Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
File: zDnmvkDYASiJbM0TH2WlWtmKQK8.mft (raw, json)
Hash identifier: /AqiTXuZofIXg/FpW7dIokRU/80zyNbePe/tdMUxWMI=
Subject key identifier: A4:43:BF:9F:05:1C:87:3B:EC:8D:00:36:DB:DB:87:C1:F2:24:6A:A3
Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Certificate serial: 019CE5239B848DD17405AA5A1AE6B970258C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
Manifest number: 1865
Signing time: Fri 13 Mar 2026 03:00:41 +0000
Manifest this update: Fri 13 Mar 2026 03:00:41 +0000
Manifest next update: Sat 14 Mar 2026 03:00:41 +0000
Files and hashes: 1: h8MAjW2nwR1TuDpY3gaR4GIp5Is.roa (hash: YMOvJ9hakU4xTrKD5f+aHfr6VChVy5zYjPbZPORV+p4=)
2: hq6cHZZmfTc8iDuXctwL9j8vYGA.roa (hash: gnwIM65nm0H3pqLfxC4cpwXQNNz6WAkiHxWYF953SRw=)
3: zDnmvkDYASiJbM0TH2WlWtmKQK8.crl (hash: EvdiVg5ke03OqQjXZO0r+oAziLRUeKIiqhI15kNwo3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:9b:84:8d:d1:74:05:aa:5a:1a:e6:b9:70:25:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Validity
Not Before: Mar 13 03:00:41 2026 GMT
Not After : Mar 14 03:00:41 2026 GMT
Subject: CN=a443bf9f051c873bec8d0036dbdb87c1f2246aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:10:9d:82:22:31:3e:0c:b2:1e:25:0e:cd:f2:
02:55:50:19:33:38:81:3a:89:f7:b5:0d:5f:13:7d:
52:57:82:e9:95:07:3b:91:82:32:59:6a:51:ee:97:
bc:28:7c:d3:42:0a:56:4c:f5:43:2d:ff:fe:77:c1:
96:ef:b4:25:63:d6:7e:e6:d2:9d:48:e3:85:a7:a6:
ed:27:11:a3:78:d6:d3:17:a1:f7:13:2b:59:be:24:
ed:bc:b6:69:6c:7d:d0:04:7f:d8:b4:16:b5:16:45:
0e:2f:55:3d:b3:06:b3:70:24:bb:e1:9e:2d:ae:dc:
df:d8:a0:5c:fd:49:b8:c2:25:83:d0:d5:bd:8c:de:
af:c5:b8:6b:5d:7f:ff:39:f7:08:79:3b:de:ff:7b:
07:18:c6:4a:56:98:0e:d2:98:79:fe:43:55:a7:f7:
47:69:af:a5:f1:06:31:79:61:89:66:23:f3:1c:cf:
ba:8d:ee:a6:f1:ed:64:50:3f:ca:60:07:35:89:a2:
21:f5:ed:38:f2:e9:bb:8f:fc:bc:34:1c:11:a7:a5:
65:33:c2:fa:a7:b5:20:9a:15:f4:9c:0f:f0:b8:66:
41:2a:84:c8:53:a7:29:42:81:98:d8:74:f4:ad:d2:
68:49:08:55:4d:4c:a5:91:c7:4b:e3:eb:48:10:72:
5a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:43:BF:9F:05:1C:87:3B:EC:8D:00:36:DB:DB:87:C1:F2:24:6A:A3
X509v3 Authority Key Identifier:
keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:77:b5:f1:e1:79:d4:85:2a:27:17:10:ec:07:30:80:35:41:
99:2e:a9:7d:3d:ae:45:72:5e:ad:ff:f4:27:fe:93:b7:4e:86:
7f:06:4b:86:15:48:51:c8:70:22:33:1b:db:09:f2:f4:72:63:
ad:bb:7b:e0:9e:be:75:88:fc:ce:b4:7f:3c:1c:4e:77:2c:fa:
01:de:41:5c:2e:82:62:f7:99:67:98:b8:6f:6f:58:34:21:1d:
ab:ff:14:f0:f8:4f:c2:c9:94:97:e5:2e:fb:b7:6a:64:8d:6c:
73:3e:07:45:3c:44:55:9a:a1:0b:27:26:b4:bf:e8:56:7b:74:
52:45:8c:85:a8:df:78:31:d8:9d:b3:a1:b5:96:03:02:ee:2e:
55:46:7b:2a:be:49:50:ea:38:86:29:fe:a7:5b:97:27:c0:84:
da:57:f7:6a:21:5c:ad:96:32:6d:bd:f8:03:27:62:b1:d6:2b:
79:4c:3a:e0:d3:05:92:90:6f:de:ab:c6:22:4b:f9:1e:55:7a:
98:24:78:67:d2:55:fd:d7:5c:7b:99:e6:ae:83:04:46:f4:e5:
2d:de:a0:6c:72:ae:a6:22:3f:98:ba:97:c2:87:be:e4:98:fb:
54:54:af:82:35:80:ae:62:2a:e5:64:65:68:bb:d6:42:99:de:
22:8a:8e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:13:35 2026 by rpki-client