Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
File: zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft (raw, json)
Hash identifier: w9fl2bVih4k/lCG6PpRzoOGhVSBNto1BoyNVcTLtSE4=
Subject key identifier: 7C:8F:A2:8C:45:7C:D2:92:CD:58:71:26:0C:7D:02:D9:E7:BD:03:3A
Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
Certificate issuer: /CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Certificate serial: 019CABD94378F9B1D2F6430D12EC95DD4FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
Manifest number: 1395
Signing time: Mon 02 Mar 2026 00:01:08 +0000
Manifest this update: Mon 02 Mar 2026 00:01:08 +0000
Manifest next update: Tue 03 Mar 2026 00:01:08 +0000
Files and hashes: 1: 1-XBWrk39wjm3jro7FSlqvzI5eVI.roa (hash: Z3LaUQM+InNYUKwF+whvXLIvQsPhPPfm9Yl6XnItz/E=)
2: JJWtpXWJQlgQf2iNmRIQ-olIbmU.roa (hash: nIevIWHZnn6qTnX7U1mI+h/VSclaleHMr0m3T9yMnkk=)
3: i3dZrndLKOdAX4fmBKLNisvgCU4.roa (hash: AOIV+Iu3cvphLn4bbaPQNGarjwL1kFw2bCXNmN94Ucg=)
4: vug7WwjDcsLWq0B1sdDRxAnsvu4.roa (hash: oG3YV+PmdtG6CGV+zbw1qmHUtciH3fi68Ulc4xoYCJM=)
5: zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl (hash: Q3TaPx8CjGBzRorqt4aVMJp69f+VLc1KoOaERrDAc0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:43:78:f9:b1:d2:f6:43:0d:12:ec:95:dd:4f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Validity
Not Before: Mar 2 00:01:08 2026 GMT
Not After : Mar 3 00:01:08 2026 GMT
Subject: CN=7c8fa28c457cd292cd5871260c7d02d9e7bd033a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:11:f3:73:a6:3c:78:aa:8d:55:4b:f5:9e:
e6:a4:b9:c6:cd:a9:96:28:9b:ea:a3:49:c5:0f:17:
d5:41:44:d0:81:4f:78:31:c2:65:97:08:2a:75:51:
44:b9:9d:09:22:fe:b6:30:a7:13:be:c4:1a:ca:8a:
a7:6c:0f:6a:22:22:6a:2a:b5:19:de:d0:c9:3d:b9:
8c:9d:e8:1b:ef:09:5e:d1:14:9c:5d:a0:fb:ac:9f:
ca:cd:18:17:07:0a:dc:82:c4:59:8b:4a:94:67:38:
c1:5d:91:96:67:b3:3f:b3:60:f8:7d:a9:2a:b6:fb:
09:91:30:6b:93:7c:19:66:ae:57:33:7b:a4:a8:ec:
5a:bb:9a:4a:7a:d9:8b:11:b4:13:26:87:0b:c3:f8:
55:d6:60:78:58:e9:5c:a3:2f:ed:03:36:f0:96:2b:
5a:0c:f0:cb:df:f9:0c:9e:53:a8:c4:00:22:5b:61:
37:fa:88:c3:c9:60:61:c8:1e:48:44:a1:20:89:e8:
bc:1b:bf:af:aa:cc:59:4c:49:41:73:f7:6f:00:59:
75:af:c1:0b:42:b0:a5:93:5d:0c:bc:1e:74:1d:60:
f3:eb:a9:e7:7b:a8:66:1f:bf:5d:d0:f8:62:38:14:
64:20:ad:09:f2:4b:8e:40:69:ab:e3:86:e4:6c:b6:
e1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8F:A2:8C:45:7C:D2:92:CD:58:71:26:0C:7D:02:D9:E7:BD:03:3A
X509v3 Authority Key Identifier:
keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:11:64:b3:6e:07:a3:f5:b3:d4:b1:5d:97:95:b8:0b:fb:be:
7d:8d:2d:bc:7b:6a:3f:33:25:1a:53:cb:db:cf:de:5f:a0:91:
a0:f8:d9:d6:07:34:ae:31:99:d5:b2:98:f2:51:b1:19:34:40:
20:e8:67:2f:ea:3b:27:dd:bc:75:ff:2f:16:be:e8:30:69:cd:
79:2b:f8:8a:0a:87:43:c2:dd:0f:09:3e:3e:65:fd:7c:2f:31:
ce:02:ec:f8:7d:2a:d0:51:3a:ae:c5:96:42:89:65:87:95:25:
7d:e7:d9:03:8f:29:02:29:a0:8d:7b:e0:a2:09:76:6c:95:e1:
e1:46:09:53:b2:88:73:63:b1:36:e0:f3:a5:ab:43:39:a4:6e:
81:b6:47:6b:60:35:75:66:e6:1c:1d:b6:39:94:8c:0b:e4:92:
52:88:8b:58:7e:b2:14:a0:55:7a:9c:d4:b5:4e:0f:ae:2a:14:
76:5c:ca:69:2a:d8:74:b8:a8:d6:49:37:46:c7:0c:2c:97:68:
53:d1:06:df:58:9c:13:0f:65:79:0a:6b:fb:60:8f:85:31:4c:
4a:0f:77:be:5e:58:56:77:36:fb:f9:a7:87:20:9a:bd:44:65:
5d:61:00:a5:4a:a5:62:ab:fe:d6:2a:63:1b:d9:41:27:50:eb:
73:2d:f4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:00 2026 by rpki-client