Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
File: zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft (raw, json)
Hash identifier: 9sApm3TYlipE4f+C9PsTu97YgYhdlNJxBWjeb3LNz48=
Subject key identifier: F8:82:CA:86:69:9B:16:A1:03:1A:79:88:52:2D:AE:C1:B3:23:3A:8E
Authority key identifier: CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52
Certificate issuer: /CN=cce57dc8234df5f59d67fdc6856bb262e7193f52
Certificate serial: 019D2771C4F074EF6538933AD68EFE08CA16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
Manifest number: 1052
Signing time: Thu 26 Mar 2026 00:01:00 +0000
Manifest this update: Thu 26 Mar 2026 00:01:00 +0000
Manifest next update: Fri 27 Mar 2026 00:01:00 +0000
Files and hashes: 1: HpXjeYop5-9dbwuBCfkZCDXpE9s.roa (hash: 8cPnpIvED13OzR+/chtPAusOqJJ0JWVG5pHQBGp1xGI=)
2: zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl (hash: lf2ayHX2Mvl9TSGD7EXkGh39VYgGTgAaWOlT2ABhdq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:c4:f0:74:ef:65:38:93:3a:d6:8e:fe:08:ca:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cce57dc8234df5f59d67fdc6856bb262e7193f52
Validity
Not Before: Mar 26 00:01:00 2026 GMT
Not After : Mar 27 00:01:00 2026 GMT
Subject: CN=f882ca86699b16a1031a7988522daec1b3233a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:db:3b:f7:18:a9:09:56:69:e9:15:2a:ff:
c2:08:cf:67:dd:47:48:89:5b:9b:19:55:cd:0f:27:
33:81:6d:5e:e5:f1:74:62:1c:01:61:11:ad:f5:4a:
be:41:8f:30:21:c4:46:e4:5c:8f:8a:70:7f:5f:32:
bc:ad:ba:82:5f:d3:83:e1:56:c0:13:a3:c9:91:01:
fe:80:83:e6:85:80:63:54:63:9f:03:9b:08:b3:08:
cf:9c:75:93:21:52:66:31:84:28:be:20:dc:ae:e1:
86:69:2f:16:49:44:03:cc:6c:17:4f:66:d9:7a:99:
07:8c:c2:e0:c6:c7:93:ad:ed:94:02:16:7d:3b:f3:
d6:20:14:06:4f:ce:69:06:78:8e:3c:ea:96:39:50:
75:65:2b:80:0f:d4:1c:5c:68:44:e7:21:54:0a:a3:
ff:05:fb:44:d1:f3:93:5d:01:b0:eb:57:f2:c4:22:
c4:fc:89:fd:bd:09:4c:73:30:c7:5c:0f:53:eb:8a:
6e:e3:6a:0b:13:78:2f:79:9d:34:4c:59:29:a7:c4:
2d:f8:37:fc:97:ea:5a:21:ff:e5:e4:9f:d5:c5:2a:
ac:cc:fc:fe:ce:b4:4d:cc:46:ad:ad:78:79:0c:02:
1e:c4:aa:b8:36:32:28:cd:33:9f:85:e8:26:6d:4d:
8c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:82:CA:86:69:9B:16:A1:03:1A:79:88:52:2D:AE:C1:B3:23:3A:8E
X509v3 Authority Key Identifier:
keyid:CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f0:21:25:3d:f1:5c:6e:26:14:cf:ea:06:c6:22:f7:48:d1:
f5:d2:a5:e5:d6:dc:bd:ac:9f:05:f2:a1:d1:a2:60:22:c5:11:
03:e5:21:62:b0:0d:54:c5:99:a8:3d:6b:e9:66:6c:b3:64:7d:
2e:85:6e:2a:42:3c:bf:8b:7a:eb:f0:26:67:99:59:a1:d5:3a:
fd:75:11:2d:15:af:44:b1:7f:99:35:bd:47:c1:06:fb:b5:8a:
d3:b2:de:bf:e4:ed:53:9e:d7:ef:11:3f:ba:b9:90:a2:7f:21:
c5:8a:96:9e:e7:72:bf:a3:4c:82:d6:79:ed:25:d6:50:4e:f9:
ca:3e:98:df:5f:c7:d1:ef:aa:d4:f9:5d:38:60:7a:bf:50:70:
41:e6:68:4f:4d:21:d8:11:9f:5a:01:01:59:f8:20:32:f6:c9:
a4:51:6d:78:91:6b:8f:2e:d4:4c:ad:2d:6c:51:95:18:8a:e2:
cb:08:e5:f9:8e:85:c9:df:5a:5f:d8:5e:dd:2a:20:68:95:34:
05:52:d2:cb:92:c6:bb:d3:76:8b:71:b6:a1:2e:a6:e6:57:a8:
0c:07:e1:0b:d5:7f:5e:77:58:88:36:d4:a6:fb:f1:26:f0:82:
3e:68:70:a8:07:9c:a1:d6:41:16:6d:b9:14:ea:1e:57:da:07:
a7:fb:7a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:27 2026 by rpki-client