Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
File: zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft (raw, json)
Hash identifier: UECRA+NulOS7jevkNkrVBYLl1563bXrKrVbgYw6VPM8=
Subject key identifier: F9:58:04:8E:56:D3:59:BE:90:21:EB:1A:0F:40:33:6A:86:8C:D2:04
Authority key identifier: CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F
Certificate issuer: /CN=cd57ec4c4025adab88b92074ad46056e9f93099f
Certificate serial: 019D2771DFC2E21EE0A23E33B11735B00E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 00:01:07 +0000
Manifest this update: Thu 26 Mar 2026 00:01:07 +0000
Manifest next update: Fri 27 Mar 2026 00:01:07 +0000
Files and hashes: 1: 3GOUf5zM72xHW-KizqGmfejZI-I.roa (hash: 7Jjry34OgvJlCQgmEgxo8SwsDK8ifphC6Z5s0sCqAbk=)
2: zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl (hash: N2JbtdEY/o/JkyduUKilTXPCrX6VxyiJwIBDiruwtwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:df:c2:e2:1e:e0:a2:3e:33:b1:17:35:b0:0e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd57ec4c4025adab88b92074ad46056e9f93099f
Validity
Not Before: Mar 26 00:01:07 2026 GMT
Not After : Mar 27 00:01:07 2026 GMT
Subject: CN=f958048e56d359be9021eb1a0f40336a868cd204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:79:db:9d:3f:6b:e6:7f:ac:4a:28:98:5a:
eb:09:37:86:e1:d8:09:65:7e:2c:db:21:43:ca:e5:
69:f0:4d:1d:9f:8c:51:db:ec:92:26:dd:29:c5:16:
88:95:b2:db:60:df:55:c9:d0:1d:7d:4c:fa:1b:cd:
ea:c9:d6:4e:5e:54:5c:35:4f:72:5a:19:f4:46:17:
47:12:7c:a7:91:86:40:25:fe:d0:64:a5:f4:eb:d5:
e2:f1:1a:d1:7a:69:4c:1e:10:51:cc:ca:22:d2:38:
42:ed:64:53:57:b1:7a:38:df:77:ee:20:00:64:6a:
b9:36:37:b6:1c:fa:04:ad:49:92:6e:42:81:31:d4:
ba:1c:35:4a:e4:ee:62:4b:49:3c:4a:77:37:e4:37:
94:4a:7c:7a:9a:2a:91:e8:7f:6e:8d:b6:0a:76:1b:
61:bf:c6:76:2d:08:6e:24:af:c1:24:ed:9f:51:66:
af:7e:70:d0:09:d7:39:7f:9d:6a:98:ca:d3:47:bf:
b1:d5:12:03:d8:c6:a1:d8:b6:55:53:b9:47:06:03:
7b:92:0b:ea:49:e8:fa:62:41:e3:ab:7e:05:58:ee:
32:f2:73:c1:dd:c6:d3:72:4a:80:bf:9c:a2:d8:b3:
f4:9b:ce:a8:df:3c:1e:d1:d0:1f:53:cc:2c:9b:51:
99:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:58:04:8E:56:D3:59:BE:90:21:EB:1A:0F:40:33:6A:86:8C:D2:04
X509v3 Authority Key Identifier:
keyid:CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:29:68:6e:b6:82:42:c5:17:24:05:23:8c:63:9c:a0:2f:e1:
b6:25:68:9f:39:57:8d:2f:17:11:6b:20:f6:74:17:84:ef:55:
cb:79:6d:cd:7b:78:98:3a:72:fb:5e:bc:09:79:d9:87:fb:f4:
7a:b8:da:9e:8d:29:98:4b:34:dc:e3:68:af:fc:20:00:b2:df:
15:c1:10:3b:6c:b9:94:bd:55:85:45:52:95:cb:f9:5e:36:d7:
c3:54:b8:16:1a:75:db:93:ff:ef:4c:51:25:8b:67:9c:e8:18:
30:90:fb:ea:67:cc:28:72:eb:07:3d:29:bb:7e:c2:8b:c7:99:
55:5a:15:94:5c:44:12:a0:8f:3b:ee:d5:b5:86:f8:5c:b9:d8:
db:1c:e0:18:bc:1b:10:98:5c:d9:e6:26:e6:77:a9:61:4c:59:
38:7a:33:69:02:09:a7:20:31:43:a4:c2:1a:2b:d4:a9:c4:02:
ac:0a:93:63:2a:56:d3:db:5b:02:d0:04:eb:37:1b:eb:02:11:
7d:75:04:af:da:ad:b0:17:82:55:50:b1:e8:6b:c9:eb:cb:93:
25:14:a4:95:de:b4:f0:6f:27:be:26:03:d5:b3:89:c6:2b:cc:
2b:30:cc:70:65:61:37:05:cd:d8:63:da:1a:10:2f:0b:63:db:
36:e6:9d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:57 2026 by rpki-client