Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
File: Zl5NfqijRwyXA-51UUgcNvd0_rs.mft (raw, json)
Hash identifier: At0JlvF8fzFnbHOEdosLJYYByoWIZg0t8IUdprch8lY=
Subject key identifier: 78:89:18:98:84:56:90:6F:D2:9F:E0:1E:B4:27:EA:3C:DD:CB:28:BE
Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
Certificate issuer: /CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Certificate serial: 019CB95E61103596329455AF7151F8D55811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
Manifest number: 156A
Signing time: Wed 04 Mar 2026 15:01:35 +0000
Manifest this update: Wed 04 Mar 2026 15:01:35 +0000
Manifest next update: Thu 05 Mar 2026 15:01:35 +0000
Files and hashes: 1: 3dDFlJIiwev5JNzj0uspF-q-hAM.roa (hash: 2MPQXp2XuzXpOvR5MvmUSNMeQLpCxYJhhEk2RjVnZhI=)
2: Zl5NfqijRwyXA-51UUgcNvd0_rs.crl (hash: 8n3aAKYaC6wBk+UcLT8PAjKWlJlLCtDcbAetA5ECOnk=)
3: tXb-ZOETTYTckpb9Qysc1kmvy6I.roa (hash: ecwsDlNutKSR5EQe4HHz/G8gZ+2PHPrWaHUQyPF5OHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:5e:61:10:35:96:32:94:55:af:71:51:f8:d5:58:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Validity
Not Before: Mar 4 15:01:35 2026 GMT
Not After : Mar 5 15:01:35 2026 GMT
Subject: CN=788918988456906fd29fe01eb427ea3cddcb28be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:ae:e2:24:a9:91:30:8e:37:ec:05:a4:e6:
bf:f1:53:01:25:f4:ea:b7:ab:01:03:ab:a5:95:81:
e4:7f:7c:7b:70:9c:77:a0:10:a6:b1:d8:7f:b0:dd:
4d:63:30:05:b5:da:a1:a2:a4:14:f4:3d:d0:f4:21:
14:aa:51:8e:2b:78:c5:a5:de:c9:7c:66:1b:ec:ed:
67:bc:16:0c:ab:1f:4e:d8:df:4b:64:72:3a:63:ef:
74:35:ad:e1:61:83:1b:23:22:5a:5a:3b:42:0d:48:
6b:84:c8:e5:2a:ca:02:f6:eb:f3:7d:65:4b:da:d8:
83:00:94:11:36:10:7d:3a:ba:36:fa:e3:ab:13:bc:
9d:ec:ae:f1:33:de:8d:c4:6a:b8:94:e6:8d:2d:6e:
20:6a:ae:7a:8a:51:12:3d:77:0a:45:25:a9:8b:45:
86:34:0b:91:b7:71:dd:cf:6d:08:26:88:b6:19:58:
7c:f8:f7:e4:7f:af:ba:5c:fe:9b:f7:2c:12:f7:39:
fa:c9:c9:d0:b8:1f:c6:29:1a:6e:5f:08:b1:4b:a1:
68:a0:92:49:66:94:22:f8:a0:6c:8b:1a:d3:df:e2:
7e:df:15:11:23:55:e9:cf:76:5a:82:03:39:4b:52:
bd:f5:6a:d8:55:fe:35:1b:69:7b:55:71:0f:56:86:
9a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:89:18:98:84:56:90:6F:D2:9F:E0:1E:B4:27:EA:3C:DD:CB:28:BE
X509v3 Authority Key Identifier:
keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:cb:76:bd:86:88:76:10:2a:db:e4:df:a8:59:69:cc:41:b2:
87:fb:37:9a:12:29:98:e4:b0:c7:12:9b:68:24:90:9a:26:48:
90:d3:9e:62:7c:22:50:e0:0f:b3:1c:53:3b:1d:18:dc:d7:4c:
47:3c:d8:fe:db:8d:1f:5f:ea:b4:d5:31:2b:3d:d3:c1:69:a0:
89:f1:9c:9d:ef:d5:25:a9:8e:5b:e2:d7:fc:bd:3e:1e:50:b2:
64:53:36:d2:ca:0c:f8:8b:f1:f0:6b:62:22:38:3e:36:9d:3a:
d4:e4:f4:cb:cc:ef:23:86:4c:c9:06:fd:1b:63:af:9d:59:ed:
6e:f2:f0:e3:d5:0d:e3:dd:35:33:cf:3e:0a:05:4f:f5:15:10:
e8:ce:4c:6e:6d:54:04:d5:c0:b4:96:c2:8a:31:ec:00:87:6d:
a1:53:48:de:c5:83:e1:63:92:e6:ae:2f:bd:d5:e0:cd:20:42:
42:09:f6:d0:a6:3e:86:44:11:9b:a0:43:66:fb:83:44:25:94:
a2:7a:ef:30:d5:b2:e3:c4:2e:f6:cf:81:b0:3c:c9:74:c5:55:
3c:74:02:f4:05:cb:bc:3c:02:aa:9a:10:f5:b0:23:fd:aa:8d:
85:13:7b:86:e1:9e:4a:a1:bd:42:e2:5d:83:f3:0f:bf:88:1e:
fd:cc:ab:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 22:23:59 2026 by rpki-client