Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
File: zpTDHhXfS3pg5dQN86rBhS6Np0s.mft (raw, json)
Hash identifier: e3miBDaNfoLtGOOI5lg/UuLGTybtvDE0addkh48Tp0c=
Subject key identifier: 71:2E:59:6E:3E:25:EE:2A:76:B2:F7:D8:BC:6B:A3:4A:91:F5:2F:B7
Authority key identifier: CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
Certificate issuer: /CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Certificate serial: 019D31F54497FEC8BBF8139C00297711520C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
Manifest number: 0A89
Signing time: Sat 28 Mar 2026 01:00:50 +0000
Manifest this update: Sat 28 Mar 2026 01:00:50 +0000
Manifest next update: Sun 29 Mar 2026 01:00:50 +0000
Files and hashes: 1: 2asX8qOaxpLjyUU4myYKc0Ej3nA.roa (hash: xKHvXSgALDQpoGTmF3KkZGpVCQ/XwWuRiWZZZUlqzJ0=)
2: zpTDHhXfS3pg5dQN86rBhS6Np0s.crl (hash: ffGh5V8TXmwrI4A9Gq9ODJYi+QKPwjpQfGXSMYlLG2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f5:44:97:fe:c8:bb:f8:13:9c:00:29:77:11:52:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Validity
Not Before: Mar 28 01:00:50 2026 GMT
Not After : Mar 29 01:00:50 2026 GMT
Subject: CN=712e596e3e25ee2a76b2f7d8bc6ba34a91f52fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7e:ba:54:f8:49:41:33:4e:63:88:27:f2:27:
7f:58:fc:c2:da:d4:57:aa:58:7a:2f:c8:7d:b6:85:
87:93:5b:fb:2e:e0:a1:56:68:73:3a:b2:e1:bc:e7:
9d:f1:5e:57:12:7f:99:d9:b0:35:14:30:52:3a:01:
9e:83:41:4e:25:b9:fe:c5:b7:d0:d8:c1:2d:62:ea:
e7:67:44:e8:1a:82:37:75:65:20:ce:9a:67:fe:65:
70:e9:ce:be:49:6a:80:2d:64:ee:21:08:a0:71:d6:
ed:af:d0:f2:a1:49:4a:56:2b:3d:f4:d0:b3:39:bc:
75:13:dd:b9:3e:da:fe:55:a3:c1:0f:4e:2a:30:52:
ae:7b:f3:7b:83:cc:74:3a:09:a0:0a:a1:27:73:56:
fd:c4:ae:d0:76:11:d2:78:84:87:49:fd:e5:95:62:
ab:4f:d4:ee:a6:d0:d8:32:ca:83:ec:08:53:ad:cf:
f4:44:f5:0a:e5:e0:b9:15:0f:b4:bb:41:f1:f1:b6:
ce:da:c0:5f:76:2b:ab:fd:1e:1a:98:52:d5:c8:a7:
27:8d:b8:6c:38:4d:5f:d9:ec:e6:83:51:e9:f9:7a:
38:eb:c8:14:ba:c5:2c:bf:ba:d0:2d:4d:70:c4:51:
5f:16:c9:73:e0:07:e1:58:b2:2a:1c:07:d8:fb:cb:
37:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2E:59:6E:3E:25:EE:2A:76:B2:F7:D8:BC:6B:A3:4A:91:F5:2F:B7
X509v3 Authority Key Identifier:
keyid:CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:60:1c:e0:9f:74:ce:4f:be:54:1c:75:8b:8b:cc:40:f1:ff:
bf:05:7a:07:68:cd:5a:09:38:84:53:59:eb:a4:53:a3:4f:30:
a8:92:3c:24:df:e8:e2:c8:41:de:0f:6b:d6:3c:22:85:c5:a9:
b2:bd:15:52:10:69:36:40:15:8a:e2:9b:fc:d0:68:a8:81:62:
cd:6a:7e:89:fd:39:e2:99:3b:fb:4a:4a:1e:d0:f3:ba:89:18:
8a:70:a0:50:52:8d:a7:29:e9:de:24:3f:d8:b3:04:75:b5:43:
05:e7:8d:20:87:a4:fc:a4:be:ba:da:bf:91:14:13:26:43:2c:
0c:b1:ed:ab:fe:8c:da:cb:15:f6:24:85:92:18:70:5f:3c:4f:
db:ae:47:71:16:af:86:70:5f:70:72:e5:04:3b:4e:ee:69:95:
93:66:46:7b:5e:17:60:e5:07:e6:b8:2d:e6:84:08:0b:96:48:
05:2c:56:8f:a9:72:bd:61:af:58:f9:64:6f:5f:53:d6:89:65:
c1:cc:e3:aa:63:09:88:78:71:97:bd:5e:2d:34:75:7d:13:8a:
f8:c8:2e:75:33:4b:82:17:e3:54:21:e0:95:11:ce:dc:c9:d2:
32:97:5e:5a:5b:d9:58:dc:c3:b2:9f:1f:b2:a1:c7:24:92:d7:
f0:0e:c8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:15 2026 by rpki-client