Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
File: z96Fu9R49ehC9MT42FIl0QDg9N8.mft (raw, json)
Hash identifier: s7JjdAapc2dst5h1FrnUpsHAqE1druoskWydfYIvn08=
Subject key identifier: AB:71:D9:AA:02:AC:17:8B:C9:26:1C:52:37:8D:7C:E6:4F:DC:A1:15
Authority key identifier: CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
Certificate issuer: /CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Certificate serial: 019CAC46AA5832CB76E60CEC9FFD75C26FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
Manifest number: 1669
Signing time: Mon 02 Mar 2026 02:00:38 +0000
Manifest this update: Mon 02 Mar 2026 02:00:38 +0000
Manifest next update: Tue 03 Mar 2026 02:00:38 +0000
Files and hashes: 1: AYmY6bS1DW5wNX1gemsinMtxn4A.roa (hash: zRK2sb27i2HJzTqfMswAMQmmf/Cx/9L2B5J6Nm4MQxc=)
2: LmZL7NQJ3CA-ChgOtrMd32jvZBI.roa (hash: IeCaOVu0UoDFXz4huIJasKVw/iNCvSqG8pZqqp+jQ3I=)
3: cjZ33bD33v-eUIybd6UwPNRRpoQ.roa (hash: FLqtX2+FQiCXJcMBU06mRmURivJmg3QovEfaA3JnsmE=)
4: z96Fu9R49ehC9MT42FIl0QDg9N8.crl (hash: /89VdCqAYPvVmVAqtQdXM57CxOSnjiIuFhJ/c0zb2tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:aa:58:32:cb:76:e6:0c:ec:9f:fd:75:c2:6f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Validity
Not Before: Mar 2 02:00:38 2026 GMT
Not After : Mar 3 02:00:38 2026 GMT
Subject: CN=ab71d9aa02ac178bc9261c52378d7ce64fdca115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2b:fb:a7:2e:35:23:df:1d:e2:b0:97:bd:a8:
ac:86:7b:07:e3:a5:33:ff:6a:e9:b5:9d:cd:0c:d6:
f0:1d:94:56:ba:c8:64:35:11:8f:c7:29:cf:e7:8d:
3e:9c:75:2c:f3:0c:18:69:1c:b9:ff:4b:17:80:c6:
81:8e:f8:55:fb:1b:4d:b6:59:ca:1b:eb:cb:2f:5e:
07:c5:6f:7a:46:c3:54:e5:6c:61:56:0c:2e:e6:91:
19:ed:85:74:5f:27:9e:3a:0e:d2:d0:f8:d2:8f:30:
94:b0:aa:b1:e3:cb:fc:93:fc:50:0e:22:8a:7e:b4:
d1:3a:a5:64:77:cd:9a:49:f7:0e:bf:b9:16:c5:dc:
25:f7:b0:d4:8f:f0:d6:02:28:87:70:20:52:58:3f:
7d:d7:0b:15:80:8f:c7:af:25:32:17:7f:55:87:7a:
d4:24:9e:38:d2:3b:94:a8:88:ae:c7:48:9f:48:a9:
11:4f:11:67:24:ff:3b:4a:92:41:53:67:43:44:af:
98:03:1c:f3:a0:a7:5c:30:b3:48:89:ea:30:60:14:
4c:42:77:51:1a:10:b6:f3:1e:4b:50:f3:d4:32:53:
67:6f:4b:f1:42:40:9a:17:2e:16:dc:2e:ad:28:55:
c5:25:46:7d:39:69:4b:8c:af:87:a1:d2:9d:be:a8:
bd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:71:D9:AA:02:AC:17:8B:C9:26:1C:52:37:8D:7C:E6:4F:DC:A1:15
X509v3 Authority Key Identifier:
keyid:CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:32:1d:88:b1:d8:70:18:77:e5:18:34:cc:b2:66:b8:88:f2:
4b:3d:47:5f:94:a9:ac:4d:c1:1d:22:81:1e:b0:80:46:28:46:
4d:b2:22:2f:67:14:f9:1d:e0:7c:6d:bb:fe:44:19:4b:61:46:
08:8a:d0:45:6c:a0:5e:c7:ec:76:68:d1:e4:57:11:c5:48:2d:
c7:c8:06:8e:95:77:a6:d2:f2:1e:95:eb:38:4c:a2:8c:b8:51:
96:62:08:f5:9c:cc:f4:27:ac:06:24:14:05:71:0a:d3:b2:a6:
80:04:34:d5:9e:11:3d:23:3a:52:25:29:4c:78:a7:25:88:d7:
d7:82:f0:e5:82:54:6a:6b:05:1a:49:77:f9:ae:d3:05:c4:29:
b1:4b:c2:40:48:d9:b7:ed:0e:84:51:96:4e:84:0f:1a:b1:90:
85:7a:c5:90:13:20:cb:0d:36:2d:8b:ae:fd:b9:b0:07:e1:25:
97:fb:82:01:f4:53:b2:c0:00:5b:79:7f:61:67:bb:99:1d:42:
c8:67:77:ae:8e:45:ec:fb:eb:94:57:4a:0a:e4:2b:15:cf:fa:
e1:e5:45:d9:55:70:1e:59:79:b4:07:34:1c:86:4d:90:83:8a:
97:b8:33:be:4c:56:ce:a1:b6:da:e1:83:bb:f0:9d:2b:c9:2a:
3c:05:7b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:58 2026 by rpki-client