Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
File: z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json)
Hash identifier: in2GH4UXkts6myZzOaOJTgeRo2oVE5Lx08ZAyMba+6w=
Subject key identifier: FE:37:76:AE:7B:B1:6F:98:23:3F:28:B3:39:9F:97:B5:CB:B9:F5:6B
Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Certificate serial: 019D25F211D53DDCE3C2641B31C502877C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
Manifest number: 05A7
Signing time: Wed 25 Mar 2026 17:01:54 +0000
Manifest this update: Wed 25 Mar 2026 17:01:54 +0000
Manifest next update: Thu 26 Mar 2026 17:01:54 +0000
Files and hashes: 1: VBl0vhkZ0p5h13VJMHzt2wrsQ7A.roa (hash: VVaZ8MZsUSIufXGhoXhGO0V1DGyl/LodpDCAxeW4mZ0=)
2: voKmqzxnpt1_Etyi16YW_6f_LiA.roa (hash: FSyRyjfIYpd8tAuhdZ0kMGNXftsQsnkKkGGZLUK2+XE=)
3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: 9LJmELp2DPk/ACYjzzgDDL9CZddUWltcjFnO0imjCQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:11:d5:3d:dc:e3:c2:64:1b:31:c5:02:87:7c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Validity
Not Before: Mar 25 17:01:54 2026 GMT
Not After : Mar 26 17:01:54 2026 GMT
Subject: CN=fe3776ae7bb16f98233f28b3399f97b5cbb9f56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bc:c7:e4:15:4d:b3:44:79:56:1b:14:e5:0c:
b0:67:82:9f:f6:c5:24:38:0c:6b:e9:67:4b:da:87:
3e:d9:ef:bb:97:7c:1c:05:65:ed:e0:39:13:da:02:
d7:d4:58:ee:df:8f:8d:18:e8:eb:fe:b5:a3:f8:34:
4a:d7:2d:5a:96:d1:27:7b:33:06:e0:e6:4c:ce:0e:
f5:3a:2a:a7:b9:41:b1:78:4b:a9:25:8f:d4:97:be:
31:dc:30:bd:6a:ae:cb:f8:07:31:5f:96:ec:10:f1:
98:82:0b:e1:8f:52:d9:34:1f:6f:a9:a1:1d:1a:6d:
55:ed:11:a9:0a:2b:80:41:ae:fa:15:bc:28:96:bc:
d4:b8:33:47:10:4c:2a:0e:82:6f:82:df:94:34:52:
1b:1d:47:e6:9a:71:b0:46:80:cd:11:2e:c3:4d:81:
e2:54:b6:78:17:a2:ff:16:54:95:dc:05:20:a4:4e:
8b:ba:5e:de:59:df:4c:1e:b1:51:30:01:4d:dd:ad:
7d:5b:ca:7f:af:2c:23:70:f5:ef:f7:d1:43:29:2c:
2d:2b:01:83:a4:ef:f5:e5:35:59:05:69:5d:28:33:
e5:13:e7:1b:31:39:bc:7c:8b:9c:14:d5:be:f9:a6:
ba:7f:4c:51:14:60:38:5d:2a:34:0b:a0:2e:85:fe:
09:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:37:76:AE:7B:B1:6F:98:23:3F:28:B3:39:9F:97:B5:CB:B9:F5:6B
X509v3 Authority Key Identifier:
keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:04:76:75:9f:d1:74:5e:5c:d8:f9:7c:8f:9e:a8:50:52:b4:
9e:a4:64:ca:16:76:8c:81:1d:8f:e1:27:92:44:8c:f8:2c:91:
b5:20:1a:5d:88:d4:ee:d9:61:20:b4:43:53:59:8b:8f:57:af:
99:2b:1a:d5:fa:0c:8d:a4:17:18:b9:f2:b7:53:53:94:e4:20:
4d:42:a9:47:ee:26:c2:23:e1:ab:84:3f:c7:6b:24:79:52:6f:
cd:e3:81:8d:4f:cd:13:a2:e1:3b:01:f3:88:4f:8c:87:74:cb:
ad:9d:ba:4c:be:6c:c6:a6:64:60:0c:51:22:c2:f1:93:96:73:
7a:b8:dd:b2:df:b3:95:a4:c0:a0:38:9a:10:e5:25:d2:6b:20:
51:b8:0c:10:24:13:4c:92:17:db:06:52:f9:e4:99:87:28:52:
25:ad:ca:63:e1:65:26:bc:9d:7e:cc:12:17:d3:f7:69:1f:8c:
6a:22:7e:2d:38:68:6d:24:37:07:08:95:eb:1b:ca:3d:a9:b9:
1f:5b:66:53:9f:2f:57:33:e2:2a:32:6c:a9:18:49:82:6e:7a:
fa:d0:f8:49:5d:6e:86:05:47:25:bc:5a:76:29:0f:a0:20:b1:
8a:fe:7a:bc:f0:d9:9f:aa:c7:13:bc:a3:d5:9e:3a:aa:3a:6b:
8e:a6:50:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:20:25 2026 by rpki-client