Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
File: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft (raw, json)
Hash identifier: H8WRWVxK4NmE+m/l0x+imIT7oEn7er+WInhh6M/QA8w=
Subject key identifier: 3E:56:4F:C3:5D:E7:3F:34:E2:B4:CA:0E:67:33:3F:D5:FA:EB:2F:41
Authority key identifier: D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
Certificate issuer: /CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Certificate serial: 019CAC7DD5D48B241FA3A0E4FE15F1D4AEC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
Manifest number: 059B
Signing time: Mon 02 Mar 2026 03:00:53 +0000
Manifest this update: Mon 02 Mar 2026 03:00:53 +0000
Manifest next update: Tue 03 Mar 2026 03:00:53 +0000
Files and hashes: 1: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl (hash: Zld6b4sv5cEBOEMjna3YgCkfUqx8FqCiiaejS2564xo=)
2: qo4K2MxKuprqgn2JH-P6sbefGGQ.roa (hash: 5nQ7RiiW8bFTZTK/XJeOeCamYJvNUIxvBcEODwO0sgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:d5:d4:8b:24:1f:a3:a0:e4:fe:15:f1:d4:ae:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Validity
Not Before: Mar 2 03:00:53 2026 GMT
Not After : Mar 3 03:00:53 2026 GMT
Subject: CN=3e564fc35de73f34e2b4ca0e67333fd5faeb2f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b1:2f:17:91:c5:d9:89:38:e7:e5:10:b5:cc:
dc:26:e7:bf:1e:c6:2d:0a:6b:0f:2b:d2:b5:05:64:
9e:f4:cb:ba:0d:bf:ea:84:51:82:d7:67:44:bb:a7:
ac:ed:72:9c:be:b0:0c:e9:42:1d:a9:2f:39:3a:07:
d7:7e:fa:c3:df:d4:81:69:05:00:da:2e:e3:9c:d1:
0d:6e:4c:52:60:7d:eb:ac:c1:6d:98:ae:ae:5f:64:
9f:81:c3:79:98:da:87:92:a7:1f:18:95:2c:b6:f5:
54:22:65:fd:a9:c1:56:9d:0e:99:46:bd:67:68:c3:
f3:41:66:4d:48:c0:54:43:5a:2a:f3:fa:f7:79:45:
0a:b1:7f:50:da:15:05:7d:cb:2f:a0:c8:b8:65:76:
7d:e8:2f:7e:08:21:ae:3f:0a:a2:60:2d:70:cd:ae:
63:cc:20:d5:e4:90:65:c1:70:c7:bf:a1:a5:10:af:
02:04:55:33:a1:81:25:62:28:3a:0a:7a:4c:83:36:
f1:27:3d:a5:ea:b9:d3:0e:33:35:14:38:d5:7f:08:
5e:d9:c5:99:32:95:32:54:ad:5e:c8:25:d1:5a:1b:
c8:d0:90:ad:2d:b9:ff:ec:33:7a:76:1a:98:75:1f:
d2:34:8e:63:6d:8d:bb:c7:92:11:bc:ca:4b:d5:0c:
fc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:56:4F:C3:5D:E7:3F:34:E2:B4:CA:0E:67:33:3F:D5:FA:EB:2F:41
X509v3 Authority Key Identifier:
keyid:D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d0:81:41:cc:d8:17:d2:a7:e6:37:bb:f1:93:8a:e1:14:8a:
45:32:09:b8:56:8f:9f:ff:0d:73:00:0e:be:f0:d0:1d:f1:c8:
a8:92:40:21:94:09:29:9e:fb:99:2e:a9:ec:a8:e6:96:ea:f5:
3f:69:dc:61:ec:34:fe:00:af:25:3b:7d:82:6e:01:31:9b:10:
f0:73:31:52:c1:c2:c3:0e:d0:47:e5:3a:e7:31:1f:ec:84:6b:
5a:56:ee:b2:f0:fb:6b:9b:4d:23:3d:15:f7:ec:a5:be:ab:65:
43:64:1b:3c:0b:bb:c1:57:17:c9:64:3a:a7:b9:1c:7c:ce:77:
e4:8a:32:3f:a9:78:54:4a:2a:96:71:9e:40:89:7c:52:f1:bb:
95:d7:34:be:e8:9e:ae:e0:eb:fb:24:7f:1b:1b:19:8c:e4:bc:
dd:0c:f7:1d:ff:39:b4:52:76:aa:66:ea:47:8b:e7:d4:ba:95:
94:e0:8e:5f:39:df:49:8e:5b:14:39:35:ab:51:a5:e8:94:d7:
8f:8c:2c:54:80:6f:39:45:0d:e1:64:5d:29:2f:12:f4:20:54:
5a:fa:21:21:73:9c:48:5b:20:54:2f:69:48:2d:2a:77:f1:dc:
79:b4:65:ca:44:3e:9e:f0:3c:9b:4c:ac:e6:27:ea:3d:34:18:
af:c7:77:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:40:43 2026 by rpki-client