Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
File: zsR4iytpLHEDscueFhf4s2aRDxM.mft (raw, json)
Hash identifier: IYhI9+j5/lrUoMZWLsS9sMAsUhVhk2WdChaWwSpQOYs=
Subject key identifier: 43:4A:19:6E:5B:D6:2E:5C:CC:F6:39:E5:80:13:4D:20:CB:2C:34:74
Authority key identifier: CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
Certificate issuer: /CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Certificate serial: 019CE6DAC943502EBBA81CDF32C642FC0FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
Manifest number: 17FA
Signing time: Fri 13 Mar 2026 11:00:23 +0000
Manifest this update: Fri 13 Mar 2026 11:00:23 +0000
Manifest next update: Sat 14 Mar 2026 11:00:23 +0000
Files and hashes: 1: mnbpCMhVQRFBI3ISYQo0OAu64Rk.roa (hash: kpDbhBfOi3H13L7NCoXgIwXVigbDMdLQLlKaVJyFWOo=)
2: zsR4iytpLHEDscueFhf4s2aRDxM.crl (hash: F2f2oj70girRGmYxfFiYjpuRvh4JPwfVgOmGvd3hoQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:da:c9:43:50:2e:bb:a8:1c:df:32:c6:42:fc:0f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Validity
Not Before: Mar 13 11:00:23 2026 GMT
Not After : Mar 14 11:00:23 2026 GMT
Subject: CN=434a196e5bd62e5cccf639e580134d20cb2c3474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2e:1b:a4:73:be:82:39:90:2e:1c:bb:25:4f:
4b:51:89:ba:69:c4:49:db:45:b5:a3:92:dd:50:82:
ef:ac:26:86:66:bb:41:af:32:00:16:f3:6e:b4:18:
26:f4:79:03:ae:88:de:b0:bf:c6:87:04:6f:05:93:
2e:42:3e:1a:ea:d3:65:1a:95:66:7c:6f:c0:03:77:
77:7f:82:5f:0d:0c:61:39:46:a3:f0:9e:17:df:f8:
95:1a:d1:c2:40:5f:1d:35:7a:40:21:c1:74:48:cc:
35:6f:b8:cc:16:35:e8:c3:8d:6d:71:df:1f:13:28:
a5:cf:c1:ff:d0:aa:62:f2:1d:75:de:c3:0d:d6:d2:
b5:76:ba:2a:81:8a:46:d7:0e:bd:f9:c8:66:3b:c4:
8c:06:17:9b:dc:58:57:9b:87:bd:ff:f1:84:2a:e6:
e3:6f:27:3a:6f:ce:62:77:b1:0a:b2:0e:a2:a4:de:
fb:d6:00:9d:d6:c4:00:ac:8d:b5:4d:42:58:63:5a:
fe:7a:05:11:16:67:84:33:d2:6c:85:79:ef:b4:b0:
f1:bc:e4:94:0f:9f:de:0c:b3:0f:f9:04:6c:2a:75:
5c:d5:de:1f:eb:0d:a9:70:81:bd:39:31:a3:ef:46:
31:f5:02:db:a0:0f:13:4d:4b:07:0e:7f:d8:05:2f:
2f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4A:19:6E:5B:D6:2E:5C:CC:F6:39:E5:80:13:4D:20:CB:2C:34:74
X509v3 Authority Key Identifier:
keyid:CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ff:86:e3:9d:65:05:85:c3:38:cc:9d:49:d6:cf:1a:1a:76:
c7:7a:7c:99:0e:ee:c4:3d:fb:ae:55:c9:65:d7:6f:39:59:d9:
2b:d4:7a:03:e4:66:27:55:cc:9e:14:f2:48:f6:00:f3:f4:d8:
bb:de:7d:7d:f5:0d:ff:95:96:2f:e5:15:c3:79:f5:1a:b7:cd:
fa:43:77:c5:3c:43:62:53:d0:4a:6b:6e:fc:69:a1:80:da:94:
0d:8e:93:7a:c9:92:74:69:f5:f3:b7:4f:76:fa:88:57:e0:f3:
d1:36:26:b4:91:d8:b5:89:b5:77:7f:61:75:c9:ee:2d:23:66:
1c:60:9e:d2:e4:61:f1:4d:39:3e:03:4c:28:5e:68:d0:e8:86:
ba:8a:a1:99:06:73:0e:2a:11:26:e5:a3:54:4c:69:98:32:58:
8f:e8:dc:24:01:10:f4:31:3e:99:0d:80:b8:18:ea:31:88:af:
0e:cc:44:1a:ad:de:fd:e6:0d:2b:fc:0b:75:40:64:e0:53:48:
bd:94:34:7e:ff:07:30:66:29:bd:66:01:a5:21:79:0f:08:ba:
ff:2c:0d:0e:0f:bd:e3:66:a1:59:ad:bf:74:bf:9c:73:2b:0d:
56:60:d0:dd:47:3d:02:77:f7:40:be:35:be:54:00:a3:60:6c:
2e:c0:2d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:58:43 2026 by rpki-client