Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
File: ZgPtTHhFQlARbxBetpYdwp4dvGw.mft (raw, json)
Hash identifier: CJNDDmDANg4c0rxLu5s8ggEM6BF+OqqthMmhAEch4h4=
Subject key identifier: 3E:CE:A8:73:E8:B7:BD:A8:3B:4C:70:C0:6B:01:8E:69:1C:0B:29:C7
Authority key identifier: 66:03:ED:4C:78:45:42:50:11:6F:10:5E:B6:96:1D:C2:9E:1D:BC:6C
Certificate issuer: /CN=6603ed4c78454250116f105eb6961dc29e1dbc6c
Certificate serial: 019CAA8FD6AB7B2A2112E3B70F98C8B12A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
Manifest number: 152C
Signing time: Sun 01 Mar 2026 18:01:19 +0000
Manifest this update: Sun 01 Mar 2026 18:01:19 +0000
Manifest next update: Mon 02 Mar 2026 18:01:19 +0000
Files and hashes: 1: IRS--xaIFyvf4nBEIJqxO1_3ZhE.roa (hash: K/zCH1QmxaSRuaMT9yqorVTWzzo7aNiaeZwocJbG5QI=)
2: ZgPtTHhFQlARbxBetpYdwp4dvGw.crl (hash: MMqgLPUsx0omMbfciu6BZnukaDAbhX3RiwNLBHR+5+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:d6:ab:7b:2a:21:12:e3:b7:0f:98:c8:b1:2a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6603ed4c78454250116f105eb6961dc29e1dbc6c
Validity
Not Before: Mar 1 18:01:19 2026 GMT
Not After : Mar 2 18:01:19 2026 GMT
Subject: CN=3ecea873e8b7bda83b4c70c06b018e691c0b29c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:01:a4:b1:6c:17:fc:c7:0a:5c:49:1e:f8:0e:
26:f9:57:de:cb:7d:4a:75:89:8a:10:ef:6e:7a:34:
db:3c:41:e9:17:20:31:3c:60:f2:e1:a8:3a:e6:5f:
af:97:75:28:93:fc:b9:d7:e4:60:73:16:91:7d:2c:
dd:b8:65:09:8b:0b:57:99:f8:8c:71:03:1d:0a:ed:
85:10:37:ef:f6:0a:9b:94:20:ff:20:3a:2e:1b:7c:
8b:a5:4f:2b:5a:31:43:ea:82:6e:83:bd:3d:86:82:
f7:d4:b6:b0:dc:cc:db:87:b4:60:c5:71:d3:ec:90:
96:65:72:c2:08:f1:72:28:48:48:19:27:4e:bd:82:
f4:e1:ff:d2:25:7d:14:cb:44:d0:30:a2:fc:9b:51:
78:35:b7:db:a2:ca:21:73:b6:1f:79:81:0d:98:61:
b6:e6:72:52:5a:64:eb:bc:79:dd:e8:e6:19:52:46:
32:b5:9d:7f:3c:ba:8f:30:a2:49:56:d0:66:6a:e2:
16:87:77:15:87:c6:23:1f:3e:32:aa:1b:2c:f3:4e:
63:06:2e:46:3f:f1:f6:9e:c6:d3:1c:e0:05:0e:1b:
30:4d:60:96:4b:66:24:88:62:e7:05:7f:3f:0e:0f:
10:bd:90:2d:18:33:d3:c7:1f:96:6f:2b:63:fa:00:
96:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CE:A8:73:E8:B7:BD:A8:3B:4C:70:C0:6B:01:8E:69:1C:0B:29:C7
X509v3 Authority Key Identifier:
keyid:66:03:ED:4C:78:45:42:50:11:6F:10:5E:B6:96:1D:C2:9E:1D:BC:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6a:b3:4c:d8:7f:0b:00:a2:8e:f9:f8:74:ac:ef:94:a5:38:
d3:6f:6d:a1:d4:35:27:b0:20:5d:25:52:0d:36:38:a7:7e:73:
89:82:21:97:9a:7d:35:b8:10:25:d6:ca:fa:a9:8e:98:e6:6a:
2b:bb:d5:1b:d7:55:53:66:60:9d:53:e7:3a:4e:cf:26:ac:7a:
d5:2e:6a:de:d5:b9:cc:a9:8f:5e:77:e6:b8:99:b5:47:89:7f:
73:72:c2:a3:86:6f:07:bf:9e:19:b1:b4:cb:88:34:21:fa:6c:
c5:86:03:06:de:f1:5f:04:5a:fd:ea:d6:f0:d2:25:7c:f9:da:
a7:c0:7c:ff:5f:30:4c:40:a7:56:21:cf:28:97:53:5b:fa:6d:
2d:b6:a7:df:58:3a:a5:d7:89:0e:00:9c:7b:27:d7:28:6f:fb:
6c:74:5d:d7:cd:eb:69:58:3f:2d:fb:71:df:14:af:c2:9e:18:
67:c5:f7:87:19:a4:99:39:90:6c:f6:c4:4c:07:42:82:51:ae:
6a:4b:46:d8:02:18:a2:59:c6:a4:4e:47:23:86:30:34:d8:e7:
b3:5c:54:ce:5a:e6:48:44:97:e2:4c:87:71:ee:87:29:77:b7:
12:21:78:26:f7:6a:1f:5f:97:85:78:d4:2a:5e:dd:83:92:ff:
6a:9d:5b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:25 2026 by rpki-client