Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
File: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft (raw, json)
Hash identifier: ZMRImSW7EHaKYqSw9nKPLUywz80Z6Sz/EeIYS/C3izs=
Subject key identifier: 4D:77:4D:C2:5C:E4:18:66:BE:E9:BF:C7:12:9E:20:6B:B5:39:06:05
Authority key identifier: CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
Certificate issuer: /CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Certificate serial: 019CAEA2BFDF97434A21450063E6F519B082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
Manifest number: 06D3
Signing time: Mon 02 Mar 2026 13:00:27 +0000
Manifest this update: Mon 02 Mar 2026 13:00:27 +0000
Manifest next update: Tue 03 Mar 2026 13:00:27 +0000
Files and hashes: 1: PtaIwv6j_fRPhVi8J0-7j605lCI.roa (hash: TLTnNugB01FAGr+O6mM1yQs38FDf/1kqzR1LqqRn5tM=)
2: iLYecyNvPLJpQj3efxZOTIWXApk.roa (hash: swdILG30N67hGnJzm85h/2MvOrOT4xu46fpnQjTo9Z8=)
3: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl (hash: cUuyUv0EFSiYbc01tg5E/OM6v8M5CSPm3Yr5Hftpi0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a2:bf:df:97:43:4a:21:45:00:63:e6:f5:19:b0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Validity
Not Before: Mar 2 13:00:27 2026 GMT
Not After : Mar 3 13:00:27 2026 GMT
Subject: CN=4d774dc25ce41866bee9bfc7129e206bb5390605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4c:50:f0:87:03:2b:09:e1:7e:ca:9a:0a:2d:
65:4b:04:8e:b0:99:b5:6f:1c:76:ea:5f:81:48:f9:
1c:51:be:5c:d0:4f:d6:31:0e:ad:04:ad:b4:94:8c:
ee:e3:0e:8b:2d:98:d8:05:91:3c:07:4e:9c:c9:15:
ff:65:c0:1f:21:3f:ec:97:ea:be:da:4a:06:1e:45:
07:c6:13:bc:99:f2:11:ee:c0:96:74:a2:a0:f5:b1:
60:65:3c:fe:f1:42:87:71:44:6e:55:7e:02:ef:16:
be:7d:c2:f7:6e:01:10:de:94:da:ab:a6:0a:f2:2e:
14:e6:03:e8:40:19:63:b3:3c:16:c4:ab:58:bb:ea:
79:c1:76:b5:eb:5e:b5:9c:12:e0:6d:1d:5c:d6:9f:
e0:27:5e:df:bc:7a:e6:af:f8:0d:44:63:06:20:1b:
4f:ed:2c:04:91:7c:9f:07:99:78:60:f9:08:ec:91:
cc:34:e5:c8:75:73:6e:f6:bb:22:7f:ff:2b:ad:07:
40:b2:15:ff:1c:f7:3f:25:3a:7d:27:df:3d:bb:ac:
eb:93:66:d3:5e:6f:82:a0:bd:a0:3e:d6:ef:50:15:
cc:22:f9:4b:60:cf:06:ac:72:15:42:dc:5d:8f:9f:
f6:bc:f9:58:1b:0c:e7:35:2a:f5:77:51:fb:4a:a0:
9e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:77:4D:C2:5C:E4:18:66:BE:E9:BF:C7:12:9E:20:6B:B5:39:06:05
X509v3 Authority Key Identifier:
keyid:CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:12:fd:1e:63:2d:70:ec:9b:e2:6b:ed:54:0b:63:ca:91:37:
69:99:d7:ee:76:c8:9b:59:fb:1c:55:4a:58:00:3a:77:31:1f:
f8:0d:da:c7:94:1a:2e:d9:0d:4f:10:10:80:ba:45:da:66:60:
25:13:5e:94:b5:ea:05:bd:a1:7b:62:8e:be:71:97:62:44:1d:
98:ff:21:a9:10:9d:7f:be:8b:35:ea:22:83:0f:7e:76:6e:a4:
e1:b3:be:5d:b9:8c:55:2a:3d:5b:14:59:8c:33:4e:40:b8:b8:
e0:6d:40:59:a9:c8:9e:81:60:1a:1f:73:a2:56:67:71:eb:ea:
3c:32:eb:42:10:e2:8a:76:60:1c:b0:96:9d:28:95:a4:e9:8c:
db:9e:29:7e:db:ad:47:13:f2:5f:59:73:d9:c8:9d:20:c0:88:
3f:58:3c:7d:4f:3f:08:b2:73:41:f3:47:c5:ad:24:ca:9f:b3:
45:d5:ba:c2:13:76:8b:92:e7:90:c8:b5:9f:97:16:7d:f8:37:
01:16:ac:fe:79:fd:c4:c2:c3:2e:5a:c3:58:49:f8:d3:78:ba:
47:58:ac:b8:f0:69:d9:a6:c6:7b:9c:14:b4:3e:aa:f4:c8:2d:
86:d0:d6:42:ed:f2:70:97:c8:49:aa:fd:80:f6:92:84:08:41:
6a:21:4f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:59 2026 by rpki-client