Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
File: ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft (raw, json)
Hash identifier: sg6SHGqb3MouCjuDYMamLvWFKnXDFc50wg7dW8sWurA=
Subject key identifier: F8:29:86:EA:A3:D2:91:DB:75:14:09:75:12:EF:50:7E:08:40:9C:FB
Authority key identifier: CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
Certificate issuer: /CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Certificate serial: 019CAAFD22EA3E79A706F5DBFAF5015B314E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 20:00:42 +0000
Manifest this update: Sun 01 Mar 2026 20:00:42 +0000
Manifest next update: Mon 02 Mar 2026 20:00:42 +0000
Files and hashes: 1: 1-QSBwL6YQNpRB581xj69Bh0HK0w.roa (hash: 5GWzZ29/zinUcM0sRPnSs7Ch4eJ52d1lcTmUUiRhGHw=)
2: 1-kWvGwe3rzaIsRc1gmxCFz8lXgU.roa (hash: daW3ebtu2fPNsARxfFCyXqL/swO4wfgF7RvbMI+oQl0=)
3: vVYDZup6TPMR4MVl16L5Tcxugnk.roa (hash: YNo9hVKBV6+t6/2iujMaXScihQA5Uyp7lluOC3Eyk8o=)
4: ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl (hash: oXV+xFmC9G6naidyei+K/3Z2vVwI33IvdgEFiy0Ym7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:22:ea:3e:79:a7:06:f5:db:fa:f5:01:5b:31:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Validity
Not Before: Mar 1 20:00:42 2026 GMT
Not After : Mar 2 20:00:42 2026 GMT
Subject: CN=f82986eaa3d291db7514097512ef507e08409cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8a:48:62:08:3b:e5:e7:6d:f5:18:44:82:c4:
80:8e:dd:98:87:c1:bd:e8:a2:fc:52:a1:39:93:c7:
df:59:7d:58:5d:55:2a:dc:da:b3:c9:45:d9:ab:7b:
04:cb:ce:d3:bb:a1:92:25:cd:9c:c2:e8:43:94:99:
1d:43:61:c4:64:03:87:52:b0:89:dd:12:e5:dd:6b:
82:2e:d0:95:e9:93:18:92:c6:00:b9:5a:4f:37:03:
03:ad:37:7b:e7:f5:6f:4b:7e:9f:24:ef:d2:c8:7b:
1d:5e:75:9e:7d:28:1d:10:b7:bf:af:d1:df:af:d7:
77:cb:60:e7:6a:13:1f:44:37:26:c5:be:29:85:a9:
d1:fc:17:2e:b5:19:e0:74:67:f6:b0:60:16:82:66:
fb:68:3a:65:97:16:1e:b9:7f:3d:cf:7a:60:3d:2c:
80:fa:72:fe:c7:eb:31:04:21:23:d6:57:3c:31:42:
d6:e1:db:da:bd:1b:62:60:fd:6b:b2:dc:53:f8:08:
b3:20:4e:a0:6d:80:20:90:1e:c5:d5:aa:dd:86:9a:
47:69:b4:23:4d:5d:dd:32:b6:1e:2d:32:e0:fd:2a:
0b:bf:f1:89:19:3d:04:ca:c7:61:28:8c:96:25:23:
54:0a:e2:b8:0f:34:2b:32:7e:07:0b:ea:a1:de:fd:
39:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:29:86:EA:A3:D2:91:DB:75:14:09:75:12:EF:50:7E:08:40:9C:FB
X509v3 Authority Key Identifier:
keyid:CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:03:4f:da:e4:25:35:13:cc:8c:40:56:17:df:98:35:48:22:
b1:a3:42:b6:52:6d:be:b3:86:bf:c1:4a:49:1c:9a:ae:f6:60:
bd:c0:7f:c6:9d:19:27:cc:3d:51:2d:d8:77:3f:0f:d8:bb:78:
8f:2c:5b:9e:50:c7:18:10:26:d4:ff:85:6b:8c:23:65:e6:98:
33:3e:bd:71:a5:1e:48:3f:e7:cb:0f:0c:9f:3c:41:5d:b4:cf:
4a:67:0b:79:8d:11:54:86:19:f1:c1:91:e5:87:1a:83:a0:aa:
50:9a:d3:b1:48:9b:a3:fa:5f:75:5c:a7:f8:e1:56:dc:86:4a:
f2:71:b3:bd:a3:d4:de:4d:3f:0b:80:df:4d:6a:17:21:44:ce:
46:90:99:dc:96:49:dd:77:3a:7c:56:f2:dd:48:2d:14:24:36:
d9:bb:5c:01:24:e5:76:d3:75:32:68:a7:47:f6:da:53:e8:fc:
e9:41:9e:9f:89:10:f9:59:b7:c4:d2:3c:0d:08:27:52:f5:fb:
0c:5d:64:9c:54:e9:08:0a:f0:03:8a:15:0c:f3:87:3d:e3:09:
d9:83:b2:93:85:88:d4:39:e2:ca:25:7e:4e:17:d0:ce:de:fc:
f5:28:92:aa:24:0e:b1:42:27:03:bb:c9:59:df:d3:3a:45:46:
26:3c:23:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:07 2026 by rpki-client