Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
File: zQYCONBmjUWgQWGKxd92f1mgxK4.mft (raw, json)
Hash identifier: YYEKIKZQVzb78KC5EZL3q8AeEDqnLE9TjCVcpzmwhnk=
Subject key identifier: 80:3F:F1:7C:63:72:40:78:BE:1F:EB:17:2D:F7:8C:79:EC:32:97:19
Authority key identifier: CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
Certificate issuer: /CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Certificate serial: 019CC7BE297F71ACBBF471C2BE76EF469DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
Manifest number: 0EE5
Signing time: Sat 07 Mar 2026 10:00:54 +0000
Manifest this update: Sat 07 Mar 2026 10:00:54 +0000
Manifest next update: Sun 08 Mar 2026 10:00:54 +0000
Files and hashes: 1: B0xeJ6OlptEzuwHkDKb2uLt1U_4.roa (hash: 0mnm00N6t5GT0+PQLMuChkiPF3X09nPjo6FNCsIiX9w=)
2: DHWxwhm5BstgQrswTpmXlNRqB68.roa (hash: U4MLvKfxIOpMtW85VWgOrj7JclXnEEYGlYHrxV44rNY=)
3: zQYCONBmjUWgQWGKxd92f1mgxK4.crl (hash: zu6oRuegToXBMMTq6ro0OXWYEdcgLRluIPWYNLdLeKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:be:29:7f:71:ac:bb:f4:71:c2:be:76:ef:46:9d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Validity
Not Before: Mar 7 10:00:54 2026 GMT
Not After : Mar 8 10:00:54 2026 GMT
Subject: CN=803ff17c63724078be1feb172df78c79ec329719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:be:8e:6e:c7:97:79:03:4f:1a:bb:8e:e5:08:
bc:87:18:59:4a:19:63:bc:00:b4:4b:81:5b:33:d8:
8e:06:2f:2c:4a:1b:22:6a:75:64:95:75:d5:1d:50:
02:14:6f:a4:d7:81:18:6a:4b:9c:67:5b:f0:9d:e7:
25:45:5e:67:37:6c:22:92:46:4f:3e:d5:03:74:fa:
1c:f2:95:4a:b2:bc:a9:70:ec:a5:2e:50:c5:76:ce:
a2:29:66:e1:2a:8d:a6:af:b0:b9:66:93:4d:bc:77:
c3:36:80:eb:1a:53:47:f5:a8:7d:18:60:7e:ed:85:
77:64:a8:73:f9:cb:87:99:49:2d:f5:60:a9:f7:c2:
34:4d:1a:65:0b:c7:c0:39:d8:ef:2a:b5:d4:1d:79:
18:1f:89:77:ff:37:86:f9:bf:af:8e:33:26:c4:07:
89:2b:bc:3c:92:f0:7c:c4:b0:dc:9d:b3:59:27:7c:
73:4d:d0:2d:1f:cf:d8:49:ff:38:8a:95:1e:f7:43:
01:7d:1b:1e:4d:70:bf:10:ee:0a:99:8b:f9:55:23:
a0:88:3e:63:a6:24:8a:67:c4:7a:30:95:02:bc:8b:
27:98:81:8b:1f:b7:c7:b3:53:0a:51:dd:82:ba:09:
3f:ef:31:55:d3:68:96:4d:d9:c0:c3:08:46:e7:2b:
ba:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3F:F1:7C:63:72:40:78:BE:1F:EB:17:2D:F7:8C:79:EC:32:97:19
X509v3 Authority Key Identifier:
keyid:CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:20:75:da:f8:3e:4e:9c:49:65:19:80:d7:d2:01:67:b8:82:
7d:e6:4d:c7:56:c8:32:dd:1a:3e:b1:ac:e7:22:d4:3b:40:5b:
75:f3:59:9f:40:bf:05:b2:a7:2a:f7:2e:ff:e3:e0:f6:92:fe:
bb:c2:fb:3d:90:f2:be:6d:d5:41:91:86:ff:91:46:d1:1a:0c:
39:fb:42:74:bd:2d:eb:5f:2f:23:bc:41:e3:c6:0b:f4:20:21:
c8:11:13:38:10:36:af:59:d7:f2:68:cc:0a:98:63:4e:26:24:
e7:32:31:0e:3c:39:26:37:df:ea:f5:b4:06:a6:1f:ca:5f:d8:
f9:d4:08:67:bc:80:49:8c:bc:be:8f:90:43:a6:16:4a:89:dc:
f7:1c:3e:13:45:89:65:bb:ee:94:4e:5e:14:cc:02:b7:33:fb:
fc:1e:b6:5d:57:87:bb:6d:c1:d6:8e:a0:72:b4:64:93:48:6a:
50:32:fe:e3:5a:36:78:14:fc:98:3e:5c:0a:5c:8e:c3:e6:b7:
33:31:e0:95:42:ca:a1:bb:67:05:37:4b:17:86:7d:b4:23:6a:
45:93:d2:69:d9:75:a6:65:22:59:ff:7a:19:75:fa:fd:db:9f:
49:5a:07:85:b1:11:d6:74:52:8b:6b:7f:5b:04:88:5d:b6:94:
05:24:01:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:22:37 2026 by rpki-client