Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
File: zPqIwisefFLecaN2Q96jw_zdSVQ.mft (raw, json)
Hash identifier: 6CrwSyR412XECtFoV27PfquxDSS0aK0iEmdAzn9P+Yw=
Subject key identifier: 66:05:FC:B4:7C:D0:BF:86:1B:71:64:43:35:26:F6:02:09:04:9A:22
Authority key identifier: CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
Certificate issuer: /CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Certificate serial: 019CAB6AFB438EFE75C452317D3DB4ACAFEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
Manifest number: 17D8
Signing time: Sun 01 Mar 2026 22:00:40 +0000
Manifest this update: Sun 01 Mar 2026 22:00:40 +0000
Manifest next update: Mon 02 Mar 2026 22:00:40 +0000
Files and hashes: 1: TnpKsIrCpfum69mVWYffLpmGkW4.roa (hash: GTcF25unpZajDdgtvW9ktN1du2kJWKPqouAAWsJtWlU=)
2: iUEHX1o0_l8jTQlhzAvjptzhPL0.roa (hash: DpWo5iq7cHsCZy0a6PUHW0Vs0n1oWSh3Ty0O4gm3/dU=)
3: zPqIwisefFLecaN2Q96jw_zdSVQ.crl (hash: nzJza/PJMX4JHozp2kTh++hjKv7ovNjCLt4P4Kp1PMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:fb:43:8e:fe:75:c4:52:31:7d:3d:b4:ac:af:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Validity
Not Before: Mar 1 22:00:40 2026 GMT
Not After : Mar 2 22:00:40 2026 GMT
Subject: CN=6605fcb47cd0bf861b7164433526f60209049a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:f0:88:e5:51:0d:1a:24:8c:43:d2:0e:df:
a5:64:87:fc:38:40:39:96:88:43:12:73:28:5a:3a:
63:75:a4:17:22:6f:cd:18:ee:d3:aa:63:42:85:20:
77:91:dd:3d:fc:ed:d4:c9:d7:6b:bd:70:97:2b:5d:
c1:41:55:9a:09:97:e9:8e:c8:1d:56:8d:d9:7e:2b:
14:ac:f5:29:c2:8c:4f:5a:9c:95:d5:1e:08:30:be:
74:19:a4:2c:d6:69:14:5c:6f:ee:17:13:5b:e1:b5:
98:b6:fa:71:dd:9c:2f:bc:56:a2:69:f0:f6:75:6e:
3d:75:f7:35:e7:8c:31:4a:7c:6a:b0:8c:bf:c3:a5:
c0:67:aa:3f:b0:d3:01:1f:b4:64:54:62:82:b4:93:
ec:22:c7:e4:9d:db:ad:ba:50:98:1d:f5:ef:25:c9:
cd:af:bd:35:fa:fe:0a:6d:4d:b3:f9:6c:c7:09:fc:
da:0a:82:1b:0b:6f:21:3b:19:1d:22:e5:98:06:13:
d4:c4:9a:55:2a:6e:a7:51:f8:6c:4b:6a:f7:3a:16:
15:f1:9e:04:34:11:22:9a:5f:14:be:ac:62:d3:31:
f8:f6:5d:1d:42:ca:04:81:57:40:72:a0:b8:71:b9:
11:4e:fe:7b:68:f3:ba:45:32:74:36:0d:dd:40:ba:
1e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:05:FC:B4:7C:D0:BF:86:1B:71:64:43:35:26:F6:02:09:04:9A:22
X509v3 Authority Key Identifier:
keyid:CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f1:e0:63:8c:d6:dc:5b:aa:99:30:8b:40:39:e8:be:fa:c3:
37:c6:6f:55:a5:0b:10:b2:8e:ea:9f:c6:65:67:e0:89:87:9a:
84:db:d8:2a:74:34:b5:2b:2d:12:c6:c8:3e:ec:82:9e:6e:e9:
dc:ce:0a:a5:73:d8:34:6d:27:87:b3:15:f3:8e:57:49:0d:df:
5e:89:22:62:d7:c1:97:61:38:c1:97:55:07:49:20:21:28:19:
7b:27:37:02:4d:23:8a:85:62:03:17:e6:e4:81:6e:27:00:f2:
a3:e4:95:cd:a3:7c:ce:33:ce:f4:dc:86:b5:a5:54:40:ee:e6:
12:3a:b9:89:12:d7:b9:1a:76:4a:c6:ab:53:9b:ab:31:bf:f4:
75:c9:86:44:e7:c9:8f:cf:06:cb:22:e9:30:25:b7:92:ae:8b:
df:d9:e5:85:0d:e1:0b:b0:41:16:b9:6d:68:a8:9b:45:c8:6f:
bb:5e:92:e5:ea:19:85:47:5e:e4:59:4d:a4:ed:8f:cc:7c:cd:
7f:6d:d0:da:5b:64:7f:36:31:c0:22:11:5f:e4:ec:64:4f:95:
17:be:42:64:da:2a:3a:32:8f:96:2e:22:47:14:a4:f5:4c:b3:
5d:97:cb:82:ba:85:01:ee:35:53:a6:c5:89:e6:ac:f2:2f:9e:
15:61:9f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:37 2026 by rpki-client