Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
File: cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft (raw, json)
Hash identifier: Vj/UxxJXAtYvLNtWi0txooaPh27mIiuoKVyIehBD3cc=
Subject key identifier: 3B:B0:FA:B0:C0:E4:83:62:F9:48:A4:E2:2C:0E:A3:AE:69:8F:E6:B8
Authority key identifier: 71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40
Certificate issuer: /CN=719e59b5017bfe634411949eff2d70ba0a07c540
Certificate serial: 019D3789D9D87C5F74844994D88B1E84425A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
Manifest number: 0E42
Signing time: Sun 29 Mar 2026 03:01:14 +0000
Manifest this update: Sun 29 Mar 2026 03:01:14 +0000
Manifest next update: Mon 30 Mar 2026 03:01:14 +0000
Files and hashes: 1: 2d80ICWvEy2H06WqwwbbUkHjd9Q.roa (hash: Ddn5JpBKquVV9p/RAvUdBev4yfl/8irtR+M1x9mKoR4=)
2: 96h6MiWp1wcqYfMCzF-xeLLhEXw.roa (hash: GlwHj/dVbXF+2ZIP/5axQACN1GmbbfciiA08DFujCCQ=)
3: T8wO9YK42VrpaTKZVLl0hlhCgqQ.roa (hash: 2/LsWjUAgBK/sup3nVZAY9upc9OnAS/gP5lDONEvXDQ=)
4: cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl (hash: Y1gLFXOxtyR9afAYM9ImVqVeYaghHoqTbLZ0pOacMyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:d9:d8:7c:5f:74:84:49:94:d8:8b:1e:84:42:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=719e59b5017bfe634411949eff2d70ba0a07c540
Validity
Not Before: Mar 29 03:01:14 2026 GMT
Not After : Mar 30 03:01:14 2026 GMT
Subject: CN=3bb0fab0c0e48362f948a4e22c0ea3ae698fe6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b2:d1:81:cc:cb:6b:10:6d:f1:ef:08:34:0c:
e9:8d:a2:31:1c:5d:19:92:4f:77:50:58:df:dc:03:
6e:ea:88:57:af:0b:6d:8e:6d:0d:06:d0:21:af:d9:
64:00:3f:74:94:a7:3f:30:ef:2d:66:fb:4d:fd:9c:
51:b2:a7:bc:da:ff:76:40:a5:f3:86:de:a6:8a:eb:
4a:d7:af:d7:22:c5:d5:fe:34:22:0f:0e:e9:ba:a5:
bc:7d:44:84:a3:6b:5c:40:89:6e:f2:8f:2d:24:0d:
e1:8f:ea:89:6e:fa:0d:87:3d:61:6d:6b:cd:31:35:
89:14:0f:33:14:4a:21:65:22:ac:0e:97:c5:c1:72:
66:65:33:da:68:ea:b0:6a:57:5d:7d:19:3e:df:f7:
ac:1f:6b:e4:b8:02:49:75:b3:b3:9f:ee:1e:e3:7c:
55:2a:bd:54:f2:99:23:10:fb:e3:20:41:fc:d3:ac:
77:b6:75:4d:e8:ba:d1:d2:4f:69:e3:20:ea:93:f2:
37:7d:2b:be:8a:c6:95:55:a5:e5:74:12:36:98:d3:
9e:62:5d:f1:94:50:bd:39:da:42:0d:db:56:23:7c:
aa:a0:14:82:15:15:16:2d:48:71:87:56:55:20:0b:
3b:4f:c2:6e:c7:a6:a4:3b:28:76:a1:6f:25:bd:cc:
8a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B0:FA:B0:C0:E4:83:62:F9:48:A4:E2:2C:0E:A3:AE:69:8F:E6:B8
X509v3 Authority Key Identifier:
keyid:71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:51:4c:f3:12:22:ad:61:08:60:46:18:ba:23:76:b2:82:e8:
ae:72:25:92:8a:89:ba:de:19:b6:c1:34:61:cb:5d:80:3b:88:
06:2b:13:02:a9:0f:d9:df:b5:5c:d1:fa:3f:e7:e7:77:1a:17:
05:40:aa:b8:c7:61:1f:39:7b:f1:5d:e4:a8:4c:cd:43:f0:8c:
1b:e3:0b:a5:39:fd:85:43:0b:57:61:b9:ea:20:e0:a7:06:c2:
df:08:cc:a0:e2:98:72:66:38:46:1a:88:de:d6:9c:19:8e:45:
7a:92:3b:10:6a:a2:92:e9:5e:15:8b:c3:40:97:df:ec:b0:25:
15:8e:1a:5c:d9:f7:d9:44:0c:95:9d:7a:51:b5:2d:0a:cc:7a:
ba:40:73:ac:a0:f5:46:da:7e:13:ba:10:03:4a:28:f5:bc:cf:
ce:05:8a:7c:f2:94:51:49:3d:1e:ff:3e:87:a2:50:e5:be:b1:
56:1c:ac:5a:f2:da:92:da:16:50:6f:75:1f:07:fc:1d:ba:17:
0a:62:a5:ef:f3:5c:e8:97:fa:1c:66:b5:76:b8:ea:a4:70:aa:
38:e4:fd:f5:ea:68:7f:f4:25:ea:57:d2:a9:16:0e:e2:73:f8:
53:01:8e:13:41:7c:b5:96:26:a0:53:c7:4d:e1:3f:77:fd:e8:
2b:78:2d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:29 2026 by rpki-client