Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
File: zfUae0xbJFgCkrjEqmqpwyVmVIA.mft (raw, json)
Hash identifier: UBZZT6MsaQMojmb/Epx+i8K0aco1E9/K9rPVuDcsrV0=
Subject key identifier: EC:59:BE:ED:3E:7B:CA:DA:DE:F4:70:95:C4:E9:DF:23:41:50:51:E4
Authority key identifier: CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
Certificate issuer: /CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Certificate serial: 019D2AA9D3D421F9EDADF2EA552268692CA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
Manifest number: 0D7E
Signing time: Thu 26 Mar 2026 15:01:05 +0000
Manifest this update: Thu 26 Mar 2026 15:01:05 +0000
Manifest next update: Fri 27 Mar 2026 15:01:05 +0000
Files and hashes: 1: JLo2q2iBmFKeMgKoTnjBpvjAjJY.roa (hash: qaCH/S3HYUp62JimShr7jtytmfdudoB+yYvxVEqY8JY=)
2: zfUae0xbJFgCkrjEqmqpwyVmVIA.crl (hash: jlWjZ+T7AsI8FjjNzKXeC14vfhBGw/OpRTqb8dQAXEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:d3:d4:21:f9:ed:ad:f2:ea:55:22:68:69:2c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Validity
Not Before: Mar 26 15:01:05 2026 GMT
Not After : Mar 27 15:01:05 2026 GMT
Subject: CN=ec59beed3e7bcadadef47095c4e9df23415051e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:99:01:1a:2f:4f:b9:86:a8:66:ea:88:90:1e:
a4:38:36:0a:4a:3b:25:50:81:09:63:4e:4d:c9:e9:
49:a7:c9:88:2a:4d:1d:f9:94:12:3b:c5:8c:53:42:
73:94:bc:0c:45:f0:ca:10:ae:90:83:05:a9:72:a0:
06:67:58:0e:76:02:8f:8c:a5:74:37:87:ea:58:1e:
55:78:b9:2c:d7:96:9e:36:a2:c1:54:33:84:12:03:
51:85:75:f9:f7:86:83:4e:e4:72:a9:b9:1a:58:90:
6d:48:20:a3:48:3b:61:4b:f4:36:94:99:11:6d:4a:
9f:dd:d7:5e:92:f6:91:b4:11:49:74:ce:c5:30:e7:
7f:a2:06:13:c8:d9:4e:4c:34:85:59:e9:b2:0d:97:
db:a1:b6:87:2f:09:ac:6e:fa:59:62:00:ea:ec:cc:
cc:8e:97:f3:02:ac:df:1d:e0:12:2f:c8:9c:92:33:
55:25:21:b5:dd:52:52:e7:cf:66:e4:bc:31:2d:80:
52:89:19:12:3b:04:d1:4b:43:b7:8d:55:60:52:7d:
1d:aa:46:43:6e:cf:d9:fb:d4:fc:05:43:36:ac:8b:
e0:2e:d6:39:ad:49:43:f7:2d:bf:73:61:46:0f:ac:
ee:2e:87:c3:a2:df:d8:e0:59:2e:07:73:38:b3:5c:
e5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:59:BE:ED:3E:7B:CA:DA:DE:F4:70:95:C4:E9:DF:23:41:50:51:E4
X509v3 Authority Key Identifier:
keyid:CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4e:37:2d:a4:cb:74:bb:ba:b9:4a:93:a7:26:ec:ce:7d:ce:
cf:d0:0b:56:09:4a:6d:6c:7a:12:64:77:ee:43:1a:28:b5:78:
a7:7b:66:5d:d7:bb:a2:2b:2c:16:d9:a6:a9:58:d9:93:ed:fe:
6f:49:04:67:14:30:10:d9:df:04:2f:53:52:ca:e2:25:46:92:
39:75:dd:9f:25:f4:93:87:5b:fd:9c:2b:23:0f:e4:d3:16:c1:
53:e5:90:3d:fd:fb:0f:88:4a:6e:55:5b:0f:4b:fe:a6:f7:ee:
49:96:99:af:e2:ca:b4:ea:93:41:4a:72:73:14:03:53:65:94:
12:56:cd:25:c3:b9:56:81:b0:73:36:f8:35:0e:b4:c9:cd:1f:
27:4f:dd:e8:ee:0c:05:1c:7f:d0:81:a3:db:21:a0:45:a0:aa:
b2:f7:0f:62:3b:28:65:84:6e:4a:c6:18:40:bd:04:d8:a7:0c:
b3:94:c1:c9:4a:1e:d2:cb:29:2a:65:30:fe:e8:2a:10:49:58:
d1:80:03:42:99:b3:6c:80:df:7a:1c:13:62:b9:ca:fc:cf:be:
50:b3:2f:73:09:59:9b:14:e7:e9:47:98:31:2d:df:4c:a5:80:
b1:6e:f6:82:24:ab:bf:4c:4b:85:6c:fd:25:b5:97:d7:98:2b:
64:8a:e0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:10:33 2026 by rpki-client