Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
File: zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft (raw, json)
Hash identifier: 1Ohttoa+VLKwAxl4x/HnQJaY4Xe2OgjK4LpkWliEpjo=
Subject key identifier: E7:25:DE:6A:2B:0F:85:B2:49:25:F1:5C:EF:A4:32:C6:E0:8C:AC:FC
Authority key identifier: CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE
Certificate issuer: /CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
Certificate serial: 019D3752B63F3BCED19F82B4970387A0400A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
Manifest number: 0E85
Signing time: Sun 29 Mar 2026 02:01:00 +0000
Manifest this update: Sun 29 Mar 2026 02:01:00 +0000
Manifest next update: Mon 30 Mar 2026 02:01:00 +0000
Files and hashes: 1: Rk6U7RO4py6S9WklbeaSGCJKXHU.roa (hash: HzF7QsaRDlON7L9Y+E6XwRt1hlrnQ4o9Z6yQvpu9Qcg=)
2: zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl (hash: 0yS7YskRzdXi2sB9pzvQ1/2UQdZ/rNRBBNE1Za/kpeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:b6:3f:3b:ce:d1:9f:82:b4:97:03:87:a0:40:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
Validity
Not Before: Mar 29 02:01:00 2026 GMT
Not After : Mar 30 02:01:00 2026 GMT
Subject: CN=e725de6a2b0f85b24925f15cefa432c6e08cacfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:24:b5:79:c8:68:00:18:cd:1c:f6:63:a0:4b:
2e:1f:70:6d:d5:9d:97:bc:93:a5:fb:ca:46:9a:1d:
bb:63:62:8f:f8:05:c6:14:34:ca:bb:72:91:21:6e:
d2:91:e7:1d:06:dd:08:9b:7d:ac:3e:10:b9:00:24:
d1:33:61:8e:5b:64:6e:60:8d:ae:d4:6b:2a:e7:53:
d4:91:69:ac:7e:50:ee:d6:02:41:57:2e:e0:05:e4:
ac:48:9a:30:82:38:53:98:92:43:4d:06:8c:20:22:
2d:37:4a:22:cd:e8:5c:a2:94:35:b0:28:0b:cb:14:
fe:43:c6:8f:fb:8a:2a:a8:eb:ae:f3:fb:b7:5f:19:
72:e1:e5:c6:9c:e5:80:70:6a:6b:5d:82:ba:5a:7b:
0a:91:d8:d3:b3:9d:40:fe:15:30:ca:4e:df:1e:ea:
45:b7:68:05:1f:b0:e9:cd:cd:a3:95:d7:19:44:b3:
8d:4d:83:28:a0:e1:c8:1e:84:78:7f:47:35:6d:97:
ba:8f:f7:0a:62:d6:a1:25:98:67:b3:cc:fa:7d:88:
5d:b1:d0:03:43:c8:d3:80:bd:bd:cd:7f:1f:e1:de:
59:58:34:b3:29:12:cb:11:23:8c:c0:8f:66:ed:52:
dc:d1:c5:99:cc:b1:8b:53:4b:e3:be:fc:2a:ca:34:
98:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:25:DE:6A:2B:0F:85:B2:49:25:F1:5C:EF:A4:32:C6:E0:8C:AC:FC
X509v3 Authority Key Identifier:
keyid:CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f1:fb:06:7c:5f:16:f0:56:5a:f0:b4:7e:ac:be:08:39:35:
57:f1:21:cd:e3:1c:d6:1e:f9:33:33:55:09:8d:73:9e:b6:3d:
dd:11:25:1a:22:de:e5:ce:cc:e8:be:e8:37:af:f6:59:53:e6:
2c:a1:95:ce:19:30:56:1b:b0:1e:96:6a:97:93:9c:f7:dc:52:
04:f3:ed:ef:9b:14:7b:64:95:1f:8e:f2:a0:16:ed:9f:a8:02:
b9:d3:f3:ac:2e:ab:57:3e:1d:78:af:5a:08:7e:66:e2:f3:67:
af:5a:6d:76:9a:aa:6d:00:58:f1:d6:a3:03:45:44:de:4c:98:
eb:36:9f:ca:cc:bd:bb:38:62:a3:00:a9:32:55:78:de:7d:e6:
80:ad:c1:e9:85:56:47:4a:b3:ad:53:bf:7c:74:33:bb:a9:3e:
ae:a2:ab:f0:bd:97:bf:e4:e7:68:70:91:fb:9a:b6:ce:3a:2c:
a7:28:67:9a:c8:37:ed:0c:78:88:14:69:47:73:d7:7f:ee:37:
0d:94:fb:d8:c4:0b:36:44:b9:56:84:f3:e3:f7:1f:8c:80:bd:
88:a6:10:5c:9f:3e:2e:cb:d7:d8:8d:f1:5b:a2:d5:40:bc:86:
3b:7d:a8:6d:cd:65:8f:f0:3b:6f:cb:8d:d8:20:43:d0:ff:a9:
5e:07:55:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:28 2026 by rpki-client