Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
File: zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft (raw, json)
Hash identifier: 4c9uRsOtBpToXu8ubJsfcdPbNYgZZvtOZTPnBVJpKGc=
Subject key identifier: E2:7A:55:7D:D8:96:AB:23:6E:F0:11:A1:CE:1D:80:50:4E:6C:46:6A
Authority key identifier: CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
Certificate issuer: /CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Certificate serial: 019D25BA02C027E485E6BEC74F4F507C1F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
Manifest number: 1593
Signing time: Wed 25 Mar 2026 16:00:40 +0000
Manifest this update: Wed 25 Mar 2026 16:00:40 +0000
Manifest next update: Thu 26 Mar 2026 16:00:40 +0000
Files and hashes: 1: bWCw9QvZ0n-9vSDkgSO_NuyUw34.roa (hash: Nv8e19B6F0Z+GsL3XuEotkyjFs4rEednWhdiNCJb51g=)
2: zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl (hash: Toz+WUlSLrVMIkLrBNe3ytBOyccPobuKq35q6EhmBw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:02:c0:27:e4:85:e6:be:c7:4f:4f:50:7c:1f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Validity
Not Before: Mar 25 16:00:40 2026 GMT
Not After : Mar 26 16:00:40 2026 GMT
Subject: CN=e27a557dd896ab236ef011a1ce1d80504e6c466a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:16:34:f3:b4:4b:9c:fa:72:2e:0a:1e:f3:c4:
86:e7:50:c2:c2:03:8f:db:a5:6f:08:15:22:1d:a9:
63:a0:3f:2a:54:46:db:67:33:f9:97:3f:96:d6:d4:
9c:b8:ca:76:78:44:5d:44:1c:2c:e6:32:2c:23:58:
8b:dd:41:42:94:ab:f4:1c:2b:12:d8:c2:19:76:41:
f5:02:29:ef:6c:b2:14:7f:d6:fd:85:f6:f1:c5:96:
00:7f:ec:81:24:a1:fa:ad:fb:11:20:8b:86:a9:c2:
ab:4c:a4:a8:c4:3f:4a:9c:a7:3b:e5:dc:55:c9:39:
40:c6:3d:e5:98:13:b0:45:a1:15:51:1e:ac:89:f6:
aa:58:3a:6e:97:a4:6b:1e:fa:18:42:b2:88:d5:80:
03:0d:cf:56:f1:aa:8f:e5:37:01:f5:a6:7e:e8:35:
01:bc:ff:86:c8:a8:22:1e:db:ac:21:57:58:3b:1d:
bf:8f:95:fe:6d:d6:79:2f:e5:2a:03:26:34:c6:1e:
ce:b0:e4:83:9f:5f:e5:46:9e:16:b5:61:85:87:f2:
75:f2:81:20:c1:bd:26:44:5f:57:ca:90:1b:3b:50:
06:ae:5d:cf:aa:57:f2:c2:b7:61:0e:c6:e6:52:22:
a6:a0:6c:a4:df:ab:2d:37:1c:31:0d:0d:d7:75:30:
72:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7A:55:7D:D8:96:AB:23:6E:F0:11:A1:CE:1D:80:50:4E:6C:46:6A
X509v3 Authority Key Identifier:
keyid:CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:30:2a:03:9a:7f:71:40:19:2c:5f:ac:77:d8:44:99:37:fe:
31:ae:94:fc:83:ce:4d:d7:07:2d:28:4b:42:73:3b:cd:d0:83:
5a:10:5e:fc:3c:1d:01:41:7d:1a:7c:26:c1:6d:a1:3d:8a:de:
1e:e3:f1:10:01:91:40:f9:1b:06:be:b3:15:41:66:18:10:88:
0d:5d:82:d6:92:14:3a:ac:6b:3c:0d:72:5c:b7:58:00:99:ab:
a9:92:c8:f3:03:8e:ca:a0:12:9c:d2:da:50:2f:38:4b:a3:c3:
eb:1d:f9:64:41:63:42:a8:62:40:8b:ad:12:bd:82:23:b1:29:
ab:7e:13:2a:5c:a1:4c:ef:c1:8c:9a:b8:59:a4:45:0b:9f:a9:
c4:ed:af:18:43:ff:ac:65:39:16:39:1a:c0:08:b5:f6:1c:80:
83:bb:5f:2a:c4:45:ba:ca:21:a7:7a:c7:ef:cc:0f:d1:69:6d:
0e:91:39:74:67:da:78:ee:06:e9:56:f8:98:a0:ad:21:55:6a:
29:5f:1e:f0:70:8b:f1:57:1d:d1:5a:91:d7:4b:89:5c:0d:54:
e6:55:5e:7a:61:b5:6e:2e:d5:20:47:2a:55:61:64:84:86:35:
f2:82:3f:2a:28:42:9d:5e:1b:2a:0c:af:23:de:b5:77:e3:cd:
d7:27:3e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:47:16 2026 by rpki-client