Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
File: zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft (raw, json)
Hash identifier: sGXFqXL3QCvp6Nq3VFmSZ7xrPGJfa3AGgyb892K2xDw=
Subject key identifier: A6:4A:6B:71:76:DC:EA:1C:32:FB:C0:C3:49:43:1D:E6:09:88:26:06
Authority key identifier: CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
Certificate issuer: /CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Certificate serial: 019CE4B5D1D9A2AC274C97C813CDD23F9BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
Manifest number: 131A
Signing time: Fri 13 Mar 2026 01:00:46 +0000
Manifest this update: Fri 13 Mar 2026 01:00:46 +0000
Manifest next update: Sat 14 Mar 2026 01:00:46 +0000
Files and hashes: 1: HY8y2aUxH2zl7Z8uEFKyCs4_DZE.roa (hash: pgB+L4R4Q18tDhMP8CyO3Aai8GigL3mxjQcI8MoXdXI=)
2: cKZJLTzeqYRhpsddyswZAoLcpsE.roa (hash: HgvgjBFasTjpcgFlyoecgapQ0MDuq029z3qYeWnH2Zk=)
3: zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl (hash: 6TfMS41TAkgFRrWDj3AWBjBHQlDI8n/OeIn03APwAbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:d1:d9:a2:ac:27:4c:97:c8:13:cd:d2:3f:9b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Validity
Not Before: Mar 13 01:00:46 2026 GMT
Not After : Mar 14 01:00:46 2026 GMT
Subject: CN=a64a6b7176dcea1c32fbc0c349431de609882606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:e6:9c:08:05:cb:46:d3:64:6e:2b:2c:05:
71:53:55:27:87:65:80:2c:0f:c6:7d:53:22:d2:a2:
5c:0f:4e:03:b8:4b:1d:ee:62:02:2b:01:5e:0b:45:
45:da:77:4a:95:09:97:a3:32:60:29:1a:99:5e:1d:
0d:6a:8e:81:cf:8e:5e:7f:de:40:cc:81:01:db:ca:
ed:52:2a:07:01:4c:d8:1b:6e:95:7c:64:f3:14:2b:
b1:c7:d8:e4:a5:bd:1d:6f:71:8b:b0:35:cb:42:71:
e1:b8:7d:d5:cd:18:ee:3d:be:eb:09:52:8c:12:20:
77:88:45:ea:12:0b:eb:ef:54:bc:b0:07:fa:7c:bd:
7e:8b:3a:39:43:18:cd:8d:e3:55:42:64:0a:de:17:
e1:f3:19:77:e1:aa:26:01:ae:ee:dd:7b:2d:34:a1:
52:fc:2a:87:ed:49:5a:bd:d1:34:7c:46:51:e4:16:
71:c4:3c:b1:c5:6a:1c:4f:e9:82:6c:d6:2c:cf:51:
03:94:61:db:d2:eb:be:7c:80:c9:a9:a2:bc:33:8d:
79:e5:80:32:a3:0b:c1:22:9f:f7:14:f8:3f:97:27:
cc:9c:3b:12:14:1f:d6:af:a6:16:1a:39:17:cf:21:
db:e0:ca:84:97:61:12:96:31:9b:79:c5:89:67:e2:
80:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4A:6B:71:76:DC:EA:1C:32:FB:C0:C3:49:43:1D:E6:09:88:26:06
X509v3 Authority Key Identifier:
keyid:CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8d:c3:67:ae:90:1d:40:b5:3c:e1:69:cb:cf:c0:e8:57:4c:
83:74:1b:a7:b8:7e:5f:07:c6:58:13:13:0b:e0:99:fc:43:a3:
22:33:13:25:2a:23:b0:0b:d1:1c:3c:b2:02:56:f7:1f:2c:04:
c2:be:8d:91:b2:9d:9b:45:a7:f3:4f:c3:02:62:bd:e8:1e:0d:
3e:b2:b3:68:31:61:8d:57:34:d0:1b:c2:9a:5a:d3:f5:35:07:
1a:cd:f3:3d:19:2a:4d:65:60:ad:46:e5:b7:33:85:83:bc:da:
d3:97:a4:68:b0:5d:79:a2:28:e7:9a:79:b5:dd:97:32:39:b6:
00:a2:31:03:df:c2:42:13:ca:b8:9f:5e:d6:1c:86:80:15:d5:
4b:c0:37:11:3a:c4:37:a0:ac:14:e1:7a:c0:95:00:60:90:4c:
8a:0d:99:93:04:eb:e3:9d:46:2d:5d:28:93:45:c9:4d:c8:50:
77:e4:19:48:61:b6:a9:a8:b3:4a:a1:91:45:91:78:58:9a:0e:
c1:62:aa:c2:ba:b2:72:5f:0f:b0:e3:01:9c:0a:45:cc:e1:c5:
1e:88:65:f9:3f:3e:f2:b6:d0:f8:96:4b:e9:82:2b:0d:89:d9:
32:a2:09:22:58:2f:d5:12:58:a3:0c:fe:be:59:ac:ed:4d:66:
e6:53:36:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:45:29 2026 by rpki-client