Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
File: zs05HGYMPlfFO4fAtS7A0vL0J3U.mft (raw, json)
Hash identifier: rfh5J44myKM4AZAXrlN172ZhGT12ZikfwknDzFKYHdc=
Subject key identifier: EE:C0:04:35:86:63:3B:78:DD:8B:EF:63:3C:87:9A:DF:B4:0C:04:2A
Authority key identifier: CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
Certificate issuer: /CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Certificate serial: 019CE3D9B8BE101346C467F0CA004DA5BFE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
Manifest number: 081C
Signing time: Thu 12 Mar 2026 21:00:22 +0000
Manifest this update: Thu 12 Mar 2026 21:00:22 +0000
Manifest next update: Fri 13 Mar 2026 21:00:22 +0000
Files and hashes: 1: K1WYHWxT9hUhyCzFRd3qp6J1SRo.roa (hash: ofCgYNoPNZP6vNBlI2XsxCW6wFsFBZey/s584doB1q4=)
2: nNBG6JVVM3hu0P20Vu06-SMt-9I.roa (hash: M+TeIwkxE9H/4NhfymMWaPcB1L3//0ChdU6G+C5A8KM=)
3: zs05HGYMPlfFO4fAtS7A0vL0J3U.crl (hash: cEOMTCEVWtqwo7MZWgCEb+zsMjGagVk3vCStKhPzDvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:d9:b8:be:10:13:46:c4:67:f0:ca:00:4d:a5:bf:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Validity
Not Before: Mar 12 21:00:22 2026 GMT
Not After : Mar 13 21:00:22 2026 GMT
Subject: CN=eec0043586633b78dd8bef633c879adfb40c042a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:38:d4:c6:6e:39:35:d4:a6:a0:91:c7:9f:
7a:c8:04:5e:35:4a:1a:25:35:70:9b:ce:6f:74:1d:
56:41:a9:cf:56:94:84:aa:8b:75:eb:a9:dd:6b:1b:
f2:cc:fb:01:04:dc:26:8f:a6:c3:5c:14:b7:21:83:
01:6b:ff:64:e9:71:d7:85:90:2f:cb:92:78:c8:2e:
d6:25:f8:4b:8c:94:3c:8f:5e:79:03:2f:13:c0:95:
67:ea:9d:d5:73:d6:04:6f:19:29:5a:e0:a1:d8:54:
d2:b8:38:70:a1:53:77:7d:18:af:b2:da:f9:a6:74:
b0:34:05:40:84:4f:65:15:f0:3c:6d:4f:1c:94:41:
b9:86:d4:97:53:5a:16:24:6d:94:e5:44:e8:ba:4f:
cc:5c:84:a2:d0:88:11:32:7e:68:af:e3:6b:51:72:
1d:8c:2f:9d:09:59:5d:32:3f:61:4a:ce:2e:75:10:
29:19:62:13:6e:bb:ec:32:87:db:e5:dc:ac:a9:f7:
73:8a:0e:56:c7:32:1e:a7:cb:cc:b2:12:ee:1e:d9:
ba:80:1c:c9:17:1d:fd:b9:52:f2:72:cd:12:1a:ef:
0c:d9:3f:d3:89:49:6f:27:82:37:32:b9:ff:d5:d7:
b8:b1:75:79:79:08:84:6c:82:d9:5c:9e:0d:7d:bd:
e9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C0:04:35:86:63:3B:78:DD:8B:EF:63:3C:87:9A:DF:B4:0C:04:2A
X509v3 Authority Key Identifier:
keyid:CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f1:89:a3:09:a7:39:f5:91:e4:4b:81:db:d1:fa:88:a8:b2:dc:
36:a1:89:ed:63:d0:63:01:b1:c3:dc:66:20:55:6c:14:a9:00:
4c:fa:29:1e:e0:28:b7:0c:bc:33:33:27:05:1a:40:01:9f:29:
42:bb:d7:b9:f9:44:e2:55:7d:a3:55:78:c3:15:f8:57:fc:35:
38:ba:f9:d7:73:d1:59:e7:fd:6d:41:96:84:a3:c4:00:76:5c:
a4:5c:c1:80:56:7e:af:0d:5c:27:cf:88:7b:86:a5:4c:74:e3:
07:8d:c1:16:cd:53:ca:01:38:1b:89:a3:4f:01:c0:7c:06:16:
f9:5e:9d:af:96:f6:f2:5d:82:30:92:42:7f:38:aa:0c:29:2d:
0d:3b:31:e6:ce:18:84:6a:1a:c4:42:b2:97:15:9b:67:22:d6:
e7:a5:b2:63:1f:93:ec:47:7d:d8:d9:a9:2b:d7:93:3b:e7:c3:
15:01:9d:21:5a:7b:90:06:ed:53:e2:76:31:d5:bc:bb:12:dd:
70:de:41:f0:89:11:9c:c2:11:46:be:c7:2a:42:93:aa:a7:fa:
ae:6c:94:40:c0:12:dd:8e:7d:df:f3:8e:25:20:f9:18:5b:d4:
17:8a:c7:f4:19:e0:f0:66:95:df:01:c9:68:4f:06:04:8b:c5:
6e:a7:e2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:29:04 2026 by rpki-client