Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
File: z96Fu9R49ehC9MT42FIl0QDg9N8.mft (raw, json)
Hash identifier: EAFzbW1QiMbDGM6nc6KhRxBEnSs7lhN0z+jq4O9uIGE=
Subject key identifier: A5:82:78:EC:46:56:81:27:8A:58:96:83:3D:9B:B9:80:9A:FE:74:24
Authority key identifier: CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
Certificate issuer: /CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Certificate serial: 019D3940BFF220CB70525830DF7C8E46213A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
Manifest number: 16B2
Signing time: Sun 29 Mar 2026 11:00:37 +0000
Manifest this update: Sun 29 Mar 2026 11:00:37 +0000
Manifest next update: Mon 30 Mar 2026 11:00:37 +0000
Files and hashes: 1: AYmY6bS1DW5wNX1gemsinMtxn4A.roa (hash: zRK2sb27i2HJzTqfMswAMQmmf/Cx/9L2B5J6Nm4MQxc=)
2: LmZL7NQJ3CA-ChgOtrMd32jvZBI.roa (hash: IeCaOVu0UoDFXz4huIJasKVw/iNCvSqG8pZqqp+jQ3I=)
3: cjZ33bD33v-eUIybd6UwPNRRpoQ.roa (hash: FLqtX2+FQiCXJcMBU06mRmURivJmg3QovEfaA3JnsmE=)
4: z96Fu9R49ehC9MT42FIl0QDg9N8.crl (hash: hLNtmP4mPEARcRBBGtDjZ5YDpLXBqHnMctzz7ruLv+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:bf:f2:20:cb:70:52:58:30:df:7c:8e:46:21:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Validity
Not Before: Mar 29 11:00:37 2026 GMT
Not After : Mar 30 11:00:37 2026 GMT
Subject: CN=a58278ec465681278a5896833d9bb9809afe7424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:54:37:e0:aa:dc:70:03:8b:27:29:a1:01:07:
24:b9:52:08:35:7e:7d:cb:d7:6e:77:1e:37:10:2f:
fd:1f:bb:75:5f:2b:c4:02:e2:39:53:46:5f:55:72:
97:c3:a5:d1:d5:a6:51:2f:ff:4c:a2:b7:90:03:d0:
0d:d1:b7:07:17:1a:ac:e5:a5:57:22:d9:75:88:90:
4e:e0:d0:b8:dd:95:92:ad:7c:a9:ab:f7:e9:19:52:
70:ba:16:3b:c2:ff:fb:0a:29:ca:b3:a5:79:3e:64:
bd:34:5d:a2:af:5f:ac:f9:1f:3f:07:6b:00:8f:64:
27:9e:10:bc:8a:d1:32:88:0e:af:1f:d6:83:cf:22:
70:ed:64:10:31:90:1d:0e:86:87:31:a0:15:ac:d3:
92:20:8e:97:74:d2:cb:e2:09:b1:c5:a7:e9:e4:7f:
53:ed:d4:8b:d1:be:d7:9a:0c:b6:3a:cb:db:b3:41:
03:ea:e1:3d:db:08:bc:9b:78:50:2c:db:7c:63:4e:
ea:57:8e:c0:73:81:00:5b:10:d0:8a:c4:fd:54:4f:
4f:5a:df:1e:55:0d:aa:93:21:81:14:b6:e9:28:6d:
25:94:64:1c:66:96:9f:6b:c9:6e:89:d1:af:a1:6d:
1b:99:33:1e:08:84:65:d7:4a:64:3d:01:9c:89:45:
92:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:82:78:EC:46:56:81:27:8A:58:96:83:3D:9B:B9:80:9A:FE:74:24
X509v3 Authority Key Identifier:
keyid:CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a9:04:0f:f8:8b:36:c3:b8:9c:38:5c:1c:fa:67:6c:bb:1c:
98:52:b2:c0:fc:18:c9:7c:ef:a5:15:a2:b3:df:c5:c8:c1:1e:
3f:07:cf:31:ec:e5:c7:48:f6:fd:c4:1a:7f:21:ca:9b:26:d2:
72:f3:86:0b:c5:6f:fd:46:53:92:af:ee:e3:60:1c:d1:8b:b0:
f0:98:09:54:0e:40:54:06:97:9c:1b:b5:b5:9a:7a:a6:dc:d6:
4c:23:aa:53:64:d2:0c:19:5a:14:06:96:b3:f0:eb:de:8a:f5:
f3:21:fa:09:f2:68:b9:43:2e:65:02:36:33:e8:1e:54:c4:6c:
20:18:b3:08:67:af:a0:d6:d1:9c:d3:79:3f:71:5b:ee:2a:65:
f5:b0:13:d7:91:99:cf:e6:7b:89:fa:72:6a:74:38:ff:5a:8a:
8c:91:26:53:8e:0f:70:77:5b:a7:d6:78:10:ba:3b:9a:cf:0f:
b3:f6:64:90:3e:5c:a2:00:84:f1:d4:37:4b:d4:30:90:1d:fc:
c1:27:8b:c6:a4:94:d9:9a:d0:93:87:7e:4b:b0:be:de:ef:9b:
4c:28:a6:1a:eb:9f:59:59:7d:48:3c:f2:a2:fc:9b:19:17:b1:
3e:e4:bd:a3:98:a7:b1:86:08:7f:e9:da:31:a6:32:98:56:cf:
78:1a:59:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:11:40 2026 by rpki-client