Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
File: ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft (raw, json)
Hash identifier: GVeqvLci6bIKnvFJfhJEFZllk56fhfyEL6ZYgVXVzrU=
Subject key identifier: 07:E3:69:7F:83:6C:96:56:CE:50:52:DE:04:1A:4A:D1:78:6F:F7:F1
Authority key identifier: CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
Certificate issuer: /CN=cdee78ad857607523b50b60acd9e22ca5a107854
Certificate serial: 019D3A1CD4D997205DAF080C8E83A60659C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 15:01:01 +0000
Manifest this update: Sun 29 Mar 2026 15:01:01 +0000
Manifest next update: Mon 30 Mar 2026 15:01:01 +0000
Files and hashes: 1: jd-Obso-qia3Fzrm-rJvl_CyXrA.roa (hash: w+UMEthLd9XD2Eg9Qq+nBr2hQA3cH7TTPC5wOmg4x3A=)
2: vvIOu90M6kEZ71mN06u0tYK02eU.roa (hash: rr9r1oYZxg4M15XzRNVPfU9mZGnGg57yCNPY5TXNgYg=)
3: ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl (hash: ZLrMixozdCN5wAi2p7vwfe4zsNXq+IzZfh54YsC13Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:d4:d9:97:20:5d:af:08:0c:8e:83:a6:06:59:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee78ad857607523b50b60acd9e22ca5a107854
Validity
Not Before: Mar 29 15:01:01 2026 GMT
Not After : Mar 30 15:01:01 2026 GMT
Subject: CN=07e3697f836c9656ce5052de041a4ad1786ff7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8d:6b:1f:77:cd:b8:be:17:3c:05:91:6e:c5:
34:19:a0:62:01:33:28:0e:28:0f:11:3d:9b:26:df:
b4:a2:4a:0c:c6:40:99:1c:63:e2:14:d1:0d:12:fc:
9f:cb:68:c4:65:bf:e2:f4:5e:ab:87:92:f0:ad:59:
34:93:67:95:92:97:c1:36:7c:7b:ea:fe:fe:0a:c1:
a1:dc:db:96:b9:c3:4f:b5:7b:ca:1e:77:6c:3f:69:
38:1c:04:51:64:2a:f5:51:b6:a1:7b:0c:40:f0:df:
9e:41:62:8d:1f:8e:d3:ad:a5:c7:ab:44:c3:9e:43:
b6:a7:62:69:1e:84:2a:a3:61:b5:dc:1c:9a:b4:d0:
62:68:d1:b4:0a:0a:78:b3:17:99:c3:ec:d0:bd:a8:
fc:e9:b3:49:b0:6d:76:3f:dc:e5:84:db:df:7f:50:
74:a6:26:6b:a0:db:8c:c4:28:e5:39:1c:15:05:c7:
a6:e8:79:ea:ac:40:93:0a:3c:27:3f:b4:a9:35:64:
71:bb:14:ca:b5:24:a0:ca:a9:82:eb:60:ad:f9:82:
50:32:ff:26:e9:7a:16:cd:d7:8b:ea:87:f6:c4:2b:
7c:05:20:ea:b4:bf:3a:1f:11:1b:c3:f7:da:e5:ae:
7a:c2:d3:47:ec:03:47:03:81:64:6b:dd:f4:2e:db:
fc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E3:69:7F:83:6C:96:56:CE:50:52:DE:04:1A:4A:D1:78:6F:F7:F1
X509v3 Authority Key Identifier:
keyid:CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:84:57:08:a4:ab:74:5e:ef:ee:76:7d:01:06:f3:75:6a:40:
4d:34:99:e5:3b:6f:a4:eb:e7:58:be:c6:8e:92:5f:90:ca:90:
17:58:4b:96:b6:6b:c1:9e:a3:4e:51:3e:56:66:84:e3:53:67:
8e:97:1e:1a:fd:39:82:9c:e7:30:11:65:f1:23:16:cf:12:30:
17:16:d2:50:07:0e:f0:9d:3d:7f:cc:10:e6:88:97:63:b2:d5:
04:6e:46:e3:8a:3f:fc:d5:d0:54:8e:c8:e6:3e:9a:63:83:e3:
11:86:25:0d:5e:18:d9:0c:03:ca:87:df:1c:d8:a4:5d:c1:eb:
38:b9:95:a8:16:6e:d1:d8:c2:1e:e5:41:fa:d8:7e:27:4d:9f:
d5:0a:76:fb:18:26:fb:83:1f:18:93:a7:95:0f:7c:c7:60:d0:
41:1b:05:27:d7:0e:83:58:04:87:45:d6:99:69:ce:03:df:f5:
b5:87:15:32:a2:f8:a7:11:c9:c7:8d:d5:3b:73:60:d1:be:cf:
b8:6f:1b:d6:db:60:f7:f5:83:e9:74:23:33:44:ed:a9:c2:29:
6f:70:e2:b1:1a:39:95:42:ee:28:97:ce:58:ae:11:33:b6:97:
22:7d:85:47:0a:69:d4:23:d8:cc:5e:c6:7d:47:2a:1d:09:a1:
86:b4:95:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:49 2026 by rpki-client