Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
File: ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft (raw, json)
Hash identifier: 89sn1+3ZNEetMa9XIH6RAlaFufPeL5wqxxc+Q/YfErA=
Subject key identifier: 08:3E:CD:4C:7D:92:C3:FC:FE:74:88:B8:58:86:1D:DC:9A:8C:05:BB
Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d
Certificate serial: 019CACEBD8961EE729DFB27D872868972BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 05:01:03 +0000
Manifest this update: Mon 02 Mar 2026 05:01:03 +0000
Manifest next update: Tue 03 Mar 2026 05:01:03 +0000
Files and hashes: 1: 8r944bJqG_LM17rTDE1uGAYMcO4.roa (hash: US/6Z/+ktv9Mac1FJpsH2XS8YNAZ76aWDA9Ebr1o3lU=)
2: BcVatgINhehxpYUrBXABJ41nAt0.roa (hash: GcuNKsGTXhiIzKjZT1cDQ3vbaLRIxIZoGDWXVty3fns=)
3: ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl (hash: 8brALilnYVMfCNpiNHaiKH6UeIT60cCmyUyHba4/zHM=)
4: lezVJNlI6-kd3L3t1xh0hHJs2bU.roa (hash: H0LxNuhxi2Mge+NMYs5i05JrSjImnlWFdy7LpDVv2XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:d8:96:1e:e7:29:df:b2:7d:87:28:68:97:2b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d
Validity
Not Before: Mar 2 05:01:03 2026 GMT
Not After : Mar 3 05:01:03 2026 GMT
Subject: CN=083ecd4c7d92c3fcfe7488b858861ddc9a8c05bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:06:98:9f:d2:ee:77:a1:0c:bf:95:07:01:e0:
3d:27:d5:d6:62:72:33:46:a5:db:00:c6:bc:56:32:
db:88:ca:29:9b:cb:72:fb:ab:55:94:b8:a9:bd:c0:
a7:2d:ca:68:a1:97:87:27:3f:c4:41:9a:21:a6:60:
ea:31:f2:db:17:f7:14:df:62:61:60:28:a6:e9:db:
1a:67:c6:82:c0:d1:12:1e:74:13:1b:b3:de:1a:17:
8b:4c:01:7f:2c:93:c6:b4:db:b1:07:30:ea:f5:f3:
e3:d2:3a:3b:49:1d:b1:3d:18:bf:88:ea:ec:91:34:
ec:8e:e4:81:3e:b8:24:16:99:d4:16:a0:22:f1:36:
c3:5d:af:86:4b:c6:35:79:ef:0c:ca:f6:99:33:1d:
5c:34:b5:19:99:9b:ec:0e:70:b5:d0:b3:43:87:88:
39:a9:64:b6:25:dd:81:bb:ef:ac:a3:c0:83:a5:fc:
e6:32:44:1e:7f:66:87:35:db:ff:de:ea:6b:00:85:
de:4a:9b:0e:30:e1:25:a8:6d:0d:6e:97:29:94:54:
1d:e5:7e:51:3e:10:73:9f:4e:5f:7d:fd:5e:e1:41:
5d:02:c0:35:e6:58:bb:f3:f1:a5:aa:29:a9:ac:4c:
28:60:33:6c:05:b1:e2:02:dd:bf:0f:20:6d:94:a2:
d3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3E:CD:4C:7D:92:C3:FC:FE:74:88:B8:58:86:1D:DC:9A:8C:05:BB
X509v3 Authority Key Identifier:
keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9e:bb:4f:ac:dd:24:cd:d4:a9:55:09:59:dd:81:4d:60:c1:
75:b4:50:d7:bb:18:40:1f:02:97:c0:ba:55:9d:d7:72:45:c1:
16:cf:1b:5c:2f:24:51:1d:fd:b1:c5:22:4d:22:0e:97:53:ca:
87:92:a7:3f:89:e0:b0:46:58:63:6a:ac:57:f6:27:15:1a:14:
aa:95:46:33:00:9b:c7:98:27:de:73:82:b8:85:bd:90:74:4b:
33:c8:f1:34:20:8a:a6:35:ba:7c:75:c4:c4:15:d1:8a:64:13:
36:b1:8f:0b:48:e0:ea:07:ab:a3:45:75:0a:d9:0b:60:fe:3b:
5a:95:b8:bc:90:47:8a:84:07:16:99:ee:ff:9e:2f:f8:75:f3:
e7:d0:4c:85:76:d6:11:32:a7:83:c6:69:e8:ca:77:f5:53:4d:
c7:d9:6c:9b:8d:b7:e9:b5:49:52:0f:21:01:72:ea:12:10:76:
92:9f:55:cf:0e:31:bb:a8:0a:65:cd:7e:c5:3d:8f:af:ea:44:
40:b5:a0:f7:31:f1:e7:b5:0f:3b:a7:9e:02:3e:69:ea:db:a8:
3c:56:44:18:6d:3f:dc:19:10:a5:be:8c:cc:07:59:77:66:18:
4e:92:bf:e1:d8:ea:95:b5:57:50:2e:9e:9a:aa:19:2c:ce:9c:
95:37:52:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:27:33 2026 by rpki-client