Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
File: z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json)
Hash identifier: Ql4yicRqNNLppn2RuR5Zwp712JeQF+CwGK3jwKgOsSE=
Subject key identifier: 9C:26:46:8A:EB:3F:0E:78:B9:8E:3D:F8:21:15:71:49:F1:C6:83:D9
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 019CB024063568AE6E335AE81888B4966687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
Manifest number: 1894
Signing time: Mon 02 Mar 2026 20:01:16 +0000
Manifest this update: Mon 02 Mar 2026 20:01:16 +0000
Manifest next update: Tue 03 Mar 2026 20:01:16 +0000
Files and hashes: 1: LZY-PqyJIZbUMaW5LyxkZu3B0ME.roa (hash: n7XhC8EKYYjZlJRLiTzAC3ZXaalwMOd93SyUZUX87f0=)
2: tw9opvf0Dc5mqTovtjfu2Csg6vo.roa (hash: /sxGcP7rnMogpd9PU079PAunh+PKIDCxrO0qaczcWVs=)
3: utu4HG5Q_7wmUAMYqV-VoOkOlAU.asa (hash: GWkYlaZN+/4nG13OOIg1vJsZ8EIkcdYZl1pQv3olPHk=)
4: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: RJL/cHFWwrjfVHOGfz3+YVk8UVb7pV5fVgPNCa6riA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:24:06:35:68:ae:6e:33:5a:e8:18:88:b4:96:66:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: Mar 2 20:01:16 2026 GMT
Not After : Mar 3 20:01:16 2026 GMT
Subject: CN=9c26468aeb3f0e78b98e3df821157149f1c683d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:0d:1c:1e:62:4f:7e:5a:0e:6d:8c:b4:7d:
10:46:d4:7c:6d:0c:7c:3a:d0:f6:a0:ed:c0:ff:c0:
7e:30:96:ee:26:ea:a4:f0:88:9d:c7:35:ad:81:8f:
22:ff:d7:71:be:76:26:31:c2:7e:82:a3:52:34:2e:
2d:cb:69:60:61:24:67:9e:3d:e2:37:8b:58:dd:f3:
bc:7d:5b:9c:a0:5a:b6:ff:dc:f0:20:65:66:bd:81:
77:1a:46:76:01:41:5b:d7:5c:49:5e:3f:57:de:aa:
11:2e:db:94:89:b5:20:56:15:a5:a7:08:99:d9:fc:
5d:b2:0c:c8:c3:52:b5:8b:41:40:df:99:ea:69:32:
80:4e:81:ea:60:89:67:c0:54:00:c6:76:fd:34:94:
dd:c2:89:40:af:0f:4c:52:ae:86:05:c5:e1:4b:8d:
2e:f4:07:ba:43:97:f9:e5:59:79:57:9b:62:26:41:
69:c7:d4:61:01:dd:9f:5e:79:2a:da:03:2d:82:01:
c3:4b:be:e2:5d:99:56:6e:96:6e:40:99:8a:75:e9:
62:7d:6a:d4:20:90:60:2c:ee:37:8b:1d:80:f5:55:
d4:59:8d:9c:c3:37:03:c0:08:7e:ff:6f:50:fc:bf:
8a:57:01:43:6b:c9:0c:0a:e8:a7:81:53:5f:27:a8:
db:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:26:46:8A:EB:3F:0E:78:B9:8E:3D:F8:21:15:71:49:F1:C6:83:D9
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b5:56:21:f6:ce:69:54:38:6a:45:9a:c1:6e:6a:13:ab:f9:
78:94:67:9d:23:03:48:66:51:c9:a7:be:ab:fb:79:f6:d9:41:
7f:67:3a:66:b1:03:03:3f:76:6b:4c:e1:be:90:96:99:cd:a7:
c8:a6:2c:63:3f:bd:05:ce:b7:a5:b9:d0:38:c0:51:b7:34:9b:
46:8b:cc:00:6a:35:91:43:cb:f9:73:0c:7f:d1:b9:af:c9:6e:
7e:36:74:cc:2e:5b:e0:5f:d8:82:69:5c:01:15:37:d5:f3:24:
f5:44:0a:b8:28:0a:bb:75:58:5c:c2:3e:e9:fc:42:da:bb:f5:
66:de:f9:80:63:cc:4e:16:53:53:f0:df:0d:ec:e9:39:fe:95:
6e:32:aa:70:3e:6b:2b:4f:9c:02:24:9e:87:d2:ea:92:b2:24:
77:e7:20:08:cf:5a:87:1f:cf:fb:9c:a2:30:a0:fa:2d:d6:ec:
9f:72:9c:f6:a8:c8:3b:0c:4a:44:9b:02:a8:7e:a0:82:cc:0d:
90:5b:1e:28:5a:d9:7b:f1:b4:d8:0a:37:cf:14:78:f5:f8:2b:
2f:5e:53:90:7c:c2:c0:da:be:6c:68:05:2b:39:4c:67:44:43:
62:bc:e2:ba:7f:8c:32:d2:d9:8d:f0:98:15:46:64:9f:e6:8d:
ed:99:49:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:41:55 2026 by rpki-client