Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
File: zepK3ugLBlGc5A3T0T8oup9XWVc.mft (raw, json)
Hash identifier: deacQdbH/rSVbxovD6SojJboldPNEtyTKnDgODWitrw=
Subject key identifier: 85:56:48:15:9E:A0:14:98:24:A6:E1:A9:EB:E5:D0:F3:36:AD:F1:B9
Authority key identifier: CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
Certificate issuer: /CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Certificate serial: 019D2772B3EDB7E3A1E22ABA842652B8A4B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
Manifest number: 1597
Signing time: Thu 26 Mar 2026 00:02:01 +0000
Manifest this update: Thu 26 Mar 2026 00:02:01 +0000
Manifest next update: Fri 27 Mar 2026 00:02:01 +0000
Files and hashes: 1: q_Sdx_pDux5HG_B-3KML3ZxV1Q4.roa (hash: ht/8yca5f/4MvUCuC03a4MjP5eq5Ql1KG2x7zVYULEQ=)
2: v8cGXi_NSEn4R2Pj8ik0gEWzS6g.roa (hash: Tc7POOVIwZMXLz0qNFWoVFFcyKsqMyAM9BmZSJShLfc=)
3: zepK3ugLBlGc5A3T0T8oup9XWVc.crl (hash: ih7TaSAo/IMuFFkumwRIOOFQArH13LXntMmYT3p6Ack=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:b3:ed:b7:e3:a1:e2:2a:ba:84:26:52:b8:a4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Validity
Not Before: Mar 26 00:02:01 2026 GMT
Not After : Mar 27 00:02:01 2026 GMT
Subject: CN=855648159ea0149824a6e1a9ebe5d0f336adf1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:54:65:f9:3b:ad:20:74:00:b7:a9:8a:71:1d:
c1:36:93:1b:c1:29:78:b8:b6:c0:54:8a:d8:6f:d7:
a1:e3:62:e1:ef:82:3b:52:57:c8:e1:41:ab:cd:60:
8b:f3:2c:5f:07:d6:4e:4c:cd:b4:6d:49:60:8a:69:
99:a7:92:9d:2f:15:9f:1f:93:36:d5:e1:1f:1b:c7:
fd:a8:e2:5a:16:af:00:ea:64:18:6e:23:da:a2:8c:
b1:1b:4c:41:e5:f5:75:f7:4c:49:e8:04:28:82:e0:
13:f4:6e:1c:f5:1b:49:80:c4:a1:41:de:58:b5:f1:
63:2d:50:3d:a0:7f:87:84:2b:5a:e0:99:d3:91:47:
b6:25:54:64:a2:af:ca:bf:57:c9:44:49:dd:aa:56:
a0:36:5c:d9:6f:7b:6c:97:e7:5d:83:8c:4a:3c:5d:
2c:6e:50:5f:f8:6f:d7:73:19:ab:a5:81:fa:f7:62:
a5:d9:a4:4e:38:06:a8:62:66:5a:78:15:dd:84:44:
00:d3:a8:0b:cf:d7:3b:38:be:e1:48:a5:40:6a:f0:
a3:cc:5f:ab:d5:6b:a8:23:88:b7:70:3f:5d:58:68:
5c:42:cf:7f:d7:91:0f:3e:cb:41:17:03:65:d9:92:
73:46:03:08:fb:17:0d:01:9c:aa:fb:92:06:b2:19:
7a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:56:48:15:9E:A0:14:98:24:A6:E1:A9:EB:E5:D0:F3:36:AD:F1:B9
X509v3 Authority Key Identifier:
keyid:CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:4e:84:2f:40:80:e1:14:af:49:68:49:51:02:8b:6f:4f:df:
37:c0:0c:25:2c:09:68:9a:b8:2a:4e:55:41:42:42:d3:00:d2:
7f:69:44:81:b7:b0:47:e9:9f:e0:34:1f:29:cf:87:15:2c:36:
88:50:69:79:97:58:7e:c4:d7:78:dd:bf:34:cf:fa:10:cc:be:
75:42:3c:45:cf:e6:99:0f:72:38:9f:84:af:72:dd:ce:65:d4:
53:a7:b3:42:22:dd:fe:ee:6f:e5:50:1a:da:b3:f5:9b:78:f5:
5d:92:65:17:43:80:40:0f:ed:57:41:16:de:e0:4c:c0:cd:5f:
01:ca:d0:6d:63:5c:2d:4a:6d:e2:0a:1f:11:a5:01:89:a6:b5:
a0:04:14:eb:1f:a7:ee:c6:fd:4a:af:3f:5d:65:23:6d:42:e1:
8e:87:0f:fc:1e:a6:b5:5b:26:9f:a0:4d:80:ef:e6:15:29:be:
83:7f:be:3f:ea:b3:79:8b:61:0d:bd:a6:95:fd:49:0b:29:e9:
bf:b4:ba:aa:f4:83:07:21:d8:be:32:b4:49:66:e0:e2:45:a8:
61:3d:53:3e:42:4c:81:76:6b:c8:a2:be:bc:94:e7:69:40:2b:
25:58:3b:3f:84:30:4a:ad:42:93:03:df:41:cd:06:8d:01:a1:
43:78:44:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:41 2026 by rpki-client