Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft
File: zE1IcI2lBUlZ5hilguKMFV_vET8.mft (raw, json)
Hash identifier: CbosUjeaiBb/nMClXIW2G0arv0cZUAIL124uXDsqp5M=
Subject key identifier: 65:8E:93:7B:B0:2D:84:7E:C9:13:B4:87:10:E9:E4:F9:90:A2:F4:C0
Authority key identifier: CC:4D:48:70:8D:A5:05:49:59:E6:18:A5:82:E2:8C:15:5F:EF:11:3F
Certificate issuer: /CN=cc4d48708da5054959e618a582e28c155fef113f
Certificate serial: 019D273ABC0F3ED92751E946C1F8C8E0FB91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE1IcI2lBUlZ5hilguKMFV_vET8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft
Manifest number: 07E2
Signing time: Wed 25 Mar 2026 23:00:53 +0000
Manifest this update: Wed 25 Mar 2026 23:00:53 +0000
Manifest next update: Thu 26 Mar 2026 23:00:53 +0000
Files and hashes: 1: 46wXiqms5HpiGBoK15ocXo29pM4.roa (hash: oBJWgh+2jPc8gknL0v2rnOXcYX3sL1PfoR3y8FKwdXQ=)
2: zE1IcI2lBUlZ5hilguKMFV_vET8.crl (hash: P+APM3hzMDftcxN7d+ZXulPl7xoFd+JaWrRQ/fiLyi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zE1IcI2lBUlZ5hilguKMFV_vET8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:bc:0f:3e:d9:27:51:e9:46:c1:f8:c8:e0:fb:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4d48708da5054959e618a582e28c155fef113f
Validity
Not Before: Mar 25 23:00:53 2026 GMT
Not After : Mar 26 23:00:53 2026 GMT
Subject: CN=658e937bb02d847ec913b48710e9e4f990a2f4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:84:6f:ce:89:cd:73:4d:4c:19:77:88:7c:
d4:87:90:4e:9e:02:66:a9:19:fc:ee:09:42:7d:9c:
12:69:65:3d:10:8a:65:e0:6b:37:03:e3:f6:cb:39:
b8:c0:92:c8:74:3c:aa:0a:d0:c0:3a:16:75:5e:50:
be:84:ac:eb:77:04:b1:df:96:2d:8c:d0:6c:ea:3e:
0b:fd:f6:05:54:43:81:c6:11:f8:d5:7b:39:1e:3a:
c2:07:6a:3b:3e:05:6b:bd:31:99:2e:70:42:ca:d6:
98:07:f5:cb:0c:7d:03:c7:31:c9:1a:83:1b:bb:10:
01:dc:bc:a3:ed:bb:48:eb:82:cd:62:c4:22:c6:4e:
34:e1:e5:18:37:d0:e5:1e:80:3e:db:bf:3e:a4:46:
4e:b2:44:93:cf:9c:09:64:98:45:8a:7c:14:84:d0:
10:7d:43:5b:f6:c9:66:fc:11:fc:1c:8e:38:df:2c:
94:14:38:39:4a:25:8f:c9:da:da:be:ba:83:95:3b:
ec:63:f1:27:95:7b:1e:77:bf:50:d8:0c:b9:1b:20:
45:c2:29:5f:c4:26:ac:a9:ad:c8:9c:d7:25:e2:a7:
c4:39:28:01:2e:56:62:d0:1e:47:25:12:6e:9f:48:
9f:13:67:27:f0:2f:21:0d:5f:ab:3d:22:74:da:3d:
47:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8E:93:7B:B0:2D:84:7E:C9:13:B4:87:10:E9:E4:F9:90:A2:F4:C0
X509v3 Authority Key Identifier:
keyid:CC:4D:48:70:8D:A5:05:49:59:E6:18:A5:82:E2:8C:15:5F:EF:11:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE1IcI2lBUlZ5hilguKMFV_vET8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:36:ca:b2:a6:a4:6d:c9:81:8e:65:cd:bb:57:5d:8c:fc:45:
43:d0:46:b1:02:29:66:9b:d2:b3:04:7c:61:ca:f7:3e:45:0b:
5f:67:bb:12:5f:14:ba:f5:f4:cb:9b:66:32:23:5e:af:dd:ae:
65:e5:07:d8:3f:0a:ab:f1:4f:ac:c3:b6:61:96:cf:f1:90:67:
6f:b6:5e:5d:a6:fd:33:8f:73:8d:05:64:a3:dd:eb:3a:64:5b:
cc:84:6f:51:4b:9f:be:05:37:65:51:2d:4a:a8:6a:6d:44:2a:
ae:1d:b0:28:9e:7f:dd:1c:b9:36:20:ec:2a:81:51:cf:30:ea:
7b:96:e6:54:37:c6:72:54:74:df:75:de:83:4f:d6:17:b5:82:
12:a5:55:71:08:92:c3:cb:83:0f:fd:49:b2:63:35:c9:27:14:
f7:9f:a0:7b:19:43:40:06:c0:da:63:a5:e6:2f:ab:30:fe:63:
46:70:04:7e:bf:c5:7c:fa:c1:82:4b:17:b0:80:2b:a4:79:78:
4d:11:0a:b3:60:c1:06:0f:d5:bb:c8:ee:62:a8:15:ef:fb:a9:
58:88:c6:93:ef:bf:02:37:f0:00:ba:48:62:45:28:48:24:a3:
de:35:19:2c:12:11:86:e1:db:51:b8:0d:0e:66:a8:49:3f:0b:
d3:cb:f9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:17 2026 by rpki-client