Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
File: zgDhEsA_aV-fJdO3K7I6TDTtITg.mft (raw, json)
Hash identifier: 68ugNqQ+k+P+Q8b2kmWUsdPin2Kqra40kh9JsuErZ1w=
Subject key identifier: 82:6E:FF:A8:2B:CC:43:D6:75:BC:BB:CF:AC:87:50:E8:C3:23:81:2E
Authority key identifier: CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38
Certificate issuer: /CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
Certificate serial: 019D382DD6916CA42D65EAD85E8111FFFC76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
Manifest number: 1350
Signing time: Sun 29 Mar 2026 06:00:21 +0000
Manifest this update: Sun 29 Mar 2026 06:00:21 +0000
Manifest next update: Mon 30 Mar 2026 06:00:21 +0000
Files and hashes: 1: gX3BQ48KT1SBCIdQ1BTvFv5yWJs.roa (hash: DEwg47W0q/dNOjfYsnuPLnMnC+CGQgRpMPoSjjP+Lr4=)
2: zgDhEsA_aV-fJdO3K7I6TDTtITg.crl (hash: 5pO0DvMcbSJO6jg7Gy2wfCypSz8JB3GHf2o0siaHB8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:d6:91:6c:a4:2d:65:ea:d8:5e:81:11:ff:fc:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
Validity
Not Before: Mar 29 06:00:21 2026 GMT
Not After : Mar 30 06:00:21 2026 GMT
Subject: CN=826effa82bcc43d675bcbbcfac8750e8c323812e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1a:72:f9:cf:48:f7:7d:da:38:b7:3d:b0:1b:
35:7b:66:40:e7:4a:fb:b1:19:c6:17:30:02:d3:72:
66:b1:d4:bb:4d:9d:cf:cc:a1:ca:25:8e:23:38:77:
f1:eb:57:b6:99:2f:76:40:f1:a8:e4:ff:dd:96:21:
4a:e8:15:ce:c0:4e:81:21:4e:76:c3:f4:70:4a:d2:
2d:94:1b:35:08:13:df:ee:7d:29:61:a3:49:f0:7e:
5b:6c:28:9e:04:c5:74:88:c4:dc:63:31:69:a4:eb:
bb:e5:14:e8:c3:97:15:2f:f7:07:0b:f2:e2:d3:d8:
fa:5f:18:44:17:72:f0:02:75:24:78:df:10:4a:ee:
50:cd:49:1f:f6:aa:c1:ad:8a:ec:ca:34:7b:ed:51:
ce:6e:57:7c:d1:3a:92:de:1f:a6:d9:8f:bd:a3:45:
87:57:b6:60:a9:59:55:ed:cb:e3:62:76:56:49:98:
b1:3e:e4:f6:28:79:74:52:07:da:86:d0:49:f0:bf:
2a:24:d6:ba:56:95:ca:4e:12:18:27:fe:ca:dd:9f:
c9:ab:74:99:f0:3c:60:de:d5:8f:cf:12:16:88:48:
88:af:a1:a5:04:67:c1:92:25:96:cc:e3:7f:b7:a1:
b0:c6:43:99:dc:a7:af:08:ec:eb:d6:52:6b:73:64:
73:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6E:FF:A8:2B:CC:43:D6:75:BC:BB:CF:AC:87:50:E8:C3:23:81:2E
X509v3 Authority Key Identifier:
keyid:CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:61:03:a9:dc:92:75:9a:83:7a:58:5f:e0:e8:55:a3:ab:0e:
db:7b:74:26:74:e3:f8:5d:b7:2f:ed:1b:9a:b7:c1:a2:6e:22:
fd:be:79:e3:dc:e8:13:0f:ef:dc:b0:6d:87:4e:d2:02:02:46:
7c:06:bf:f5:b3:23:0e:af:d0:da:2a:85:4c:7f:50:a7:b7:21:
01:f5:24:6b:5e:c4:91:03:62:c9:97:11:31:e3:64:f2:ef:16:
14:2e:14:61:03:2d:43:73:f1:7b:9b:97:bc:e0:64:24:09:b3:
8c:d5:7d:f7:b7:44:94:65:bf:35:13:13:e0:7b:a0:b6:f8:7b:
54:fc:6f:16:f2:00:74:0a:11:9a:88:73:18:cb:6b:4d:28:24:
5a:1f:90:e1:82:40:d6:1a:5a:24:2b:2e:7f:0f:1c:f5:8b:f8:
89:77:ed:de:29:9b:ad:fe:0a:68:a5:68:46:9f:a1:bb:49:f8:
f8:80:2b:92:66:28:ec:8b:0c:bd:e8:51:b7:ce:a9:bd:3c:d6:
7d:d2:a7:88:28:ab:16:5f:39:20:b0:f3:a1:4e:1e:9f:25:38:
de:9d:5e:8d:cb:26:31:ac:60:16:ae:3d:a2:36:04:d6:bc:b8:
22:2d:33:b8:54:87:76:11:67:a2:79:ae:a2:b3:b5:21:ae:e3:
17:3d:fd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:41 2026 by rpki-client