Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
File: ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft (raw, json)
Hash identifier: vKCIbsB45vescamiSG9npxNUFleUEnDqitMhLUL2n0k=
Subject key identifier: B7:2E:2E:A3:75:7C:55:9F:0A:D1:35:E2:47:66:D1:D2:92:A2:0A:F4
Authority key identifier: 64:CF:1E:E9:06:53:B7:B8:14:D6:B5:45:94:9B:D9:4D:DE:0F:C6:A1
Certificate issuer: /CN=64cf1ee90653b7b814d6b545949bd94dde0fc6a1
Certificate serial: 019CACB5658E7754E43790740ABD4758647C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
Manifest number: 03CA
Signing time: Mon 02 Mar 2026 04:01:34 +0000
Manifest this update: Mon 02 Mar 2026 04:01:34 +0000
Manifest next update: Tue 03 Mar 2026 04:01:34 +0000
Files and hashes: 1: NS4bJSf8JtisPPo4E4AUvgYiJkI.roa (hash: kNAqy7sfsX/DzrejY1IHLtdhRNkU/dXjQEKN71zDd5M=)
2: ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl (hash: 2KCfmvjCCrOVw4XUWq5Fney/b45goHjB6s4w6bBnEZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:65:8e:77:54:e4:37:90:74:0a:bd:47:58:64:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64cf1ee90653b7b814d6b545949bd94dde0fc6a1
Validity
Not Before: Mar 2 04:01:34 2026 GMT
Not After : Mar 3 04:01:34 2026 GMT
Subject: CN=b72e2ea3757c559f0ad135e24766d1d292a20af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:49:de:c2:3d:f9:bc:e4:f9:15:ab:b7:4a:b0:
74:ad:54:50:75:cf:35:5a:e5:9b:03:29:8d:eb:9e:
22:e8:ac:03:e4:1c:b2:96:55:2d:36:50:3f:21:37:
a6:f3:48:d5:f0:b8:b7:d4:04:c0:34:bb:97:89:34:
4d:b1:cd:59:f4:b4:60:24:7d:cf:be:59:f7:9f:00:
76:a1:60:8e:c4:f7:5b:0d:1e:db:d0:87:3e:75:aa:
ca:a2:55:dc:a8:b7:c2:96:7a:17:36:94:be:25:74:
c4:d6:6e:05:59:b5:0e:59:ac:e9:30:15:8b:a2:3a:
c0:16:bd:c1:b0:08:d0:d4:7f:af:99:2f:bb:e9:0b:
c9:fe:74:bd:78:32:4d:b2:0e:25:b8:dc:e1:94:bf:
10:f4:45:51:4b:74:e7:8b:38:51:76:fd:48:56:27:
11:de:35:b7:9e:d8:47:6f:04:3e:17:26:28:68:35:
6b:d9:a2:80:e3:a7:0b:4d:c8:61:21:97:84:35:ca:
f2:0c:d3:10:ca:2d:00:45:80:b8:66:f7:6e:98:8b:
52:f5:88:0e:59:8f:c0:52:f1:1a:ee:18:cc:dd:79:
e6:8a:a7:52:7d:af:4d:f7:81:0a:a1:e9:9f:60:3c:
ad:e1:ae:66:42:4c:f7:4d:ac:6b:8a:97:08:d3:9a:
74:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2E:2E:A3:75:7C:55:9F:0A:D1:35:E2:47:66:D1:D2:92:A2:0A:F4
X509v3 Authority Key Identifier:
keyid:64:CF:1E:E9:06:53:B7:B8:14:D6:B5:45:94:9B:D9:4D:DE:0F:C6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:07:d9:50:54:9b:35:99:df:01:83:ea:a1:5c:5e:53:3d:d6:
20:fc:32:93:bc:18:07:3e:71:0b:94:07:dd:e1:00:c2:c1:80:
0d:d4:9b:8d:d5:8f:4f:6d:b8:74:e9:03:47:91:0e:ab:77:49:
7e:1c:7e:df:e6:54:ce:12:ba:90:ca:c1:4e:39:d8:fb:01:58:
f5:78:05:a6:a0:2f:81:78:64:35:0e:bb:64:7e:cd:c5:73:7b:
a5:d6:05:05:5d:ec:c9:6b:02:07:09:02:c5:4f:9c:f5:4e:4b:
1e:d2:4a:d7:00:fe:c2:7f:b9:c3:47:54:7e:48:bb:f6:19:1b:
e9:26:f8:0d:5f:18:15:24:ea:35:bc:3a:96:6b:eb:e8:a0:4c:
e2:66:13:b8:8c:09:31:28:48:7d:d2:83:8b:fc:a7:61:ce:24:
60:44:37:32:56:53:a9:09:66:57:c3:6c:ba:3f:a7:25:a6:4e:
b5:10:de:50:ec:74:3d:69:b4:62:2c:b5:de:6b:f5:d7:57:23:
8d:1c:12:4c:30:02:3c:8b:28:2b:a8:58:ed:13:74:ea:b5:2a:
95:b3:f3:ba:4b:df:46:d1:45:1f:b1:2b:dc:0a:7b:46:8a:44:
48:60:3f:52:61:76:d1:fe:fe:02:69:5d:00:01:41:f2:9b:41:
81:f3:82:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:52:57 2026 by rpki-client