Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
File: zT29X8b5G4B7e8TPbmRuNFhirz4.mft (raw, json)
Hash identifier: TD8tpZ3tORssZMWsQpJ6u2aNaOCUJVbDHP4AxjiPics=
Subject key identifier: 82:A9:D9:EE:B0:D0:3D:EF:EA:C2:0E:0C:7C:9E:99:E4:27:A9:84:B1
Authority key identifier: CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
Certificate issuer: /CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Certificate serial: 019D2816877FBB85CC6B8491241346B90D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
Manifest number: 082D
Signing time: Thu 26 Mar 2026 03:00:58 +0000
Manifest this update: Thu 26 Mar 2026 03:00:58 +0000
Manifest next update: Fri 27 Mar 2026 03:00:58 +0000
Files and hashes: 1: W37sGJ1Z1wl4UUbIKXQMtHltG0E.roa (hash: hXtR6w7vecs+GA3es0V1qVgIw93rkqQSf8/pd9Bww6I=)
2: zT29X8b5G4B7e8TPbmRuNFhirz4.crl (hash: MxZp27PGCpeVA76cZ0vAT/r9s6JpDrutCTYASSAVqvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:87:7f:bb:85:cc:6b:84:91:24:13:46:b9:0d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Validity
Not Before: Mar 26 03:00:58 2026 GMT
Not After : Mar 27 03:00:58 2026 GMT
Subject: CN=82a9d9eeb0d03defeac20e0c7c9e99e427a984b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5f:93:1e:ce:86:9a:4b:16:8f:01:3d:34:dd:
b9:59:4a:11:d5:b1:45:f5:b4:29:39:25:94:ad:fb:
7a:53:cb:c3:b8:dc:4a:00:00:a5:44:cd:ac:fb:16:
fa:25:51:1d:d6:1f:9a:2c:1c:30:9d:0d:39:f9:ff:
33:dc:46:40:5c:89:7a:4b:22:23:ef:a1:eb:14:6a:
e6:6c:a7:01:d4:87:99:da:04:30:33:b2:3e:bd:2f:
5d:2d:4e:b4:c8:02:50:f8:15:1f:2d:3a:7d:cd:37:
fb:45:ff:19:f7:e0:a9:20:1f:02:ac:83:60:10:a9:
29:9d:30:5d:42:b1:4c:63:8e:9e:e3:ba:c6:a2:72:
39:21:d8:c8:f0:80:89:ee:52:e1:63:1d:98:7e:d4:
0e:6e:51:7d:ee:f8:03:13:cf:cc:9b:bb:0e:b8:f7:
1b:dd:c4:c8:dd:5f:db:1c:5c:02:96:a5:d7:ef:0e:
8e:a0:02:ed:fe:5e:3c:23:e7:fb:ac:eb:9d:fa:70:
fd:97:65:b6:71:da:77:88:ce:c4:74:f2:b9:bb:b1:
5f:8c:df:6a:56:58:30:b6:f4:1c:b4:a7:e3:d1:48:
e9:94:b7:32:da:01:b8:a8:4a:a3:83:b5:0f:66:04:
5d:a2:0b:86:30:4d:4a:93:9d:f6:25:7f:79:72:9f:
b3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A9:D9:EE:B0:D0:3D:EF:EA:C2:0E:0C:7C:9E:99:E4:27:A9:84:B1
X509v3 Authority Key Identifier:
keyid:CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:4b:5f:e0:a3:62:f4:8d:59:5c:e6:7f:e1:ef:07:3a:69:d3:
b4:5c:63:92:57:8f:31:49:5b:86:95:37:02:16:cf:e3:17:23:
58:cb:f9:4a:0b:8d:58:b9:2e:65:ed:a3:e2:d9:b3:03:74:61:
87:68:36:b5:20:7f:87:23:e3:b1:89:f3:14:96:e7:d9:71:c5:
1d:92:a5:99:9f:92:bf:46:e1:f2:1d:4c:69:0b:5c:6b:56:7d:
ee:a3:32:db:e6:58:35:e6:e3:19:69:1d:19:e8:6c:c3:3d:72:
70:c4:04:bd:cc:5f:31:7b:40:21:0b:c0:8e:87:4c:38:cd:1c:
9c:21:ed:d3:39:4d:72:e7:f5:67:91:fa:94:f4:a4:95:93:75:
78:5a:c0:38:d0:cf:51:8b:da:a2:1f:b1:74:47:31:63:33:fc:
88:a7:3f:fe:8c:0f:0c:6e:ca:4c:12:e8:30:af:c6:fa:45:68:
0a:a5:2a:db:b8:67:2e:c0:b1:9c:5f:86:f2:0f:e9:93:a7:db:
ef:71:f6:ef:bc:ba:eb:ee:8e:65:af:87:ca:8a:98:ad:6b:d9:
5a:18:56:d2:ab:4d:2e:2d:59:41:26:46:50:ad:31:d1:e8:05:
f7:53:fb:38:87:4e:ae:da:1a:93:42:0b:f1:af:20:c7:34:3f:
a7:36:b4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:13 2026 by rpki-client