Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
File: z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json)
Hash identifier: 8TimZjPDXvMFSjqli5z1lnB/lnePj7suWYMxtT2j+00=
Subject key identifier: AB:FD:30:5C:3F:26:1E:8A:E9:46:76:89:88:11:51:42:72:CF:89:61
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 019D070BDEDB960FEAA3DD78FF9590E87AF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
Manifest number: 18C1
Signing time: Thu 19 Mar 2026 17:01:51 +0000
Manifest this update: Thu 19 Mar 2026 17:01:51 +0000
Manifest next update: Fri 20 Mar 2026 17:01:51 +0000
Files and hashes: 1: LZY-PqyJIZbUMaW5LyxkZu3B0ME.roa (hash: n7XhC8EKYYjZlJRLiTzAC3ZXaalwMOd93SyUZUX87f0=)
2: tw9opvf0Dc5mqTovtjfu2Csg6vo.roa (hash: /sxGcP7rnMogpd9PU079PAunh+PKIDCxrO0qaczcWVs=)
3: utu4HG5Q_7wmUAMYqV-VoOkOlAU.asa (hash: GWkYlaZN+/4nG13OOIg1vJsZ8EIkcdYZl1pQv3olPHk=)
4: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: 05vslYBBTCtnPS+2Cx0YObfDS/eoYcR/AluZJofrDHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:07:0b:de:db:96:0f:ea:a3:dd:78:ff:95:90:e8:7a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: Mar 19 17:01:51 2026 GMT
Not After : Mar 20 17:01:51 2026 GMT
Subject: CN=abfd305c3f261e8ae94676898811514272cf8961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8a:62:fd:8b:f8:d0:b3:29:31:e5:e8:87:8e:
46:b2:c2:9a:01:af:c6:e3:81:d7:eb:e7:5e:08:f1:
c2:a9:58:52:a2:46:25:a0:42:ec:f5:fa:f6:ee:a4:
a2:0c:e3:96:8b:0f:62:ed:97:e3:a0:b0:4e:80:07:
f6:54:b8:4b:ab:64:df:04:25:5e:a0:2c:e2:7b:72:
49:05:65:14:d5:e5:fe:ea:23:aa:31:e0:54:f2:52:
3a:f7:39:70:43:79:d6:13:17:c9:f6:02:c7:dc:c3:
a0:9b:07:c9:6e:a2:f2:18:84:2f:f8:0a:fc:df:e6:
4c:d1:35:77:6d:9b:bb:82:72:9b:bd:f2:46:f0:c9:
88:b0:00:91:03:73:ff:e3:33:d3:95:e1:67:83:71:
01:e1:6d:ac:e2:77:cb:af:67:c8:a1:b1:af:d0:25:
08:f2:10:3f:a2:10:41:62:64:6a:7a:83:28:e1:e5:
2a:73:8e:17:3f:55:5a:79:c0:7a:9a:cf:cc:81:71:
ba:98:27:9c:20:9a:9e:4c:2b:6a:61:0c:b7:83:78:
5c:ee:40:85:7f:8c:4c:fb:f7:72:b0:9c:6d:60:50:
60:51:d2:ca:11:10:38:63:ab:42:96:77:8a:08:59:
a4:f6:b2:86:d2:5b:a3:ad:a0:c4:53:0f:83:51:f5:
77:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FD:30:5C:3F:26:1E:8A:E9:46:76:89:88:11:51:42:72:CF:89:61
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0e:08:35:8d:a5:1e:fb:8c:0b:77:2c:7a:16:5c:46:12:c0:
a0:bd:35:93:b1:7e:42:bb:2f:65:a0:7b:2e:30:53:72:33:0e:
70:e5:63:bd:40:21:b8:c1:04:ec:c0:58:41:ab:18:59:03:1d:
23:5a:9e:d0:03:6e:a0:17:eb:3a:40:c4:09:59:b2:ff:57:d5:
35:54:98:ad:54:e2:52:39:08:1b:29:86:10:fa:f3:fa:71:2d:
2c:ea:19:a6:bc:0d:bb:6e:15:75:d4:d9:41:eb:6f:cf:f0:4e:
b7:b6:0c:f7:bc:19:04:47:91:5a:63:71:87:05:72:31:2e:78:
d3:5b:b8:cd:85:9a:e0:95:4d:21:df:0d:bd:58:ea:99:b0:9d:
fc:d7:e6:1e:f2:5d:dc:70:67:27:d0:0d:94:c4:eb:3f:37:73:
20:75:b8:8d:11:0d:3f:a7:e7:95:c4:9f:c4:31:7a:fb:09:9d:
dd:91:48:53:8c:55:f7:f5:a6:47:6c:31:e5:5e:9b:9c:ae:29:
8e:34:c8:33:1c:bb:59:6e:33:3c:43:ee:f6:6b:8d:b6:fe:57:
4d:d6:df:e0:ca:8c:b5:b9:1e:92:77:5e:d9:a6:e0:5e:1a:b6:
34:12:f9:5a:12:14:45:7d:29:eb:4d:c2:fb:66:02:23:6b:0e:
54:05:3e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 03:14:42 2026 by rpki-client