Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft
File: zR5W5MTEpRjyOIpay1rwRSzCpZU.mft (raw, json)
Hash identifier: UipNvTJtwtB8Ou4VJHVB7VfHO85oOI4QbBVUnkx9i/o=
Subject key identifier: 23:CD:71:1C:1F:DF:CB:92:33:E0:D2:59:BD:FD:3D:AC:54:9F:63:7D
Authority key identifier: CD:1E:56:E4:C4:C4:A5:18:F2:38:8A:5A:CB:5A:F0:45:2C:C2:A5:95
Certificate issuer: /CN=cd1e56e4c4c4a518f2388a5acb5af0452cc2a595
Certificate serial: 019D3752938A0C08D412151F3F8ED7FDD6F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zR5W5MTEpRjyOIpay1rwRSzCpZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft
Manifest number: 1057
Signing time: Sun 29 Mar 2026 02:00:51 +0000
Manifest this update: Sun 29 Mar 2026 02:00:51 +0000
Manifest next update: Mon 30 Mar 2026 02:00:51 +0000
Files and hashes: 1: mksXPvzfs0a6_2GYuOBUxDiXzU8.roa (hash: MCOyKzIAtyadIzF2fgEZDjYZ2qaVt54CQCVZbXjLi+0=)
2: zR5W5MTEpRjyOIpay1rwRSzCpZU.crl (hash: 7Js8BpE3Ayiw0MX68hOXX7sxLww3l2UBhF7k1J1JuUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zR5W5MTEpRjyOIpay1rwRSzCpZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:93:8a:0c:08:d4:12:15:1f:3f:8e:d7:fd:d6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1e56e4c4c4a518f2388a5acb5af0452cc2a595
Validity
Not Before: Mar 29 02:00:51 2026 GMT
Not After : Mar 30 02:00:51 2026 GMT
Subject: CN=23cd711c1fdfcb9233e0d259bdfd3dac549f637d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:be:3c:f0:df:7f:46:b2:07:5d:7a:53:9d:05:
f8:e1:4e:1a:2f:61:1f:6c:24:a1:c8:45:7f:10:63:
34:d3:4b:3c:52:3e:6f:bf:6b:48:ec:46:36:e1:b4:
69:c3:94:c3:ba:04:a1:72:2c:5f:7a:82:b7:6b:b7:
62:f2:53:90:ce:57:43:1c:06:da:a9:27:21:b4:f3:
70:a5:6b:2a:f2:12:b2:4b:aa:3a:75:e7:6d:14:98:
51:61:5d:b3:3b:2c:8f:1b:48:41:52:06:a4:c5:c9:
89:50:c7:d4:d5:12:5e:61:36:80:e6:8f:15:b6:bd:
65:d8:26:e7:78:72:c5:15:18:4f:ca:22:e9:4d:53:
42:ed:52:42:4c:be:4c:ad:64:08:03:b5:65:1d:1c:
0e:48:07:8c:3c:2d:fa:2b:c1:62:cf:97:2d:fa:ad:
c5:2a:21:88:6d:10:88:3a:59:e9:3a:56:ff:f3:76:
04:29:5a:14:07:6f:e9:8d:af:87:33:d2:b2:b2:96:
f0:f7:27:64:e7:1e:fd:88:ed:1d:63:31:c5:ac:68:
1b:cf:f1:a2:a7:8a:e0:59:15:6e:89:11:3c:7a:b5:
e1:08:8c:c7:19:a3:f1:4e:56:b1:cc:1a:93:ff:0b:
cb:c6:2a:01:3a:05:ec:e2:73:df:ec:df:4c:f2:5d:
bd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CD:71:1C:1F:DF:CB:92:33:E0:D2:59:BD:FD:3D:AC:54:9F:63:7D
X509v3 Authority Key Identifier:
keyid:CD:1E:56:E4:C4:C4:A5:18:F2:38:8A:5A:CB:5A:F0:45:2C:C2:A5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR5W5MTEpRjyOIpay1rwRSzCpZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5d:26:dc:8f:d3:df:ee:e8:a9:ef:a1:14:0e:09:2b:11:22:
eb:6f:cf:50:dd:4a:44:31:17:a6:e2:f7:97:6e:2e:ad:d8:11:
9a:3f:a4:9f:f3:5f:63:7c:59:30:c0:91:d9:65:e6:98:4e:32:
01:70:43:1a:45:7f:2d:02:a3:95:ab:5c:5c:fc:b9:ea:04:00:
93:09:eb:ea:32:85:e4:70:60:a8:81:7f:be:b1:d9:d2:e3:12:
39:7c:5b:1a:cf:e6:fa:29:a3:26:11:99:96:95:ff:67:35:d3:
fd:89:7e:8c:64:50:65:e9:71:18:2d:aa:77:9c:ae:4f:e8:ef:
db:38:ee:9a:91:bc:7e:bc:db:af:29:31:3f:94:76:c5:ce:81:
fd:ec:5c:f0:27:64:75:f3:f0:49:53:9b:8f:3d:c7:cd:21:21:
07:7b:7e:83:af:0d:16:fc:d9:8a:17:b8:fd:7f:22:9f:5f:f1:
72:50:9a:3c:8a:a2:ee:c3:e5:2d:58:69:7a:93:35:85:d9:4d:
ce:b5:89:28:ca:4f:a7:60:08:2e:77:8d:b1:cf:bf:12:09:ce:
09:49:f7:a8:85:79:b9:00:67:01:e4:05:2a:44:f6:5b:b2:9a:
fb:e9:97:3b:b3:5c:da:43:de:b4:ae:c1:1a:fe:ed:79:05:98:
f2:4e:cc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:50:56 2026 by rpki-client