Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
File: znD-aY5Nrp18MrwVbEGAZP3P9LA.mft (raw, json)
Hash identifier: PSW3mAhXC7PJLzTRp9aqd3CWtDK2lCnpq16j2cTx+Hc=
Subject key identifier: C5:7B:3C:EF:95:10:81:96:B4:1D:07:D1:B2:63:B7:8B:5B:C0:50:F3
Authority key identifier: CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0
Certificate issuer: /CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0
Certificate serial: 019D28168B6DF23628F5CC7DAF938FBFECE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 03:00:59 +0000
Manifest this update: Thu 26 Mar 2026 03:00:59 +0000
Manifest next update: Fri 27 Mar 2026 03:00:59 +0000
Files and hashes: 1: aSaj4x_eEi9R61JBcv_KlqSjEVo.roa (hash: e0WEFFwimfYALBRW6v2KlOISxXFOHzRtxX7qcK+LLls=)
2: znD-aY5Nrp18MrwVbEGAZP3P9LA.crl (hash: QyHrRBawSfIDreoS+aWf/MnGVK1ACVccyNZXUZKsIEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:8b:6d:f2:36:28:f5:cc:7d:af:93:8f:bf:ec:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0
Validity
Not Before: Mar 26 03:00:59 2026 GMT
Not After : Mar 27 03:00:59 2026 GMT
Subject: CN=c57b3cef95108196b41d07d1b263b78b5bc050f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:3e:20:bd:e2:7d:b8:ce:d5:97:e5:55:84:1b:
ce:8c:ad:28:85:15:f5:0e:9d:4f:e4:51:66:35:23:
de:8a:d3:0a:64:98:59:63:c0:07:04:de:2f:55:3a:
ad:60:2b:89:b7:1f:bb:6b:6b:b0:c4:1d:74:07:36:
71:c3:51:99:3b:08:a1:a2:c9:2e:0b:45:2c:5c:cc:
d7:ef:ce:d3:6a:94:17:1b:7f:22:ae:8f:ce:b1:92:
17:cc:ba:16:e2:80:7f:07:2d:cd:ec:29:6c:ca:10:
b7:71:e9:1f:6d:a4:b7:ee:7c:3b:47:f4:7e:6c:56:
15:52:b0:5d:8a:33:db:14:2b:8d:ad:e4:ff:d6:f8:
d4:34:e6:c7:aa:35:58:38:02:d3:b5:99:91:f3:83:
1f:fc:2d:1b:0f:ed:6b:c6:6e:14:12:18:62:a6:73:
83:67:56:e4:a1:b9:c5:66:34:1f:f6:f8:aa:f3:8c:
c9:c2:9f:13:17:fc:dd:7a:fc:0b:47:95:f0:04:f9:
b5:03:83:a4:a8:e6:41:db:5c:4c:4a:67:42:98:04:
54:a5:e1:60:7a:88:9e:c2:8a:15:97:c4:c1:1d:1e:
f6:80:11:15:f7:c9:44:05:40:34:8b:81:f0:b6:41:
10:8d:22:5b:3c:81:f4:6f:89:b5:4d:39:c9:0a:11:
c9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7B:3C:EF:95:10:81:96:B4:1D:07:D1:B2:63:B7:8B:5B:C0:50:F3
X509v3 Authority Key Identifier:
keyid:CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:1d:d6:d2:5c:05:c5:26:6a:02:be:2e:f9:57:34:62:53:8c:
17:03:94:d3:55:70:42:37:ca:3f:fe:10:77:82:e3:c9:7d:3a:
a8:10:07:25:f2:6f:ff:25:4a:c9:22:86:16:1f:ca:73:21:73:
a7:08:76:ed:7b:e2:e8:fc:fe:99:a8:e4:e4:c8:e8:1c:23:46:
5d:a3:a2:0b:83:dc:0a:2f:75:e1:b0:a3:8c:e2:fb:77:95:0d:
aa:a1:e2:24:f2:c5:01:ec:df:9e:ab:a9:a1:55:1e:ed:99:34:
4e:f3:8c:20:11:f4:de:72:bb:67:29:43:72:ff:76:1e:2a:37:
35:71:f6:1b:05:3e:22:a4:96:32:5b:14:5c:1a:f1:db:f8:14:
3e:bc:66:ba:df:12:9a:0d:38:c2:6e:2a:f7:9a:71:54:44:95:
53:b2:03:e0:71:ca:80:a5:16:d4:ab:06:8c:d7:e8:99:11:30:
28:ec:ab:63:3e:24:13:da:61:ee:f4:3c:5b:6f:f4:c5:45:58:
d5:dd:2b:15:9f:34:b8:cd:db:dd:a8:bf:fe:cb:9a:93:54:3b:
41:fd:4d:ba:16:17:00:8c:73:cd:6f:08:5d:07:ae:84:01:f4:
87:e2:7b:d4:f4:48:08:d1:bc:7a:09:60:31:71:2f:3f:e7:02:
61:ed:71:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:05:55 2026 by rpki-client