be:ff:b7:ba:a1:31:1c:c4:1b:42:a3:03:
6b:cb:88:ff:18:c4:f5:12:1f:c8:50:9e:21:a8:cc:
e9:e5:6b:0a:11:a0:ba:a7:2e:e4:32:5b:ba:b9:f0:
ce:ea:ee:58:06:a5:06:59:ba:ff:d0:cc:7c:40:61:
ae:64:be:db:73:d3:96:81:e5:b9:35:5a:6b:69:a5:
2a:a1:2d:5d:81:84:12:16:a2:dd:4f:a2:d0:37:6e:
9c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:31:E2:A0:61:4C:37:E3:C1:4D:B5:7E:80:D7:CC:75:25:9A:48:83
X509v3 Authority Key Identifier:
keyid:67:0C:D7:B2:BC:FB:37:4A:39:80:CC:E0:D0:80:92:23:87:54:EA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwzXsrz7N0o5gMzg0ICSI4dU6gk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/872097-b0a6-4d08-a6ff-1e88bb278f7b/1/ZwzXsrz7N0o5gMzg0ICSI4dU6gk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/872097-b0a6-4d08-a6ff-1e88bb278f7b/1/ZwzXsrz7N0o5gMzg0ICSI4dU6gk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:49:a2:e4:f9:ec:65:88:cd:9d:96:cd:8f:b2:91:5b:37:28:
1a:c6:40:eb:4a:d2:55:34:8e:bb:54:00:e9:00:c7:a0:48:a3:
13:90:e6:85:48:67:17:e3:f1:fa:8b:3f:b8:e0:b6:74:01:cb:
08:58:5f:d4:a4:50:fc:40:45:0a:c0:4e:33:4f:8a:f0:b1:50:
55:35:32:41:1d:db:7c:a0:a1:17:81:3a:0b:35:50:bf:17:20:
07:46:c7:f6:9f:4e:6b:3c:2d:18:db:69:8c:93:2c:8e:2f:d1:
96:89:88:13:f5:f5:a4:b0:8b:a9:5c:7a:f6:91:bb:80:be:b7:
3c:dd:b4:48:08:73:59:cc:f2:44:cc:f1:8f:8d:b5:55:ab:ba:
fd:dd:f3:da:c7:da:af:16:c2:d9:ea:65:3a:0b:70:55:82:d7:
ab:68:1b:ac:d1:22:61:22:ef:3c:65:09:95:be:e4:fb:0a:3d:
e5:ec:66:a7:b2:80:6b:79:ec:ff:12:39:b3:83:56:a1:fe:3e:
90:ef:5c:c3:d6:3a:3a:a9:6b:04:de:9f:e9:7d:eb:2a:46:9b:
c4:39:fa:d9:66:6a:c7:95:35:2c:35:86:79:6b:77:af:8f:ff:
62:d2:04:62:c5:89:66:9d:0a:53:a9:72:34:0d:e8:e4:c0:ed:
15:e5:ff:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:58:56 2026 by rpki-client