Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
File: zE3DCP5thhIQJvl0St1A4Rc1Q94.mft (raw, json)
Hash identifier: btFvqLPdvO1SUwoifqWaO9bJGAID34eBAaorNK2+F8k=
Subject key identifier: 72:1B:5D:E1:6E:D3:C0:2A:CA:BB:43:99:FF:25:1C:13:73:B6:37:5D
Authority key identifier: CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE
Certificate issuer: /CN=cc4dc308fe6d86121026f9744add40e1173543de
Certificate serial: 019CAA8FFD944B1BD096DAC1EA625D751B87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
Manifest number: 1555
Signing time: Sun 01 Mar 2026 18:01:29 +0000
Manifest this update: Sun 01 Mar 2026 18:01:29 +0000
Manifest next update: Mon 02 Mar 2026 18:01:29 +0000
Files and hashes: 1: Dq-r-Yg7y34zz0AqTh3QSsCtI0M.roa (hash: BCMsstp2glA617fVzScsLywH8yZ2gjhq0JFm8FjVqK0=)
2: zE3DCP5thhIQJvl0St1A4Rc1Q94.crl (hash: DLhIcvXx1pQBwE1wPMmuF/MSG+KJaZWJhuMnz3vkaso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:fd:94:4b:1b:d0:96:da:c1:ea:62:5d:75:1b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4dc308fe6d86121026f9744add40e1173543de
Validity
Not Before: Mar 1 18:01:29 2026 GMT
Not After : Mar 2 18:01:29 2026 GMT
Subject: CN=721b5de16ed3c02acabb4399ff251c1373b6375d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:41:07:50:dc:18:1d:88:51:82:16:c0:c7:
c0:52:9d:ee:b2:a0:ad:89:09:fd:88:79:2e:73:30:
18:d2:33:ef:7c:b3:8a:31:a3:c8:00:72:3f:a2:f1:
a8:ec:ba:00:11:81:ae:59:ac:57:96:90:31:3e:03:
5f:bc:c7:2f:67:d0:2c:9c:46:cc:e8:71:d7:ad:5c:
f0:5d:91:70:b3:7b:0e:a9:53:76:ab:87:a0:12:1e:
c9:e3:3d:bc:6c:d3:29:af:cb:ba:93:72:6e:a5:6d:
d0:da:e8:24:5e:2d:29:01:e2:f7:ec:6a:f3:58:c3:
be:e6:4e:d8:17:09:f1:38:d4:df:fe:0b:08:bc:e4:
50:5d:e3:a6:fe:aa:b6:69:63:ee:77:a6:47:8e:6a:
b1:65:c7:79:ed:48:90:fa:a4:d4:31:f3:b2:5f:62:
e9:10:67:ed:d0:7d:b5:c8:f5:4b:d4:28:85:76:d4:
f5:7e:34:a8:0a:b6:45:bd:d7:fd:c4:2f:d9:e4:a1:
05:b6:b8:f6:24:39:2e:4e:ba:ab:d0:72:16:f3:e5:
69:3a:e8:f0:9b:b6:93:db:46:24:0a:9e:6c:10:14:
e8:6e:12:7b:1b:37:fb:41:a8:38:e9:19:42:7a:8e:
68:dc:ad:3a:3e:04:ae:6b:eb:b1:d4:ef:5b:4a:33:
bf:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1B:5D:E1:6E:D3:C0:2A:CA:BB:43:99:FF:25:1C:13:73:B6:37:5D
X509v3 Authority Key Identifier:
keyid:CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:bd:63:02:05:fb:4d:aa:3e:59:07:f0:74:53:e3:d2:38:86:
e8:fb:a0:12:52:c7:e0:e6:07:0a:03:e6:f4:40:2b:28:7d:9f:
e9:57:5f:e2:66:ef:0e:8b:f6:b7:fe:a5:8b:27:c4:7d:2e:15:
00:d4:9c:d1:95:8f:aa:c1:b2:93:17:d2:e0:3e:a2:ba:10:e6:
25:23:aa:2a:0d:a1:82:92:29:fa:bd:d2:af:21:db:f4:60:c9:
4a:65:83:98:83:10:6d:98:1f:10:77:11:80:b6:17:bd:2c:17:
1e:32:e2:79:80:82:3f:6d:ef:d6:ad:e3:c1:dc:b4:28:52:06:
c8:29:3f:f6:04:62:66:4f:2b:46:be:db:56:7a:92:46:e8:3d:
e5:6e:fc:3a:11:a6:17:f9:bf:e9:13:83:ab:fd:a6:ed:b4:10:
d3:93:18:e3:c7:cb:38:52:70:20:4f:09:ee:dc:cd:f1:fa:5d:
98:f6:90:75:d8:a8:64:9b:31:30:32:30:97:c1:6e:50:6a:0d:
3c:01:37:45:3f:d4:b7:af:17:51:76:92:fe:fa:bb:5a:e9:fb:
fd:ab:10:dd:fa:3d:ce:ef:a8:c7:44:fc:82:b6:a5:d6:ff:9b:
ad:21:a3:41:c3:9a:2e:a9:a0:5c:97:46:77:4f:3f:e8:5d:aa:
11:5a:fb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:46 2026 by rpki-client