Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
File: ZW0zxfFuPN2WCuBcgNn282_FU_I.mft (raw, json)
Hash identifier: Otx0sbMr2NLWeEB3+Q75AFYkEsZON5Fj0Zbj7I7WmoM=
Subject key identifier: 90:2D:65:BE:E1:CA:05:F9:F1:43:15:26:CC:A5:CC:E5:99:3C:69:89
Authority key identifier: 65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
Certificate issuer: /CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Certificate serial: 019CABD9D31F5D65DC333BC25E609EC9C652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
Manifest number: 0CAE
Signing time: Mon 02 Mar 2026 00:01:44 +0000
Manifest this update: Mon 02 Mar 2026 00:01:44 +0000
Manifest next update: Tue 03 Mar 2026 00:01:44 +0000
Files and hashes: 1: 1-8yART7xM2-_6XMTd_NQPcz65zM.roa (hash: tQW6oVAcsw1dq1koaqtzJ35SlN0zgIfaKPB7+0DEfrg=)
2: ZW0zxfFuPN2WCuBcgNn282_FU_I.crl (hash: HJ70PujAJUHwTREgnVqOFnoYJ0YGbeXSaM78+ZHyq1M=)
3: zv8htVuLlM7L27gWdlqS584Hu_g.roa (hash: aUcg7/4honTLftFLDXOy/acZ6va/bYgkctanVBZKlS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:d3:1f:5d:65:dc:33:3b:c2:5e:60:9e:c9:c6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Validity
Not Before: Mar 2 00:01:44 2026 GMT
Not After : Mar 3 00:01:44 2026 GMT
Subject: CN=902d65bee1ca05f9f1431526cca5cce5993c6989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:19:e4:ef:46:0e:ec:b0:ce:57:7e:70:cc:0f:
77:e2:31:44:ed:1b:27:a5:f8:d2:3f:72:59:79:c9:
3e:b1:65:9f:81:63:df:18:30:f6:48:cc:00:77:7d:
1c:eb:87:5b:16:91:09:8a:7b:c5:c6:04:0c:73:00:
30:66:85:70:f6:4d:62:2f:3f:d2:9e:de:44:86:6f:
8b:ae:1c:f9:0f:78:90:84:ca:2d:43:7f:47:dc:d5:
be:06:3d:d2:5d:07:f4:87:bc:a6:27:85:09:6e:05:
c6:78:df:5c:86:57:0a:cf:0c:5e:8a:42:64:25:cc:
0e:58:e1:7e:e2:23:4c:31:ff:18:30:a5:e8:57:03:
01:9a:23:bc:e6:7e:e1:81:20:d5:c9:1f:d9:4f:c7:
a3:0f:e5:d7:00:a9:37:79:be:14:fb:e7:1e:86:4a:
d8:74:83:b7:a7:d4:0e:19:6c:de:d9:a3:69:13:d8:
f4:f4:44:83:c3:5f:85:97:8d:3b:73:91:db:64:4b:
92:0f:1d:a2:32:6e:de:30:b2:e2:51:33:c2:0e:af:
e8:00:15:4d:bb:5c:af:64:0d:15:eb:90:b7:c9:f8:
8f:5b:b4:b2:1c:5f:78:fb:7e:1d:c3:4d:8f:cd:ee:
ad:47:26:5c:83:dd:3d:96:02:49:66:50:44:8a:ff:
ca:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2D:65:BE:E1:CA:05:F9:F1:43:15:26:CC:A5:CC:E5:99:3C:69:89
X509v3 Authority Key Identifier:
keyid:65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:fc:aa:5f:bf:e5:92:d0:f8:49:51:60:65:7d:5c:64:4d:59:
ab:31:c1:98:fa:66:98:c7:e7:a1:7a:82:4b:c3:56:ed:b0:2f:
cf:af:82:e3:4e:22:02:7c:f0:7d:37:42:17:cd:d5:05:88:59:
5f:0a:91:43:0e:42:f1:c8:33:ac:1a:58:12:7b:42:9b:cb:f0:
b9:65:48:61:9c:f0:ab:36:ec:e4:40:60:4c:ab:a7:09:4b:72:
12:b3:c1:5d:0f:ae:e2:37:f2:a2:af:f7:19:2d:d8:ad:38:1e:
8f:df:f8:31:18:47:49:d1:d8:f3:05:fe:b3:61:eb:a3:eb:04:
4e:95:7c:41:6f:45:db:ac:f5:ea:2e:de:6b:40:85:e0:6d:b5:
e2:cc:86:3f:84:1e:44:d2:47:dc:d1:c9:68:2e:af:5f:17:32:
0b:a6:cc:8a:a4:ae:fe:91:21:4e:72:02:df:c2:44:76:75:f7:
6e:b9:b1:07:53:90:38:48:65:a1:f4:d8:2d:8f:14:a3:59:bd:
b0:57:f4:d1:40:11:55:cb:a8:12:04:a5:8d:40:24:70:97:c7:
44:3c:3a:e4:f1:d0:5f:49:b3:25:b4:04:af:4d:a2:5f:52:75:
9c:4d:d2:ef:ee:26:ea:cf:91:c3:fd:98:69:24:33:55:c8:df:
bb:ff:f7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:18 2026 by rpki-client