Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
File: zB5zEzN12VcrjPylyLXx-7vcm7Y.mft (raw, json)
Hash identifier: Dge5XVwLbEiOmr9UJAGAeKWxn6ERoOgfkQUneFcBBm8=
Subject key identifier: 4E:E8:53:9B:98:31:00:48:35:5C:B1:15:A1:04:F8:05:E1:DA:F2:DF
Authority key identifier: CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6
Certificate issuer: /CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6
Certificate serial: 019CE5FF70F164454D38C36C0BAD86E14D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
Manifest number: 09D5
Signing time: Fri 13 Mar 2026 07:00:48 +0000
Manifest this update: Fri 13 Mar 2026 07:00:48 +0000
Manifest next update: Sat 14 Mar 2026 07:00:48 +0000
Files and hashes: 1: VO_sy6lKNExx4MzaK89ZPuk6eio.roa (hash: ECDK2vLnh8ZsV57MTxVkPJ7GlNwC4JIO9uqNonE5Yrs=)
2: zB5zEzN12VcrjPylyLXx-7vcm7Y.crl (hash: jVnt5vSKTVhDrXrKCMsY7fy6yAaWG71LBTA0l8HXhjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:70:f1:64:45:4d:38:c3:6c:0b:ad:86:e1:4d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6
Validity
Not Before: Mar 13 07:00:48 2026 GMT
Not After : Mar 14 07:00:48 2026 GMT
Subject: CN=4ee8539b98310048355cb115a104f805e1daf2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f5:e5:03:05:c5:72:fb:a8:77:59:78:c1:22:
45:60:92:54:1b:c2:65:f4:46:59:35:cc:ef:73:88:
09:30:e6:67:87:77:c5:e9:e1:eb:92:20:69:41:ac:
1f:1f:62:48:4d:fb:b4:9a:11:97:79:f7:9c:c1:fa:
a3:ef:69:41:cd:32:8a:41:68:4e:6a:53:f2:ef:36:
1e:e0:d7:d1:57:83:42:97:28:74:99:32:7b:d3:a2:
01:0a:1d:8d:55:34:65:47:11:2a:54:95:35:cd:ad:
47:e3:67:95:ee:13:b5:7c:4f:d0:00:d2:62:68:1f:
e1:56:98:b7:a9:0e:67:48:d5:bf:74:b1:49:90:1e:
72:48:d6:d2:c6:a7:e4:d8:4c:08:f8:f9:77:54:d6:
3c:4d:dc:d1:24:92:c3:32:6a:f1:75:8e:d2:90:5e:
57:f9:6a:6d:f8:ce:7c:aa:c7:ac:7b:06:4f:3f:05:
86:61:f9:99:b5:54:a8:47:83:18:b9:3b:15:01:b9:
cb:0d:b4:b2:d0:b1:45:08:7f:bd:3d:d5:d3:d5:9f:
72:28:75:7d:cd:0c:9e:70:08:2a:4f:b3:4c:d9:79:
82:11:fc:a1:8a:19:aa:de:5e:b6:de:f4:b5:2e:ba:
d4:75:1f:d1:37:28:a3:a4:e1:22:ad:38:fc:3c:31:
5a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E8:53:9B:98:31:00:48:35:5C:B1:15:A1:04:F8:05:E1:DA:F2:DF
X509v3 Authority Key Identifier:
keyid:CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:90:f5:33:05:f7:40:d3:ef:cc:4a:66:a0:fe:f8:5d:e8:e7:
e1:2f:e3:8d:60:f1:45:10:33:d2:19:f4:0c:18:4b:6f:5e:18:
aa:74:01:50:c7:7d:a9:86:5d:55:f5:d2:6e:3a:1c:fd:2a:e0:
05:36:28:2a:f0:f5:37:e2:b4:8f:12:5d:f2:bb:37:c5:e1:a6:
0a:c7:99:1a:a2:33:ed:de:8f:a8:80:0c:32:d7:b5:d6:9e:be:
e5:ee:e1:85:ea:fa:f3:f0:61:6c:dc:b1:e5:02:db:b5:7a:54:
9b:b0:bf:fa:dc:9c:53:e8:ae:04:93:a7:87:ba:00:8a:79:5c:
79:39:22:30:8b:e2:30:64:57:43:29:13:91:8c:69:2f:b2:88:
47:96:85:ae:bc:82:9b:00:90:a7:77:56:0a:5b:30:d6:d3:bf:
0e:09:77:c1:dc:5a:99:d2:be:85:e3:1e:68:3a:c8:83:8d:c9:
92:60:da:78:52:96:26:84:57:53:23:6f:03:dc:dd:cb:80:5b:
39:2d:09:f1:09:00:20:6f:1c:2a:45:55:c0:98:69:19:80:19:
70:b2:8c:7c:13:9e:60:3b:6b:3a:12:d7:5e:10:63:b9:ee:1f:
2d:f5:e4:11:f6:30:88:01:e4:b8:05:c6:d6:36:d9:ea:3e:5a:
66:df:29:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:56:45 2026 by rpki-client