Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
File: ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft (raw, json)
Hash identifier: jXybjtxShor+jKQ0474z5gkDumfIwosguCIBPbxoRnc=
Subject key identifier: 2C:6D:19:04:F2:13:AF:52:57:1A:F4:1E:EC:E4:8A:52:58:80:64:42
Authority key identifier: CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73
Certificate issuer: /CN=ce235c504019c504021e0662f70133b7ee733173
Certificate serial: 019D389C5FFFAB79CE7227BE9F4EC564FE99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
Manifest number: 1550
Signing time: Sun 29 Mar 2026 08:01:05 +0000
Manifest this update: Sun 29 Mar 2026 08:01:05 +0000
Manifest next update: Mon 30 Mar 2026 08:01:05 +0000
Files and hashes: 1: x9QsQ2MvWpON4kKDHpcRaSQsYcw.roa (hash: 4Sqz3nDe+SLiXa/m3KHMeflziRuyuGIJ470KTQ8nem4=)
2: ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl (hash: gYysOYVVZ0JL+SRS/PkmHCBHHO1bk1KAhltaJ5EtTLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:5f:ff:ab:79:ce:72:27:be:9f:4e:c5:64:fe:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce235c504019c504021e0662f70133b7ee733173
Validity
Not Before: Mar 29 08:01:05 2026 GMT
Not After : Mar 30 08:01:05 2026 GMT
Subject: CN=2c6d1904f213af52571af41eece48a5258806442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:78:99:e9:af:10:62:a0:26:d8:8b:f2:b2:34:
9c:ed:fd:34:0e:26:22:0c:e5:23:b8:fd:c8:c9:ab:
ad:e3:49:d8:8c:f2:2a:f3:ad:cf:ab:32:56:be:72:
35:d0:b8:1f:11:fd:88:43:dd:f5:b8:c6:99:d1:ee:
4d:c1:80:64:91:e7:7a:ee:9f:72:d3:9c:ba:9c:eb:
44:a4:25:63:64:3b:d8:6f:42:35:60:48:99:4b:b7:
9f:a8:ad:42:fe:01:78:a8:ac:52:93:30:a6:3a:4d:
89:31:4f:56:c9:c4:a0:47:e2:ca:47:83:b3:39:a9:
e4:36:94:b6:2f:55:9b:de:cd:4f:bd:cf:bd:1e:51:
87:5c:9e:69:6d:92:65:a4:d1:8e:7e:03:b7:f7:f3:
e9:b0:d4:5c:a7:bb:c0:0e:ec:ab:a6:6d:58:75:19:
8d:7e:f7:16:58:d5:7e:4e:7e:f1:c8:07:de:62:a7:
35:51:c2:89:7a:7a:fb:e9:6b:10:b3:be:75:31:08:
fb:8a:63:15:35:50:83:fe:6a:91:4a:c3:6e:62:17:
89:23:d2:7c:87:3d:f2:f3:4e:7f:01:55:cb:a0:b9:
6a:2d:26:a6:45:d7:86:e6:36:14:cd:0c:af:ca:f2:
ec:32:ac:c5:15:a3:08:40:37:ac:bf:51:5a:1f:c7:
06:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6D:19:04:F2:13:AF:52:57:1A:F4:1E:EC:E4:8A:52:58:80:64:42
X509v3 Authority Key Identifier:
keyid:CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:36:d6:e8:a7:eb:73:e1:26:c9:8f:35:a0:82:43:92:d4:bb:
bd:4d:39:68:85:10:10:b1:74:40:c9:dd:46:56:33:13:59:b2:
a5:94:b2:87:62:06:f3:cd:59:29:f2:eb:1f:20:3e:4e:4e:48:
79:da:d6:4b:80:e3:00:ba:b8:f3:41:10:2c:fc:6f:65:28:24:
73:d5:fa:55:61:be:98:4a:e9:49:14:92:27:d2:6e:81:b4:11:
f1:a0:41:99:54:88:e9:9b:2e:7e:8a:72:2e:75:5b:ea:12:be:
c3:2a:9c:6d:b0:92:47:69:74:a1:63:1c:fd:a6:40:7e:04:13:
16:76:7a:cf:90:e4:7e:8b:18:93:9c:a4:f5:68:f1:88:d5:89:
4d:10:05:15:8a:dc:8d:da:6a:06:39:3d:36:e0:2e:c8:14:8b:
c7:e5:a7:93:a2:d7:71:42:ac:b9:df:05:d6:a5:50:2c:25:64:
19:72:5b:d2:96:cb:a6:3a:66:b7:85:46:18:46:19:9c:b1:1d:
ce:63:4a:72:5a:4b:25:55:e2:e8:08:a5:45:ea:6c:30:c7:eb:
3c:54:c9:f8:75:7e:03:d1:c4:8e:10:94:d7:b2:56:a6:90:c5:
d9:2a:37:9d:df:cd:b4:3c:11:80:6d:03:8a:83:9e:28:d9:d3:
5c:40:60:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:13:23 2026 by rpki-client