Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
File: zuTBXIcH3739qDvjppPDWUfxbVk.mft (raw, json)
Hash identifier: EndkY4Mwwe+QR5GujP7qw+ekGqECKW8g+gfsTXJiJ0w=
Subject key identifier: 81:A8:90:A5:AC:62:79:63:34:15:6B:41:FA:9E:32:38:F0:0B:9F:F5
Authority key identifier: CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59
Certificate issuer: /CN=cee4c15c8707dfbdfda83be3a693c35947f16d59
Certificate serial: 019CABA1C46E8D9F2CE97706397C819F0A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
Manifest number: 140E
Signing time: Sun 01 Mar 2026 23:00:31 +0000
Manifest this update: Sun 01 Mar 2026 23:00:31 +0000
Manifest next update: Mon 02 Mar 2026 23:00:31 +0000
Files and hashes: 1: 3XADLdEbS1FY6n6yUx5o7fgS4pU.roa (hash: sJxb+ZizUKA1xitVNheZoX8adqgMHbTrnaDCSefof/w=)
2: zuTBXIcH3739qDvjppPDWUfxbVk.crl (hash: tSv7J92plrwCe8sBEuiRVm+JbDXk5EC7iublFXKwCow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:c4:6e:8d:9f:2c:e9:77:06:39:7c:81:9f:0a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cee4c15c8707dfbdfda83be3a693c35947f16d59
Validity
Not Before: Mar 1 23:00:31 2026 GMT
Not After : Mar 2 23:00:31 2026 GMT
Subject: CN=81a890a5ac62796334156b41fa9e3238f00b9ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:11:ef:e5:60:cc:26:eb:b8:87:66:e9:40:28:
61:7e:c9:ae:4e:95:21:ad:ab:54:dc:27:4f:35:32:
d5:e7:01:02:6a:58:54:e8:b4:f7:d3:c1:9b:e1:34:
de:ea:32:10:bd:e4:2b:04:11:31:f4:6c:f7:bb:63:
ae:37:20:48:d8:8c:3b:f0:0a:99:40:54:73:2c:b3:
e3:3d:f3:76:ba:37:11:df:e2:4a:3a:0b:94:cf:68:
e3:53:aa:c6:28:9e:db:45:fa:e4:a1:90:f0:8c:03:
70:17:6c:d0:41:d8:88:86:c2:c2:8d:a2:43:dd:8e:
8d:f3:3d:7f:34:5d:3e:6e:48:23:f5:58:aa:8d:e0:
d3:d6:9f:23:73:a7:b8:0d:f4:33:5e:17:77:1b:e1:
6c:5e:1b:a0:47:2e:a7:37:2e:c2:ec:ca:a9:8a:e2:
7c:88:b4:75:6c:c8:69:cb:42:4b:1c:3f:2f:5a:a9:
b3:08:53:8f:6b:93:0a:a7:6e:d4:da:9c:b2:a4:e3:
33:b4:78:0a:55:c9:b0:80:1b:0f:5d:44:ea:cf:da:
9f:6c:bd:24:38:f4:63:ea:1c:0b:a9:eb:b1:69:4d:
c5:dc:1a:f7:a5:b5:ca:24:df:3f:ea:c0:a0:5f:6f:
46:b3:c3:af:2d:22:f8:60:76:42:cc:5a:d2:c9:7e:
ae:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A8:90:A5:AC:62:79:63:34:15:6B:41:FA:9E:32:38:F0:0B:9F:F5
X509v3 Authority Key Identifier:
keyid:CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e0:8c:e3:3d:45:3f:ce:c3:40:80:88:c0:60:24:b3:70:89:
5d:cd:f1:e6:29:dd:f1:36:62:f4:10:fe:db:f9:7c:57:89:52:
0c:d3:58:c8:4a:34:55:3b:0b:1f:8c:66:08:d3:48:59:90:1c:
63:af:ca:3b:45:9f:41:5e:b2:39:9f:93:f5:38:d2:15:97:60:
3f:23:6d:db:40:03:31:98:ec:4d:8a:4d:37:39:06:35:55:e9:
39:8d:3e:d0:7b:f3:ae:a3:99:65:0b:d4:52:5d:73:ed:d3:6b:
92:0e:41:70:68:40:a2:f1:d3:13:72:8b:67:76:17:f1:35:73:
35:42:df:d5:83:65:1c:de:a3:6a:fc:81:c9:d7:0f:bb:e0:e0:
b8:4e:b1:15:dd:62:24:96:ea:fe:4f:0f:0e:e1:c1:40:8e:ad:
38:ea:22:c0:dd:46:2c:a4:85:57:80:d3:44:ac:7c:aa:33:6a:
09:28:7c:6c:fd:76:f2:84:55:89:0d:ed:8d:bd:f0:06:44:3a:
de:45:3a:d3:70:0a:95:44:df:c4:4b:d0:82:d3:c6:56:6c:2d:
cd:97:ab:31:24:06:29:10:d4:48:e4:a6:4d:56:ca:7d:ba:63:
6c:97:6d:6a:c3:cd:47:6c:9b:e2:3e:ef:bd:a3:84:df:b3:89:
a7:c5:3b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:03:56 2026 by rpki-client