Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
File: ze5dkAYfoqckw2dCWGxinUceek0.mft (raw, json)
Hash identifier: 1Mzf5IFTspjDMkjm6zwC7f4D3GSJ4yLlFtCRmENtH1g=
Subject key identifier: 1B:E9:50:7C:7D:1B:3C:CB:96:41:6A:58:80:7D:B2:0F:37:A2:97:B8
Authority key identifier: CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
Certificate issuer: /CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Certificate serial: 019D37C07E1D1ABD7831E567956FA5B93745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
Manifest number: 0D96
Signing time: Sun 29 Mar 2026 04:00:55 +0000
Manifest this update: Sun 29 Mar 2026 04:00:55 +0000
Manifest next update: Mon 30 Mar 2026 04:00:55 +0000
Files and hashes: 1: 8a76FAqMjieN7aLSC8xEAc3hgOU.roa (hash: pAPcnCH+A+mHZKWJuKSuBMT8TzG5YvvwYe+EaHI/zYI=)
2: ze5dkAYfoqckw2dCWGxinUceek0.crl (hash: x4b3qSnpXddBBYuEOqKTb8ZL5syIcjCpVtkse+/0+G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:7e:1d:1a:bd:78:31:e5:67:95:6f:a5:b9:37:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Validity
Not Before: Mar 29 04:00:55 2026 GMT
Not After : Mar 30 04:00:55 2026 GMT
Subject: CN=1be9507c7d1b3ccb96416a58807db20f37a297b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8b:02:81:64:cf:bd:7c:0f:96:05:aa:77:0b:
1a:6e:f6:b7:b1:25:b1:ad:69:df:7a:56:b1:e6:65:
22:71:0e:9f:60:6c:04:18:a5:00:d8:c5:71:7c:0d:
30:2c:86:f6:2d:d7:c8:5f:16:7b:21:97:1d:e6:30:
fd:96:e6:e3:22:1f:cd:e0:ca:b6:ef:f1:fb:a2:f9:
9e:f6:f9:d5:0d:42:28:10:d9:1d:4f:a6:8e:40:48:
a1:c6:6a:2f:3b:06:78:2e:95:82:ac:b7:35:3b:19:
5f:a3:d3:6a:91:db:de:d4:13:80:55:ff:13:bd:8f:
f2:2b:de:46:d3:78:fa:b2:44:8f:c7:7a:20:1b:b7:
b5:35:f0:99:2e:75:17:a8:0f:44:c1:5a:72:9a:0b:
1d:38:8d:8e:3d:4d:61:fe:0f:00:3d:ef:43:1e:eb:
99:9a:2e:b2:27:b2:80:4a:36:8c:66:fa:f9:8a:81:
80:0f:0f:18:cc:f1:fc:aa:69:df:24:44:8e:ae:e4:
79:b0:1b:71:63:df:bc:9a:b9:9f:df:7b:a0:51:38:
c4:93:41:7b:61:f5:14:dd:cd:11:8d:cb:f6:e4:b5:
72:79:dc:c8:9a:fd:ef:41:f0:43:ee:db:47:b0:a2:
8c:51:fb:00:29:51:a9:2b:a5:31:5f:60:ed:da:35:
a6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E9:50:7C:7D:1B:3C:CB:96:41:6A:58:80:7D:B2:0F:37:A2:97:B8
X509v3 Authority Key Identifier:
keyid:CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8c:c5:64:53:f3:e0:7b:42:2a:e6:32:d7:13:6b:bd:a9:9e:
1d:1b:ea:f1:46:bf:d6:8c:02:ca:07:68:a3:74:7b:a3:06:1f:
ee:b4:4b:db:22:c2:ec:95:1d:fe:08:63:09:1c:62:44:be:a1:
37:bf:2b:be:43:2a:37:e5:61:19:33:d3:91:37:7d:2f:1b:73:
1a:93:bb:6b:bf:bf:7e:8d:50:64:50:ad:c9:af:0f:d3:39:7d:
44:e2:0f:91:74:42:56:1d:f0:ca:7f:47:17:a5:f0:b9:bc:4d:
bb:4e:e9:9a:64:28:9f:e4:4f:39:41:1a:a6:1b:a8:4d:1f:a0:
ca:2e:75:5f:df:19:af:4c:a5:ab:b9:92:87:b1:cf:89:11:79:
a9:f4:c0:12:48:d1:de:13:52:0d:7c:8a:7d:e8:09:17:ca:83:
28:25:c4:f4:3f:7d:64:67:7b:08:d8:13:9e:8a:36:d0:c4:62:
7b:2c:b8:ba:32:12:89:83:3c:35:ed:33:88:52:b3:fc:2c:e2:
af:d5:91:ae:8f:87:37:79:92:97:02:46:cb:f3:ec:43:a9:6a:
ba:8b:e5:0e:6f:a0:f7:07:3c:5b:cf:c4:d9:c0:31:16:6d:7f:
3a:bc:ed:e3:2c:7c:61:70:ae:a6:f6:49:94:32:09:c9:11:30:
8e:a4:80:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:19:25 2026 by rpki-client