Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
File: zCdTGtmZttWgRBt1-up9V4ZT5Co.mft (raw, json)
Hash identifier: 3WZI5IQNKs/z9M45PwuLHSnCKvkrWAgldv8NhzlT8xk=
Subject key identifier: BA:6C:AD:C4:A7:DF:B0:8C:19:AB:E7:0C:BB:91:BD:5D:9B:54:F0:EA
Authority key identifier: CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A
Certificate issuer: /CN=cc27531ad999b6d5a0441b75faea7d578653e42a
Certificate serial: 019D25BA5FDED2BF7D859E4D1D40EE1ED8DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 16:01:04 +0000
Manifest this update: Wed 25 Mar 2026 16:01:04 +0000
Manifest next update: Thu 26 Mar 2026 16:01:04 +0000
Files and hashes: 1: k212pOftYaKL3__dZMrFZE2MH5E.roa (hash: PKolWasV9tkUQ7UVtjo0IH2y7lrM7NWS9+jgOePyuP8=)
2: zCdTGtmZttWgRBt1-up9V4ZT5Co.crl (hash: xbh8I6zzR3p6n7LvJU5ptfBrhDU5F+Dd1/E+BcaB9DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:5f:de:d2:bf:7d:85:9e:4d:1d:40:ee:1e:d8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc27531ad999b6d5a0441b75faea7d578653e42a
Validity
Not Before: Mar 25 16:01:04 2026 GMT
Not After : Mar 26 16:01:04 2026 GMT
Subject: CN=ba6cadc4a7dfb08c19abe70cbb91bd5d9b54f0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f7:3d:06:8e:ec:f2:63:bc:12:7c:3b:66:c7:
37:c7:30:cc:f0:e7:69:39:ae:40:e7:b0:b6:31:02:
a9:fc:d7:9e:bb:d1:d4:6e:c4:f8:7f:d8:65:04:8b:
ea:48:1c:52:ba:3a:06:8f:a3:f3:45:b6:63:46:26:
e4:0e:78:93:65:da:9b:ac:bc:c0:61:6d:7e:b4:d1:
f2:18:ff:dc:64:97:1e:e6:e9:37:b9:f5:66:77:72:
50:06:d7:f3:c6:dd:92:b9:9b:77:a5:18:a4:e8:89:
e4:c7:22:7b:bc:01:54:49:8c:15:db:75:db:b6:ae:
6f:c7:6f:d6:8c:43:7e:94:ee:eb:9f:ed:bf:81:63:
d1:50:0f:de:28:cb:b7:b5:ea:03:67:80:aa:c7:4d:
6e:2e:b4:15:22:43:42:07:85:d9:43:31:24:8c:db:
8e:fa:fa:39:04:70:8a:f2:29:90:25:66:15:d9:68:
35:a4:41:be:89:97:c8:26:64:b5:9e:86:b9:ee:62:
28:1f:52:bb:98:4a:d3:2a:79:46:ec:1f:de:47:86:
d1:6f:73:e9:42:a7:02:32:e3:89:15:06:78:94:6a:
b8:8a:6b:09:c4:85:40:9f:24:f7:d3:14:ba:33:86:
da:ca:8f:e2:7c:08:13:66:16:38:84:99:68:bf:12:
f5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6C:AD:C4:A7:DF:B0:8C:19:AB:E7:0C:BB:91:BD:5D:9B:54:F0:EA
X509v3 Authority Key Identifier:
keyid:CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:03:82:dd:ba:25:d7:3e:0d:36:82:37:0f:8a:8f:f6:d1:6f:
37:d0:c5:1b:fb:c7:2e:ae:39:58:6c:3d:1f:d0:c9:4b:f9:3c:
73:35:23:9d:72:ec:35:35:e4:8a:29:bd:e0:9c:9f:2a:52:8b:
37:6e:2a:ca:1c:b3:95:b6:a4:93:2b:80:b6:32:7a:97:2e:84:
d7:f1:c1:2b:d4:7d:0e:d5:9c:94:44:7c:df:bb:b9:dd:05:cc:
a0:1d:a2:34:8a:af:00:06:6d:57:3f:18:2e:d2:1d:41:a1:bd:
44:22:9e:7e:36:5f:f7:3e:2d:a9:2c:2e:b1:ea:78:31:4f:e0:
cd:f6:88:52:0a:d9:6d:f4:72:b9:bb:54:55:4d:cd:b5:98:75:
d0:ef:1c:3f:24:c2:33:c5:1d:9e:c8:4b:19:5f:11:68:04:5d:
07:4c:2f:d9:13:87:7b:7b:9a:1a:3a:71:4e:d0:6b:72:ce:80:
95:05:da:a5:e0:c0:27:7b:e2:39:41:7d:13:38:69:a6:62:e2:
50:30:50:8a:b0:51:ba:c3:c5:88:14:b6:c4:ad:36:69:98:37:
f7:ca:9e:fa:7e:bf:7b:d3:ed:fc:0c:e7:1c:7e:5f:6c:6c:60:
f7:09:f2:13:de:6e:3c:e5:a3:07:09:97:b5:55:52:0f:fd:ba:
4b:42:7a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:13 2026 by rpki-client