Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
File: zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft (raw, json)
Hash identifier: zaS0uUVZz1Mefx9WjA33b7QaCaqrqn8LlSwmIlr+Ugk=
Subject key identifier: 19:5F:C3:FB:D7:F5:99:24:0F:DC:70:62:DC:CB:25:9C:27:9C:87:AE
Authority key identifier: CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B
Certificate issuer: /CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
Certificate serial: 019D2695C8EE01831801A0415A5D1E60C433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 20:00:43 +0000
Manifest this update: Wed 25 Mar 2026 20:00:43 +0000
Manifest next update: Thu 26 Mar 2026 20:00:43 +0000
Files and hashes: 1: 1-MPmKwveaNevahCbJELRJOmxcEw.roa (hash: SJAbLycNC0JaVjQXy09rkhGA2yxjxemr+0WDUIZ9wv4=)
2: gOiN6DluQXSd3jleMbJxQUVj3SI.roa (hash: GYaC97wnCi+3xBKerwHYFT87pRuyzEPoseArfTTU9ys=)
3: rmssw7RMnHd1ZqcXua4Brefm154.roa (hash: fNpjAb4SqWl1UnQLJ2UF8i8M94XY4XErflTP+LbF0cQ=)
4: t6Cqn8bbFUBARYys1rSXQI-Qv_k.roa (hash: Qp3ObnIfU6K60CvbQfGVhKkJzOZmcYgVUzn5j0R02Vw=)
5: zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl (hash: TL/On28q5HfzT+OwWWPQ+XkvzWSRq13pfQE7ITbg30Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:c8:ee:01:83:18:01:a0:41:5a:5d:1e:60:c4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
Validity
Not Before: Mar 25 20:00:43 2026 GMT
Not After : Mar 26 20:00:43 2026 GMT
Subject: CN=195fc3fbd7f599240fdc7062dccb259c279c87ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ac:99:fd:92:54:5e:b9:c3:db:48:7c:b5:ef:
8b:3f:5f:eb:8f:64:ee:b2:a0:eb:0f:21:71:8a:c4:
ef:22:48:68:8b:59:86:fb:d8:a1:60:e5:86:40:04:
2c:3c:0f:a1:9d:1c:ff:89:2e:25:35:b4:0e:37:46:
41:16:9f:25:fe:bf:c5:78:81:c2:e5:d3:35:51:3e:
7f:f5:89:c3:3d:39:6f:35:1f:e9:dc:33:2e:e8:d8:
19:95:8e:4c:f7:d4:4f:fb:28:f9:5c:3b:07:64:af:
fa:f1:a7:31:2b:94:f5:1e:8e:92:f5:95:32:02:a8:
bd:ba:8d:99:40:07:98:ea:18:8e:e7:c8:e2:60:e3:
e3:5b:35:24:7b:7a:97:4a:c9:14:20:d3:91:4f:77:
f2:93:23:96:bf:c5:7d:6f:69:48:2d:0f:a1:20:04:
85:28:c2:1a:ea:39:34:f7:af:0c:89:1d:27:1b:f6:
c3:9a:6b:85:22:53:7b:a2:c2:49:cb:a9:f4:d8:dc:
9c:56:ff:7a:16:c4:66:22:45:9e:d7:05:22:a9:c8:
c9:72:02:45:66:88:92:7b:07:1c:65:7b:2a:ca:71:
2c:b0:fc:5c:49:fd:ee:d7:1f:8a:6b:87:c1:5f:56:
49:7b:75:48:82:d9:63:60:19:0e:45:82:b7:2e:57:
97:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5F:C3:FB:D7:F5:99:24:0F:DC:70:62:DC:CB:25:9C:27:9C:87:AE
X509v3 Authority Key Identifier:
keyid:CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:7c:4a:99:e9:82:8a:8f:8b:5f:63:19:9f:20:7f:51:df:00:
80:42:7d:1c:5b:80:c5:5d:bf:70:89:de:cf:0c:7a:77:c9:0c:
32:ab:e5:db:ec:b3:3a:b7:a3:dc:cc:bf:05:7e:b5:44:ea:d6:
ac:1e:4f:f6:14:d7:63:1b:5e:04:92:9f:9a:50:b4:29:04:ff:
97:68:6a:e1:66:ee:93:a7:3d:e4:6c:74:64:10:39:e8:9b:e5:
93:8b:9b:b4:86:31:7f:b4:50:7a:8e:44:a3:5b:be:c9:45:d8:
d9:22:f5:db:58:3b:ff:4d:c6:1c:8d:aa:30:55:27:51:28:82:
e1:f2:62:19:f4:b1:e3:ab:ab:fd:40:e8:7b:11:1f:88:6a:c1:
28:2a:01:bb:f1:81:f6:e0:3f:2f:bf:65:6f:7e:fe:90:6c:ed:
98:53:c5:93:28:19:7c:b8:e9:31:2e:04:50:3b:0c:93:03:de:
e5:d8:a4:a0:97:aa:b2:91:85:7d:16:12:67:81:8e:52:31:1c:
46:e8:a2:50:6a:6c:1b:b7:0c:e5:cd:6e:10:7b:5c:33:86:3a:
74:a9:4d:65:cd:6f:9c:b7:20:ac:64:47:24:ae:25:31:ff:fa:
07:30:07:e4:ce:39:be:f1:3d:13:87:56:de:ac:6a:8a:ad:08:
91:34:36:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:14 2026 by rpki-client