Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft
File: zE1IcI2lBUlZ5hilguKMFV_vET8.mft (raw, json)
Hash identifier: uA0iuWx6Y0WG1ys9UQBoAqVZI9zZfSrOFqnRIzmBaX4=
Subject key identifier: BA:2F:7A:D8:C6:46:79:AA:4C:8C:22:8D:B8:E7:B2:FC:B8:15:E1:FB
Authority key identifier: CC:4D:48:70:8D:A5:05:49:59:E6:18:A5:82:E2:8C:15:5F:EF:11:3F
Certificate issuer: /CN=cc4d48708da5054959e618a582e28c155fef113f
Certificate serial: 019D389C2B9276047017263ABB05501BEAAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE1IcI2lBUlZ5hilguKMFV_vET8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft
Manifest number: 07EB
Signing time: Sun 29 Mar 2026 08:00:52 +0000
Manifest this update: Sun 29 Mar 2026 08:00:52 +0000
Manifest next update: Mon 30 Mar 2026 08:00:52 +0000
Files and hashes: 1: 46wXiqms5HpiGBoK15ocXo29pM4.roa (hash: oBJWgh+2jPc8gknL0v2rnOXcYX3sL1PfoR3y8FKwdXQ=)
2: zE1IcI2lBUlZ5hilguKMFV_vET8.crl (hash: eZdLIq6ox+gEdZhs8iw0Q1fLTybaMax/xsyGT8/wMiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zE1IcI2lBUlZ5hilguKMFV_vET8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:2b:92:76:04:70:17:26:3a:bb:05:50:1b:ea:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4d48708da5054959e618a582e28c155fef113f
Validity
Not Before: Mar 29 08:00:52 2026 GMT
Not After : Mar 30 08:00:52 2026 GMT
Subject: CN=ba2f7ad8c64679aa4c8c228db8e7b2fcb815e1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:48:80:23:68:24:93:8e:1d:06:a7:f0:59:73:
c4:b1:93:c3:ab:86:0b:00:15:17:62:e5:4d:83:3d:
eb:3e:e3:ac:3b:88:b4:21:8c:01:92:71:6a:73:bf:
e1:09:f0:b5:74:b2:a7:13:b4:04:9c:3e:eb:d2:e1:
6c:d1:4e:f2:64:48:6b:b9:63:92:ab:54:41:af:11:
15:f5:a8:ef:7c:d9:75:4e:9e:1a:66:28:10:da:2f:
11:22:3c:4a:c8:78:d5:c8:63:bd:ae:77:b7:f6:3f:
b8:af:05:f5:08:ce:0c:cb:90:54:94:59:2b:1b:20:
06:63:5c:22:1b:e6:12:cf:f8:a8:e0:20:e0:d9:ca:
e5:eb:03:c9:25:41:03:68:36:df:49:bd:32:6f:6a:
7b:30:44:cd:c0:45:d8:fc:ea:5c:24:df:19:32:3b:
0a:1e:16:28:e8:90:5c:d6:a7:4e:70:69:0a:5e:43:
d9:ae:78:fb:ce:fc:97:f0:dd:0f:ed:73:61:de:88:
16:4c:30:c2:a5:cb:66:bf:30:43:2c:8a:69:d2:3c:
b0:25:37:c5:46:75:9c:47:41:41:02:e2:15:9f:46:
fc:58:3f:f5:00:2f:a5:de:f1:48:7d:38:bd:bb:60:
e9:b6:2f:1d:67:5f:af:e4:93:b4:eb:b6:17:c9:01:
45:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2F:7A:D8:C6:46:79:AA:4C:8C:22:8D:B8:E7:B2:FC:B8:15:E1:FB
X509v3 Authority Key Identifier:
keyid:CC:4D:48:70:8D:A5:05:49:59:E6:18:A5:82:E2:8C:15:5F:EF:11:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE1IcI2lBUlZ5hilguKMFV_vET8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:cf:ea:63:a8:b6:ed:3e:d2:55:1e:01:39:02:f8:fb:04:11:
91:ce:f0:86:d6:60:69:7e:2c:5e:cb:13:a1:21:44:73:b8:49:
26:b1:ca:df:64:b9:3a:15:70:b3:4c:1e:7b:e7:79:70:3e:92:
42:33:79:1f:82:c3:85:e9:cc:7b:ad:02:f0:2c:66:3b:dd:b2:
f0:c2:2a:ff:cc:92:6e:93:5f:e0:d9:dc:fd:2d:34:17:1b:7c:
bc:99:9b:c9:16:61:bd:4b:84:d0:2e:10:fe:c8:0a:d3:cb:d2:
cc:b3:a9:d1:84:8d:1b:8c:89:e4:52:0d:4b:8f:e7:48:cb:1d:
20:00:ca:61:b4:fc:80:ff:ba:be:4f:0a:36:55:31:47:aa:11:
9e:48:4a:9a:ec:87:96:05:62:24:94:98:70:11:7d:3a:a4:d8:
54:b1:f5:6f:72:ec:75:86:bd:83:2e:4d:73:a7:58:6d:86:84:
df:0e:70:c4:4f:8e:ef:c3:ce:cc:64:5a:67:19:0b:77:c4:69:
c2:9c:6b:11:78:8d:3e:96:d5:e6:4a:2e:0b:8b:e2:43:be:1e:
3f:dc:58:ed:87:8c:7c:82:8a:f0:cb:75:5d:0d:5b:80:3c:06:
7b:84:81:a0:74:4d:bc:a1:2a:0a:1c:0f:e2:09:e5:0b:12:93:
72:9c:9c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:21 2026 by rpki-client