Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.mft
File: zOUMq7b3OGIWDvH59QVPSQqJ3_g.mft (raw, json)
Hash identifier: rZGkj5JGGFDBmBY7xQbYrFhIfierVAjLlGjJGkB2aZU=
Subject key identifier: 6E:06:02:E4:98:8F:A4:BD:29:E3:EF:6B:ED:7C:A8:4A:49:D7:7A:34
Authority key identifier: CC:E5:0C:AB:B6:F7:38:62:16:0E:F1:F9:F5:05:4F:49:0A:89:DF:F8
Certificate issuer: /CN=cce50cabb6f73862160ef1f9f5054f490a89dff8
Certificate serial: 019CAED9D842ECE4602C2261E852E241BB56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zOUMq7b3OGIWDvH59QVPSQqJ3_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.mft
Manifest number: DD
Signing time: Mon 02 Mar 2026 14:00:38 +0000
Manifest this update: Mon 02 Mar 2026 14:00:38 +0000
Manifest next update: Tue 03 Mar 2026 14:00:38 +0000
Files and hashes: 1: s7t_akC7zKi1bxuEfE-gecZOJkw.roa (hash: hOOmqhwtS/j3wjfpIaMddw7GnavqbISUHa+AEjysuQA=)
2: zOUMq7b3OGIWDvH59QVPSQqJ3_g.crl (hash: Gx4osv2h8ZU+IcKrLZEUMxIuZkihcJQfSWEwV0PjU1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zOUMq7b3OGIWDvH59QVPSQqJ3_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:d8:42:ec:e4:60:2c:22:61:e8:52:e2:41:bb:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cce50cabb6f73862160ef1f9f5054f490a89dff8
Validity
Not Before: Mar 2 14:00:38 2026 GMT
Not After : Mar 3 14:00:38 2026 GMT
Subject: CN=6e0602e4988fa4bd29e3ef6bed7ca84a49d77a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:61:66:70:35:34:e1:4a:ac:e1:0f:18:19:55:
e8:f4:18:5b:c3:f7:87:7d:bc:43:b4:47:51:58:6d:
ea:b8:67:58:b9:24:0b:d0:d2:07:fd:bc:39:32:73:
30:74:67:3d:9c:1f:ee:5c:1c:82:37:9a:17:c6:33:
e0:0e:e1:bf:a5:f3:20:79:27:e4:fb:7b:a5:9f:98:
a1:9a:87:82:f7:27:35:43:ad:b7:e6:27:9d:cc:60:
64:c1:33:44:f9:12:e2:79:c2:65:09:27:d9:8c:3f:
36:1c:b5:65:40:42:cf:18:bf:81:1f:fe:74:cb:31:
85:3c:af:5e:ff:a2:de:ef:dd:56:72:5f:6a:8a:43:
b3:fd:8a:01:84:a0:e3:86:fe:05:d1:9a:fa:22:0f:
5b:db:67:08:31:62:14:71:bf:3c:7b:d2:f7:ee:b5:
86:1a:9b:03:17:4f:fd:3f:e2:84:28:03:cb:39:f0:
5c:35:d8:d3:d6:ee:70:b0:60:c6:5b:99:22:2d:c3:
a6:a4:66:e6:1d:0f:6b:20:b3:97:73:83:ec:10:01:
7b:ba:67:11:18:d5:20:37:11:ae:43:4f:25:5d:e3:
7e:53:8f:b1:3a:46:f0:b1:47:2c:ff:1d:20:16:8c:
1b:ed:08:fc:f5:97:56:e3:3e:33:4d:58:7c:e9:f3:
ac:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:06:02:E4:98:8F:A4:BD:29:E3:EF:6B:ED:7C:A8:4A:49:D7:7A:34
X509v3 Authority Key Identifier:
keyid:CC:E5:0C:AB:B6:F7:38:62:16:0E:F1:F9:F5:05:4F:49:0A:89:DF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zOUMq7b3OGIWDvH59QVPSQqJ3_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b9:a1:9e:3e:da:95:d2:28:17:1c:72:bd:dc:f3:0e:ea:4f:
1b:61:3d:00:40:9a:63:91:b2:22:50:2f:3d:2c:37:0b:17:6e:
e1:ce:36:1e:7e:ec:56:00:4a:87:16:cc:85:35:c9:ed:5b:f6:
b4:1a:7f:f8:e0:a7:90:24:8c:9c:ef:7a:c2:52:00:d5:93:12:
12:33:27:33:f3:fd:18:f9:6e:9b:d0:46:4e:72:4c:cc:00:b1:
56:af:2d:f8:4a:fd:fc:cb:dc:37:e4:4c:f2:10:62:36:ee:05:
a0:b1:e9:14:f1:25:24:09:5a:23:de:ac:c5:a2:11:93:9c:9f:
11:73:46:5f:da:4c:db:23:b8:ee:63:f2:d8:e3:ce:3a:e9:d7:
2d:e2:53:b0:96:8a:7b:cb:24:56:7b:36:8e:a7:83:73:8e:bf:
ab:ab:89:43:6d:d6:b4:aa:f7:73:a6:40:af:a8:5d:0b:3a:f8:
63:a3:d6:09:3a:95:20:ae:39:40:db:17:0a:8d:00:e9:83:7c:
65:54:57:6e:c5:fc:39:79:c4:88:8d:5b:3a:3d:52:42:c2:9e:
6a:77:cb:3d:7b:ad:0a:b8:fa:c1:58:f5:ac:6b:81:7a:55:30:
c1:5f:85:45:fb:b1:52:6d:0c:f2:78:be:ce:db:ee:03:ce:2c:
59:38:88:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:26:19 2026 by rpki-client