Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
File: zepK3ugLBlGc5A3T0T8oup9XWVc.mft (raw, json)
Hash identifier: hRWGvu/LNvCJXrHfaCPL2RSZP/xt+7JV1EVuDh8fS3Y=
Subject key identifier: D0:55:88:E2:21:93:C1:F1:AA:68:3A:1B:DA:57:63:99:D1:9C:B3:0A
Authority key identifier: CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
Certificate issuer: /CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Certificate serial: 019D38D2AC341D7056DDDFBDFE8B2F952CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
Manifest number: 15A0
Signing time: Sun 29 Mar 2026 09:00:23 +0000
Manifest this update: Sun 29 Mar 2026 09:00:23 +0000
Manifest next update: Mon 30 Mar 2026 09:00:23 +0000
Files and hashes: 1: q_Sdx_pDux5HG_B-3KML3ZxV1Q4.roa (hash: ht/8yca5f/4MvUCuC03a4MjP5eq5Ql1KG2x7zVYULEQ=)
2: v8cGXi_NSEn4R2Pj8ik0gEWzS6g.roa (hash: Tc7POOVIwZMXLz0qNFWoVFFcyKsqMyAM9BmZSJShLfc=)
3: zepK3ugLBlGc5A3T0T8oup9XWVc.crl (hash: jDHaRmDxs8t4O6AHAvVMs7z0e3/P3EGKg6PFWG+uQ/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ac:34:1d:70:56:dd:df:bd:fe:8b:2f:95:2c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Validity
Not Before: Mar 29 09:00:23 2026 GMT
Not After : Mar 30 09:00:23 2026 GMT
Subject: CN=d05588e22193c1f1aa683a1bda576399d19cb30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:ec:0c:47:03:5d:24:e5:5a:49:a3:3c:f9:
c6:f1:f8:50:6b:d7:ed:e7:33:df:4c:54:0e:a2:50:
b5:0d:27:8e:37:8f:e5:61:55:75:bc:8f:37:10:01:
c2:c0:2f:95:7d:6b:28:e8:b3:d5:be:29:6b:0e:28:
39:b2:e3:d6:5f:99:d1:e2:ff:24:d2:fa:3d:12:77:
af:e4:86:3b:02:60:0c:6f:5e:70:c0:4a:56:37:88:
e4:bd:a3:4d:ff:56:5a:8e:84:6d:78:1a:1e:db:62:
08:fe:24:52:d7:02:ce:fa:66:90:c4:dc:91:e4:cd:
67:ce:5d:7c:a5:c5:65:c4:25:47:29:3f:74:22:b3:
1b:2e:d9:da:2b:3b:36:fe:d8:cc:4e:82:e0:9e:3c:
ac:c7:c5:36:80:be:e8:ac:b8:3b:cb:4c:e5:b8:9c:
6a:a3:f0:4f:59:e2:cc:f3:a8:88:30:62:ad:7e:a6:
86:1e:51:fd:e5:74:66:54:d7:da:58:ff:42:7d:02:
9f:01:5c:54:22:15:1f:b0:0c:26:b6:96:cf:b5:0b:
6e:48:3c:61:56:b7:52:53:64:85:c7:52:1f:48:27:
99:ae:b7:b3:03:40:c5:51:38:24:f3:fe:d8:22:72:
30:0d:4a:43:3f:1c:5e:3d:d4:2b:c5:2d:41:85:7c:
cc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:55:88:E2:21:93:C1:F1:AA:68:3A:1B:DA:57:63:99:D1:9C:B3:0A
X509v3 Authority Key Identifier:
keyid:CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:b1:6c:5b:ff:d4:ce:53:0b:cb:d8:a9:28:dd:6f:6e:c9:07:
e4:b2:0a:d0:2b:ad:e9:0f:9e:a1:e0:e5:c7:fb:ec:cf:17:4d:
7c:3f:35:90:e5:7a:ed:15:6c:54:cb:bf:55:fa:d0:db:cf:a0:
74:8a:15:b1:16:54:e0:5f:e1:ed:d7:a8:23:45:4e:b6:a8:4d:
b0:e6:56:f1:2a:31:ff:a1:ef:25:59:29:3a:62:85:0c:e1:56:
60:f1:b4:35:d4:f3:89:56:87:f3:31:6b:6b:1e:53:f1:b5:18:
e2:4b:35:24:8c:c2:11:f0:86:a3:f6:01:1e:24:59:02:0e:2c:
a6:29:e7:a7:b4:9b:81:b6:1b:b4:00:77:a4:a1:33:a0:e9:34:
bd:d3:40:a3:4e:9d:c4:77:52:97:b2:a9:f3:e6:dc:1d:58:c3:
e7:c2:1a:fd:82:b0:f2:00:d7:41:c1:da:81:d6:1e:50:01:37:
55:18:b8:d4:ff:2c:02:ea:18:7c:f5:bd:41:f8:ae:a0:a4:32:
81:f8:85:81:7e:e6:fc:ac:96:8e:17:df:8d:0b:f6:aa:44:5a:
58:a8:45:a4:d3:be:78:85:48:2d:e5:d3:f9:b4:c2:13:40:fc:
7d:a2:a2:25:bd:e1:a8:1e:4b:cc:1f:86:19:4d:85:e7:43:a9:
80:cc:c9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:56 2026 by rpki-client