Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
File: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft (raw, json)
Hash identifier: zAvGSjI1vhVIFmDNuZ3pJg+AuSOmpqupO9JXWAVY6P8=
Subject key identifier: BA:96:CA:31:90:56:A1:58:88:AC:40:BB:D0:16:6C:6E:DA:93:02:8E
Authority key identifier: AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
Certificate issuer: /CN=af3adce3664bf0e7f688ff4122551734c4d14756
Certificate serial: 019CCA524F7A19A1CC0FF16C35CA501AE08F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
Manifest number: 028C
Signing time: Sat 07 Mar 2026 22:01:57 +0000
Manifest this update: Sat 07 Mar 2026 22:01:57 +0000
Manifest next update: Sun 08 Mar 2026 22:01:57 +0000
Files and hashes: 1: WKKdAS92LVILbjnTiiXNrRI_064.asa (hash: WU7xtDYPq+tmZfgD8wJKGXUqlisupARfwtckbBQ0ds0=)
2: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl (hash: b4q+hzD9zMD9IpI8eQMyk6r0Lohuzh6cfyokfZadthQ=)
3: ymjEj-AVl-jhoYqun7KK_jww1EY.roa (hash: Lravz6mXezUcFlH14r837C4PlhGpAXXPBKh9Ost0iM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ca:52:4f:7a:19:a1:cc:0f:f1:6c:35:ca:50:1a:e0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3adce3664bf0e7f688ff4122551734c4d14756
Validity
Not Before: Mar 7 22:01:57 2026 GMT
Not After : Mar 8 22:01:57 2026 GMT
Subject: CN=ba96ca319056a15888ac40bbd0166c6eda93028e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f6:f2:1c:87:89:a9:60:b2:23:60:49:dc:dc:
7e:af:ed:78:bf:ab:35:90:80:e6:30:8a:66:49:34:
05:15:31:a6:53:ec:eb:63:41:99:97:fa:18:b3:a3:
ea:f5:1b:29:4c:ab:29:eb:a5:ed:21:5c:6f:f7:49:
61:f7:3e:fe:89:c1:34:a6:16:ae:28:fe:8c:46:19:
82:cf:ce:b0:c9:d1:5d:3f:a8:45:77:e1:22:05:62:
32:18:76:08:6f:12:a7:d7:6d:ea:6f:0d:de:ce:a9:
a2:90:c1:55:9c:e2:cb:d2:05:13:eb:3c:aa:7b:26:
31:e9:7e:4e:51:b5:49:80:9f:3b:71:62:48:40:07:
7d:8b:82:b2:af:07:e6:d9:75:94:ce:ad:ec:db:0a:
6c:78:b3:3e:20:27:ba:4e:74:b2:df:31:59:3e:52:
a0:36:63:54:fa:0d:24:f0:3f:ad:2d:f0:4a:b7:c9:
27:37:51:09:b5:c0:48:5a:15:0b:8d:aa:fa:71:33:
cd:19:0f:a7:23:56:99:6d:8e:df:92:d8:3b:c8:86:
d9:91:c9:b6:f8:55:ed:da:78:90:ab:b8:1d:5a:9d:
35:fa:01:22:af:b6:66:4e:b8:08:9e:12:3b:1d:50:
94:3e:fb:f1:fd:72:da:c2:1a:c5:73:37:85:3a:e9:
b2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:96:CA:31:90:56:A1:58:88:AC:40:BB:D0:16:6C:6E:DA:93:02:8E
X509v3 Authority Key Identifier:
keyid:AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2e:5a:77:95:d5:09:7b:f3:7b:be:91:4a:73:71:53:cf:91:
be:06:19:5d:d2:f3:9f:a1:42:bc:c5:7a:6e:6b:8c:cb:f1:9a:
f1:1b:ac:d6:64:20:ce:e4:0c:03:90:41:bc:e7:96:4a:91:1e:
f7:30:26:0e:2b:98:b4:1f:ae:b5:a0:09:54:a0:e9:e1:ba:97:
de:33:a3:f1:cd:c6:8b:f9:e4:89:cc:ae:6c:3a:8a:2f:86:d8:
dd:1d:da:b0:6d:6f:94:52:4e:46:c7:05:0f:c0:dc:0d:c2:5b:
cc:ce:20:46:3f:1d:49:26:92:c4:ac:8b:4a:a9:b0:0b:fe:3e:
57:8f:35:b7:cc:6b:45:3d:ae:f7:cd:0b:b2:53:17:1c:58:94:
9a:e5:4e:0d:e3:40:a5:ec:5e:c4:86:05:a0:52:e7:76:2e:45:
1b:3e:be:c4:0f:ab:70:f8:71:59:85:93:4f:35:9e:07:d3:19:
65:ce:51:7e:41:92:0a:73:ea:88:f4:53:cb:9f:dd:e9:68:87:
3f:c9:d3:fd:b9:15:f5:d6:0d:35:14:a7:58:1a:74:86:e1:b9:
50:0a:da:1c:1f:41:3e:0a:b2:49:3b:cd:18:20:3b:84:99:3e:
bb:97:e9:ad:7a:84:b1:c0:c5:cc:27:5c:c6:51:d4:73:e2:c2:
a0:a5:74:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 04:05:04 2026 by rpki-client