Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
File: zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft (raw, json)
Hash identifier: A5aKsApo+oO6o79ss5Cal6/t7RWRr8BmZv4HWlJSrd0=
Subject key identifier: 14:44:BC:86:B1:5E:78:38:53:DA:72:1E:5A:1F:57:6D:72:E2:F5:D7
Authority key identifier: CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE
Certificate issuer: /CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
Certificate serial: 019CAC4717CF4AD6EDED5D901B73DC3C6C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
Manifest number: 0E3D
Signing time: Mon 02 Mar 2026 02:01:06 +0000
Manifest this update: Mon 02 Mar 2026 02:01:06 +0000
Manifest next update: Tue 03 Mar 2026 02:01:06 +0000
Files and hashes: 1: Rk6U7RO4py6S9WklbeaSGCJKXHU.roa (hash: HzF7QsaRDlON7L9Y+E6XwRt1hlrnQ4o9Z6yQvpu9Qcg=)
2: zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl (hash: 3UhxhTcDxDVQMi24lkKOgUiVJGQO56EUTsjbKyRwK0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:17:cf:4a:d6:ed:ed:5d:90:1b:73:dc:3c:6c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
Validity
Not Before: Mar 2 02:01:06 2026 GMT
Not After : Mar 3 02:01:06 2026 GMT
Subject: CN=1444bc86b15e783853da721e5a1f576d72e2f5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5b:6d:94:07:4d:da:dc:c5:49:a4:bf:c3:8a:
a1:fc:69:24:73:a5:42:c1:30:74:16:c1:63:0f:5a:
3f:d7:e9:ec:ae:d5:30:dd:06:ba:3a:0d:68:05:b3:
2d:26:76:54:5a:11:b7:5b:b7:62:48:19:0f:8f:c8:
69:ff:37:69:22:5e:82:7e:11:7c:0b:2f:53:2a:64:
d3:c5:59:05:ea:17:46:7e:d3:7e:e8:71:d0:6b:96:
fe:06:72:4b:29:5c:8b:e5:ae:cb:c2:07:84:32:f3:
07:54:92:ff:2b:f8:58:81:c2:14:35:f3:8f:53:27:
49:2d:ab:e0:ab:73:b7:96:6a:7a:8b:8a:b1:03:de:
13:e2:e1:62:52:78:a1:fe:db:3a:c9:35:44:5a:3a:
e1:e2:ff:1c:9b:0c:1a:8d:71:29:57:8f:46:b2:af:
99:66:a0:2a:d1:52:17:1a:4d:5a:a3:f4:73:3d:f9:
d1:ea:1f:ee:d6:ed:e3:28:8c:9c:03:e9:9b:42:5c:
48:16:b4:a0:0a:eb:36:63:ce:5c:d6:00:e0:65:ef:
d6:a0:e5:53:58:18:bd:5f:57:72:b1:ba:70:f2:2b:
ea:b1:bb:16:9a:f6:36:36:dc:57:40:a5:1f:d3:71:
ec:17:37:66:30:62:b9:6c:1d:42:97:72:43:b4:29:
f6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:44:BC:86:B1:5E:78:38:53:DA:72:1E:5A:1F:57:6D:72:E2:F5:D7
X509v3 Authority Key Identifier:
keyid:CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ef:44:ca:c6:c9:44:fd:ce:66:f3:76:d1:04:f2:f2:ce:fc:
02:93:99:37:1e:1b:1d:59:b7:f6:53:53:ff:db:cf:73:d4:6b:
fb:d1:f2:41:15:20:c9:8c:f5:a8:5f:96:61:f0:aa:85:f5:5b:
99:09:0f:83:3a:45:aa:09:20:06:fd:58:4b:80:ea:61:4b:fe:
de:a3:bd:62:e7:77:23:5b:74:11:8a:7e:4b:6d:b5:ed:5e:0f:
c3:e9:43:bb:b4:54:d5:2c:4c:75:0b:be:52:35:fc:c8:73:88:
76:ab:5f:d3:6b:5a:28:97:26:0a:40:fc:fd:82:35:9c:6c:82:
47:0d:d6:2c:27:43:0a:e2:ab:5d:e5:e2:0c:a8:58:f1:a9:0e:
ea:2f:27:12:57:cc:29:0e:d8:b1:cb:dd:85:ff:a6:11:a6:60:
e5:4c:a8:3e:5f:13:74:af:50:e1:a9:a5:2b:34:79:cc:0a:df:
2c:0b:dd:cb:dc:25:5c:79:e5:1e:8b:01:26:d3:ae:f6:e6:07:
73:db:a2:4e:9d:03:74:f1:24:f5:05:c2:b5:d7:5d:30:e6:b7:
e4:48:4c:3c:f9:36:35:6b:22:9d:ea:d6:71:92:b9:62:c5:8c:
ec:78:cc:a5:6b:2a:ce:68:4e:fb:90:b8:ec:3a:bf:cc:93:f0:
b7:52:06:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:19 2026 by rpki-client