Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
File: zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft (raw, json)
Hash identifier: XqiZguP7Lj+V8srR/bOgPGw586Gx3Sd1nDsiibWhRc8=
Subject key identifier: D0:2A:0D:CA:D2:D7:84:46:4A:BD:5A:D7:AA:29:35:64:E8:6D:4E:83
Authority key identifier: CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52
Certificate issuer: /CN=cce57dc8234df5f59d67fdc6856bb262e7193f52
Certificate serial: 019D38D333B3D2ED6451660FD90DC93801FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
Manifest number: 105B
Signing time: Sun 29 Mar 2026 09:00:58 +0000
Manifest this update: Sun 29 Mar 2026 09:00:58 +0000
Manifest next update: Mon 30 Mar 2026 09:00:58 +0000
Files and hashes: 1: HpXjeYop5-9dbwuBCfkZCDXpE9s.roa (hash: 8cPnpIvED13OzR+/chtPAusOqJJ0JWVG5pHQBGp1xGI=)
2: zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl (hash: f9rRc8VGN996ov8f/JSr599xmBjXjm5sMal/B4tf6+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:33:b3:d2:ed:64:51:66:0f:d9:0d:c9:38:01:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cce57dc8234df5f59d67fdc6856bb262e7193f52
Validity
Not Before: Mar 29 09:00:58 2026 GMT
Not After : Mar 30 09:00:58 2026 GMT
Subject: CN=d02a0dcad2d784464abd5ad7aa293564e86d4e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c3:39:52:1c:00:a7:5b:c7:49:af:f8:77:cf:
b6:16:f6:0a:a3:bc:72:af:04:13:65:b6:fb:17:65:
95:b2:0d:7b:66:4c:69:89:bc:cb:bb:87:1f:1b:fb:
e7:28:e8:4e:9b:ce:84:a0:fa:29:cf:ed:02:7d:a0:
fd:68:24:0a:a4:a3:19:f2:e1:f0:5d:d0:9c:d9:73:
2e:6f:8d:46:ba:fd:39:ba:dd:f4:a2:d7:e2:f5:1b:
4d:a2:47:c9:d7:87:66:05:8a:7d:cd:7b:82:64:11:
bd:82:fc:ed:8b:b1:2a:19:1b:9f:68:19:12:5b:ea:
27:ed:de:a1:60:42:ec:01:39:68:7a:b4:ad:36:7b:
21:8e:2c:b7:01:81:e1:07:f3:e5:97:f6:54:cb:e9:
70:36:6e:df:4c:da:8b:d8:68:02:b5:1f:7d:16:7d:
5b:01:6e:38:35:88:42:a4:d1:e2:9b:e8:34:0f:8c:
f7:21:7a:af:1d:ce:7a:c3:6a:d8:16:01:5d:4a:c5:
15:ef:54:b0:8a:cb:4c:62:57:db:00:57:e2:9f:a1:
c0:af:42:cb:d7:90:f6:fa:52:5e:46:d7:e0:cb:23:
9d:ba:d3:c8:aa:53:da:ab:ef:c3:28:b8:e2:6a:10:
dc:77:d0:18:0e:41:2c:5f:27:dc:79:27:a4:45:bd:
d3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2A:0D:CA:D2:D7:84:46:4A:BD:5A:D7:AA:29:35:64:E8:6D:4E:83
X509v3 Authority Key Identifier:
keyid:CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:46:97:53:e2:18:e0:d1:e4:99:ef:4c:07:2b:d4:f5:67:a7:
6e:b4:6b:fb:fb:ba:f2:e8:c2:c2:4d:23:ee:16:7e:c5:b0:b6:
65:de:35:98:e7:80:01:be:91:3b:3a:85:a9:39:fa:58:2e:a5:
f1:0f:0e:d1:06:eb:23:4b:e1:f5:fa:f4:ef:3c:b9:2a:0f:9e:
42:85:32:c2:d7:21:ec:5c:f3:56:a7:dd:ab:47:db:56:5c:16:
88:bf:11:b1:a3:3a:ac:45:c5:7a:52:3a:6b:b2:e2:e6:a5:e5:
d3:b2:69:0b:75:b4:90:36:b9:26:26:83:e0:08:97:21:7e:2b:
6f:79:ce:28:00:c4:72:6c:bb:9e:5c:fd:e3:5e:c0:d0:43:aa:
45:2c:10:71:06:41:94:60:50:00:e0:8a:a7:6a:1d:a0:20:bc:
c6:73:f1:86:ac:2d:e1:74:10:df:1d:bc:5b:56:22:77:fc:6e:
b5:a8:70:16:74:55:eb:a2:d5:27:7c:5a:04:d8:64:4d:bb:c3:
a2:5c:49:e0:af:0c:30:dc:9d:d3:65:fa:56:6a:e4:6b:3d:a1:
f3:2b:8d:1b:4f:7a:01:9d:d3:95:53:62:51:2e:04:98:0e:1b:
fb:ac:14:3e:3c:45:5a:84:f9:c4:05:28:18:63:b3:2f:c3:3c:
3d:99:55:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:27 2026 by rpki-client