Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
File: zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft (raw, json)
Hash identifier: OOZTHdDfH+f0OdOqAf9CF2UwPCS4C6CVWKW0Uomi5Zc=
Subject key identifier: 8C:75:D2:8E:51:81:CD:53:7C:2F:42:5F:BA:BB:EE:14:8A:1A:9F:96
Authority key identifier: CE:10:10:13:88:B7:CE:37:87:07:99:3A:05:76:AA:3D:DD:95:A9:79
Certificate issuer: /CN=ce10101388b7ce378707993a0576aa3ddd95a979
Certificate serial: 019D3150DF8C691F73576D6DEFCC06F917BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhAQE4i3zjeHB5k6BXaqPd2VqXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
Manifest number: 2B
Signing time: Fri 27 Mar 2026 22:01:16 +0000
Manifest this update: Fri 27 Mar 2026 22:01:16 +0000
Manifest next update: Sat 28 Mar 2026 22:01:16 +0000
Files and hashes: 1: i9y06XpGQ7gr-mdfp0S7uUFwlS4.roa (hash: /g2Zo7QZ+s2u4dfNouu8ACPFZIuHW58Outw73PTsBo0=)
2: zhAQE4i3zjeHB5k6BXaqPd2VqXk.crl (hash: G+ImutaQ0jqqGuHaOO1w9P5osDZn/ezEsEhzLoxRJFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhAQE4i3zjeHB5k6BXaqPd2VqXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:50:df:8c:69:1f:73:57:6d:6d:ef:cc:06:f9:17:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce10101388b7ce378707993a0576aa3ddd95a979
Validity
Not Before: Mar 27 22:01:16 2026 GMT
Not After : Mar 28 22:01:16 2026 GMT
Subject: CN=8c75d28e5181cd537c2f425fbabbee148a1a9f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:53:16:20:7d:e7:42:ec:8f:f8:89:db:af:5d:
f2:77:61:60:3b:f4:a6:85:09:24:9d:2b:3a:40:14:
28:79:20:40:9e:76:ac:92:e7:ae:07:0d:91:03:f9:
8a:5f:c0:46:57:6a:d3:8b:66:ae:c8:d8:5c:28:7d:
9e:b9:23:40:45:5a:18:70:fb:37:07:26:22:d7:ce:
e6:0c:dd:e9:a9:fc:ad:21:a5:cc:2e:2e:85:18:d8:
29:64:9b:67:d4:9d:9d:cc:e6:9a:35:2d:cf:d1:cc:
c7:a9:78:a2:99:87:9e:2e:5a:8f:7e:bb:82:ef:65:
b5:cb:4d:be:64:cc:05:bb:ce:b2:fd:30:58:86:90:
75:d9:32:a8:f8:c1:ca:99:16:62:9f:29:93:a6:5f:
d7:bb:29:03:5c:2c:9b:86:3c:8a:7f:d3:2b:d4:4f:
01:2c:09:7d:eb:e8:36:e7:43:bf:7a:f2:e1:5a:1d:
84:a9:0c:9a:37:5c:8f:41:c5:b7:1d:64:98:bd:5b:
fb:6c:3e:3e:7e:6b:9d:f0:78:59:6a:fb:48:81:7a:
2c:cf:da:f2:d1:d0:e8:64:82:2c:7c:56:23:8b:b9:
72:76:7a:f4:08:cb:c0:89:f1:da:ea:15:b3:a4:09:
c3:c2:17:74:b1:5b:27:7d:57:ea:dc:97:bc:91:a4:
2b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:75:D2:8E:51:81:CD:53:7C:2F:42:5F:BA:BB:EE:14:8A:1A:9F:96
X509v3 Authority Key Identifier:
keyid:CE:10:10:13:88:B7:CE:37:87:07:99:3A:05:76:AA:3D:DD:95:A9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhAQE4i3zjeHB5k6BXaqPd2VqXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b9:8a:15:1b:da:30:5f:a5:f1:72:52:87:1b:56:2c:4e:a3:
60:4d:fd:b2:1d:12:f9:97:d2:80:4c:d9:96:bf:31:c4:3a:d8:
03:7e:82:75:9d:2e:8d:70:d2:99:0c:a6:20:45:31:65:c2:39:
99:f4:ab:54:65:96:f4:fc:ca:cf:b5:3c:3e:cb:5a:c6:ec:4d:
e5:04:dd:88:ab:a4:2f:4c:9c:aa:2b:e0:86:4d:a8:d3:a0:71:
c8:4b:a8:cb:a4:4f:5d:e3:bf:c9:ea:8b:b2:70:9c:aa:cb:60:
8b:0f:9b:63:33:0c:20:26:a0:5e:43:57:9e:c6:75:12:0c:af:
e2:42:31:45:7b:1e:ea:ff:46:e5:83:79:a1:34:d1:1f:53:88:
20:a0:a6:c3:64:ff:ef:55:61:21:d9:7c:ec:34:39:8e:16:f3:
b6:67:f0:46:22:02:54:58:0f:a5:34:97:b1:b4:80:78:57:be:
48:bf:7b:52:15:34:af:81:13:9c:3c:55:e7:09:da:4d:cd:c2:
11:ce:0d:81:e4:e6:94:e9:fc:be:02:22:2b:10:53:b0:c8:9a:
6e:ed:e5:dc:25:e6:55:bf:76:8d:e6:29:e5:d2:ea:dd:eb:40:
5d:e4:83:d7:ec:af:6c:36:1e:f2:6c:b2:cf:6d:9e:af:61:e5:
a2:de:90:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 04:42:32 2026 by rpki-client