Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
File: zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft (raw, json)
Hash identifier: JErFUUQdm6dH6RNrg8X7EuLsaeyEh2sLTje2lTFoKnM=
Subject key identifier: 3F:F8:53:F5:AC:D9:C5:F1:95:F5:27:15:B2:B9:5B:48:85:78:13:AA
Authority key identifier: CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B
Certificate issuer: /CN=cd7cb97b523c73f1406d63c767c73d9c957d433b
Certificate serial: 019D389C42E387C95DC25C74E37B61CD00D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
Manifest number: 05A8
Signing time: Sun 29 Mar 2026 08:00:57 +0000
Manifest this update: Sun 29 Mar 2026 08:00:57 +0000
Manifest next update: Mon 30 Mar 2026 08:00:57 +0000
Files and hashes: 1: L4Nkof_0pZhXN5_BFlFOSMgeaiY.roa (hash: bde5kTukmqHATGWW/dQkhnT+bwSXC3+2TUXQVaF4eRk=)
2: zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl (hash: L7HfoqTxfJrTwGy9DsF/OjZni67LH9y5UjQppnvjQOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:42:e3:87:c9:5d:c2:5c:74:e3:7b:61:cd:00:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7cb97b523c73f1406d63c767c73d9c957d433b
Validity
Not Before: Mar 29 08:00:57 2026 GMT
Not After : Mar 30 08:00:57 2026 GMT
Subject: CN=3ff853f5acd9c5f195f52715b2b95b48857813aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:f0:46:a6:1f:df:37:a2:d9:60:a1:34:ff:
71:d5:8b:37:5b:aa:3c:cf:51:66:63:60:f8:23:b9:
f1:df:5a:a8:8e:d8:6c:2a:a1:b5:a2:74:27:58:5d:
76:4f:20:7b:64:1b:4b:ff:6d:b0:7c:89:d5:71:b5:
77:e7:94:14:85:fc:d4:23:24:72:10:ff:e5:76:bb:
55:dd:52:31:73:6a:5d:9b:6f:71:94:a6:71:b4:4d:
3b:7c:44:7f:8d:22:1e:80:ba:24:3d:1e:6c:34:f5:
b6:d3:b1:2c:9b:57:d0:f9:04:ff:c9:d8:e4:1a:d8:
f7:ab:f3:34:fb:69:dc:c0:53:26:ca:eb:f0:d3:e3:
41:e6:92:48:61:b2:2d:6b:71:05:c0:42:27:28:ab:
18:7d:b0:48:ca:01:e1:e3:1c:5e:59:64:f2:ac:73:
b0:9f:6c:b5:c9:cd:5b:38:5d:ed:e1:f4:4a:71:71:
eb:11:ae:da:23:57:04:ba:6f:10:36:65:d1:80:da:
9c:92:9a:61:f0:7d:a7:56:85:49:2c:38:bf:4f:06:
a0:61:a2:1f:80:50:9b:e2:a2:b6:cd:81:b4:fb:f2:
88:77:bf:1d:4b:18:eb:7b:29:06:f6:ea:36:9e:6c:
fd:d7:47:2c:af:e2:46:0f:9e:0e:19:7e:a9:e1:04:
b6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F8:53:F5:AC:D9:C5:F1:95:F5:27:15:B2:B9:5B:48:85:78:13:AA
X509v3 Authority Key Identifier:
keyid:CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0e:23:ff:9b:a0:6b:00:21:72:b2:09:e9:15:02:f8:7d:c2:
7b:a2:c7:57:1f:77:bd:02:e5:8e:2c:50:6b:4f:46:b3:14:e5:
0d:18:58:cd:25:bd:09:01:e4:ad:14:3a:36:2a:36:ae:8e:5e:
cb:03:50:ae:30:5e:2d:d6:e0:60:40:c6:da:39:38:5c:5d:c5:
ac:8e:85:42:81:d6:94:b5:c0:3c:05:7b:b1:70:f1:10:c9:af:
b1:4b:54:b3:83:24:34:b8:2e:e3:39:49:08:3d:be:20:4f:39:
10:4e:a5:8d:a5:10:9a:d2:c7:2c:99:c5:45:1b:2f:90:0c:94:
ac:fa:b3:1c:93:f7:20:65:9b:35:74:99:f2:0d:4c:00:f2:b9:
e1:b4:00:e4:aa:52:5a:bf:3b:99:8f:13:08:dc:1f:a3:be:1b:
55:cd:8a:c7:4c:ea:25:09:66:9b:25:b6:49:a7:95:b0:ae:5f:
c7:37:cb:9b:a0:f6:1e:70:07:ae:56:c0:d3:10:ed:76:ee:99:
e6:aa:3d:bc:d9:d1:1b:6f:49:2f:40:fe:ca:ab:88:12:8b:8d:
a5:48:4d:f7:3e:8e:57:1a:8d:c5:9c:5d:cf:af:5d:d7:ea:8c:
19:01:73:06:15:67:88:0e:21:40:57:32:c5:5e:a5:01:88:78:
25:c8:e2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:36 2026 by rpki-client