Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
File: zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft (raw, json)
Hash identifier: QLnqtIAf/RXIUhk4FrJbNHCiyuraeMgOp+CdelvTv6Y=
Subject key identifier: 82:55:36:EE:93:07:C7:EF:72:C2:1F:6E:AD:28:47:B5:C2:6D:9A:71
Authority key identifier: CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
Certificate issuer: /CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Certificate serial: 019D333EBBD2295EB0FC3B59D06344510B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
Manifest number: 08C5
Signing time: Sat 28 Mar 2026 07:00:42 +0000
Manifest this update: Sat 28 Mar 2026 07:00:42 +0000
Manifest next update: Sun 29 Mar 2026 07:00:42 +0000
Files and hashes: 1: aESuuALkp9R98yDiNUY5nveL4-o.roa (hash: o135yeh0bwtH5IHdNJMNH9c/+RcrghX/j14puM1j2sk=)
2: zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl (hash: BJIsPJPJwQ/isruvAHbI78cki+wJEXENoHC9Attc9u0=)
3: zp6kT4fjph_A7Z-y494w10c-4u0.roa (hash: WOnZMPb4q3t7/YEohAO+g25GuBKKPvaAblQVDeWj5K0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:bb:d2:29:5e:b0:fc:3b:59:d0:63:44:51:0b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Validity
Not Before: Mar 28 07:00:42 2026 GMT
Not After : Mar 29 07:00:42 2026 GMT
Subject: CN=825536ee9307c7ef72c21f6ead2847b5c26d9a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:18:34:82:bf:9c:f4:ba:fb:29:e1:c5:d1:cd:
0b:6a:9b:d7:aa:ab:a3:e2:02:59:e3:4a:a3:13:89:
5b:79:fa:af:7d:4b:00:14:e5:8b:df:80:24:77:b5:
8f:b6:43:af:08:ba:03:21:e8:ec:e2:63:cf:55:0b:
62:64:a6:1e:8a:16:90:9c:2a:bd:c2:05:ea:e6:61:
a8:a0:66:bf:c0:2f:ac:31:75:05:35:a4:e5:7b:d4:
57:58:ae:15:69:3b:ed:5b:18:9d:4a:03:f4:4d:c1:
ad:7a:e0:14:a4:b4:2f:63:c8:77:ae:f2:ba:eb:e0:
56:97:85:b2:c1:cd:6b:5c:d7:bf:bb:a6:51:ad:d9:
7d:a1:28:0f:91:49:52:e1:46:bf:c3:73:66:c2:68:
86:24:65:7f:6e:fa:85:ff:69:9d:bd:b8:6f:dd:90:
61:47:01:c6:b2:d6:32:a7:c0:0f:3b:a7:bd:76:20:
ca:a6:6b:41:02:47:ea:e8:35:d8:ce:04:50:97:0d:
c7:bf:41:48:c2:4d:85:a9:b5:47:98:67:ea:65:53:
5c:ee:8c:c0:39:99:1e:d0:0e:65:a0:f9:9d:fe:34:
99:2a:61:67:79:b3:c3:92:dd:46:9a:45:9f:bb:d6:
4d:32:be:a3:97:7a:97:ff:1f:f0:9e:01:6f:3b:a6:
64:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:55:36:EE:93:07:C7:EF:72:C2:1F:6E:AD:28:47:B5:C2:6D:9A:71
X509v3 Authority Key Identifier:
keyid:CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5e:99:d3:bd:b8:f8:a8:43:2e:cf:21:cc:fd:d1:f5:39:d2:
cb:7e:77:0e:63:d2:31:0c:70:c5:93:75:49:a2:53:70:62:ae:
6c:bf:12:35:32:37:13:50:7e:4e:6c:d3:98:ed:23:11:5e:b0:
ca:ea:44:bf:97:58:e0:04:17:f6:83:ed:ea:bb:6d:df:29:ac:
5a:12:0d:17:90:ea:83:f0:3c:eb:18:0b:c4:7b:f9:b0:bd:43:
5b:fa:b8:7a:72:cd:f8:0f:bc:3a:c8:86:74:21:0c:b7:71:71:
96:11:11:13:99:1f:8b:3b:e5:38:39:4f:32:98:d3:71:da:80:
35:28:6e:6a:a0:21:4c:9e:e0:20:0a:72:6f:c2:2b:a9:cc:89:
e5:66:e4:e0:a2:69:b0:a3:5e:e4:f4:b1:81:26:33:0d:62:cb:
14:dd:50:83:1f:77:61:55:8b:31:cb:ae:ea:63:72:84:bc:ce:
c4:81:cd:33:6f:12:76:2e:2d:49:6b:45:c0:da:8a:d6:11:b8:
8b:67:67:60:4c:aa:b4:bd:16:75:4f:73:64:8e:1b:6a:9d:d9:
d6:5b:42:4d:48:7e:9c:0a:ae:3d:b5:f8:25:78:f3:f6:89:aa:
b1:aa:1c:85:f1:c0:d4:9f:f4:d4:7f:5f:b8:6f:ab:f4:43:a7:
e3:2e:69:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:09 2026 by rpki-client