Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
File: zIHVTcD9FqySU0uaeA4mdksvj3s.mft (raw, json)
Hash identifier: hZOl2lU5toi2oogXsrR5JSmqchr78UJgwFXtYYlXW2k=
Subject key identifier: C0:6F:DC:DE:12:06:8E:C4:5C:73:15:64:FA:38:38:CA:6B:95:80:A3
Authority key identifier: CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
Certificate issuer: /CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Certificate serial: 019CAD59DFD42D3A2BE379D28C8F30D857D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
Manifest number: 1243
Signing time: Mon 02 Mar 2026 07:01:14 +0000
Manifest this update: Mon 02 Mar 2026 07:01:14 +0000
Manifest next update: Tue 03 Mar 2026 07:01:14 +0000
Files and hashes: 1: bvZFPCvF4Igp5im9CQi4MSj0eOc.roa (hash: SLYZCRjXEHo6LL4IR+75+DXz52FJqPAYvzqcrr6DgqE=)
2: zIHVTcD9FqySU0uaeA4mdksvj3s.crl (hash: C/1NWSL7EsyGBOp0rM799uXr2Xyy2y0oNYA4pNqjzT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:df:d4:2d:3a:2b:e3:79:d2:8c:8f:30:d8:57:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Validity
Not Before: Mar 2 07:01:14 2026 GMT
Not After : Mar 3 07:01:14 2026 GMT
Subject: CN=c06fdcde12068ec45c731564fa3838ca6b9580a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b2:ff:fa:d6:67:c2:00:18:ae:3a:4e:b8:9e:
ff:fc:ea:40:11:dd:b2:9f:9e:25:a0:bc:eb:f9:d9:
9f:40:6e:8f:5c:48:56:d5:5d:98:72:59:99:0e:8a:
97:83:b6:e4:1c:29:7e:ef:b6:c9:a9:63:a3:7a:d5:
4b:be:b8:64:58:cd:55:90:9e:72:55:e1:18:11:b4:
9f:81:a2:7d:cb:3a:90:45:0f:ec:ab:33:dd:bb:87:
95:5c:27:7a:98:69:bf:3b:a3:0f:7e:72:ff:99:75:
37:58:59:a3:ce:0e:10:8d:a7:94:34:dd:ce:09:06:
ce:ac:a6:62:3f:f6:35:33:7e:90:39:9f:92:93:c6:
e6:ec:64:b3:84:45:7d:11:72:70:89:25:35:7c:1c:
e4:8a:b6:20:1b:1a:e8:61:c9:16:f0:9a:bb:6a:ba:
43:1b:56:0d:57:40:86:c0:b1:b6:ec:fd:0d:45:08:
80:ec:29:7e:67:a3:dd:23:da:74:6b:7a:6a:7a:44:
a0:9a:ad:64:0c:7e:4f:5e:cf:1c:27:7b:61:1a:d3:
e3:89:7c:00:71:1f:26:5e:58:5f:e5:98:ce:83:4d:
10:12:9e:f1:3e:d0:72:e3:7f:d6:02:c0:a5:cf:07:
72:25:a0:f0:27:b0:73:43:e1:71:07:ec:f5:33:2a:
f6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6F:DC:DE:12:06:8E:C4:5C:73:15:64:FA:38:38:CA:6B:95:80:A3
X509v3 Authority Key Identifier:
keyid:CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8c:1f:38:14:22:c3:5d:7b:f9:bc:c0:58:f8:a2:34:e6:26:
05:d4:79:b2:a5:e9:95:40:8c:f2:e5:2d:ce:6b:13:02:80:8e:
6b:b4:c7:d5:73:6d:bd:56:22:79:ff:9f:c8:b2:9b:70:ba:23:
ab:96:a2:98:40:36:84:38:a6:92:3a:33:d4:f1:28:86:5b:c8:
38:a1:19:9b:46:9f:47:d1:ec:3f:a3:14:1c:c4:1c:4e:c0:0a:
3e:b5:c6:22:3a:50:33:58:4b:7c:e3:08:2e:1b:08:32:d5:5e:
8d:fc:0d:ac:f2:e9:4e:f0:57:b8:24:c9:ad:63:02:19:8a:ad:
67:b6:5b:73:d0:6e:f3:e1:a3:d9:f9:28:9b:38:a0:c5:e0:f6:
2b:2d:49:9c:90:b0:ef:b8:98:87:d7:d3:2a:11:90:f2:22:49:
c2:39:80:85:19:6c:8d:20:9e:52:44:a7:93:32:8d:18:d3:7a:
81:a9:bf:d4:2c:20:18:58:72:93:31:26:3b:75:9d:65:7d:48:
bf:8c:4b:21:41:ce:7a:10:38:85:53:53:56:ad:72:79:6e:68:
a6:38:98:98:cc:c7:f5:75:f9:78:6e:1c:81:a4:1f:8e:8b:82:
51:31:6a:54:4a:88:ba:f0:ac:84:88:d2:f2:9b:ff:8b:20:4f:
78:47:b6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:54:36 2026 by rpki-client