Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
File: z0AYX1Us2XUnbANGT1DHpdNRVkw.mft (raw, json)
Hash identifier: LXTVMDXydMrkDIfc4/11aHcla06yMrAf1rjbFd4tuzY=
Subject key identifier: ED:20:3D:1E:88:79:EF:B8:00:01:49:0B:EE:57:1C:9F:48:07:55:8F
Authority key identifier: CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
Certificate issuer: /CN=cf40185f552cd975276c03464f50c7a5d351564c
Certificate serial: 019D277288E5EAB088C4C4C57717A913C4C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
Manifest number: 01A3
Signing time: Thu 26 Mar 2026 00:01:50 +0000
Manifest this update: Thu 26 Mar 2026 00:01:50 +0000
Manifest next update: Fri 27 Mar 2026 00:01:50 +0000
Files and hashes: 1: laiDZxmXdgJH8Of-yAuGAFD0Nks.roa (hash: 29mbTdf0w60u4m7lifJIKwS951c2LKKJ0JQHfZ51kdg=)
2: wPJ_bWcqiT5Ryc2PrLz-RlxJFfk.roa (hash: WhlDU2CEPgF/HK0/49CMTEtZOnQc9y/7MprKkJl/+MA=)
3: z0AYX1Us2XUnbANGT1DHpdNRVkw.crl (hash: yfqtft+1SuXcASkXqLip+h/kWQJj12p9Ee5TuPa2Pj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:88:e5:ea:b0:88:c4:c4:c5:77:17:a9:13:c4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40185f552cd975276c03464f50c7a5d351564c
Validity
Not Before: Mar 26 00:01:50 2026 GMT
Not After : Mar 27 00:01:50 2026 GMT
Subject: CN=ed203d1e8879efb80001490bee571c9f4807558f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f3:10:7e:7b:5a:3d:47:b6:c1:0a:c8:8f:c4:
ed:6d:f5:2a:2b:6a:d8:8c:0d:96:a2:54:c2:0d:a8:
9a:5d:ff:77:e6:8a:25:6f:cc:1b:c5:af:a6:4b:6a:
19:db:1a:95:cd:f8:0f:30:f7:7d:11:e4:e4:19:43:
33:ce:2e:7d:96:0d:ff:51:45:d3:86:b8:b4:15:58:
fd:df:ae:ee:2b:f9:10:22:07:96:ba:3c:57:cf:f1:
be:98:06:3c:2f:2d:1e:65:63:13:7c:f4:5d:ac:9a:
44:a6:81:9e:dc:62:65:4f:c3:7a:0f:2e:ee:65:8a:
fc:6e:3c:5a:25:77:c6:98:91:e3:8d:fa:21:0b:c5:
cb:79:1c:75:04:56:cf:e8:2f:0e:a4:3f:d6:96:5e:
09:8b:05:81:d5:ad:4b:fd:d7:5a:22:76:b5:eb:71:
17:28:c0:a3:7c:2e:5d:33:a3:1a:e9:14:2d:27:14:
57:ba:6d:45:7f:4d:c7:dc:d4:39:ea:e3:6d:8f:d6:
76:6d:4d:ad:8e:44:02:8b:ad:64:89:e4:b5:6e:2e:
22:ac:8e:ca:02:62:b2:35:88:3a:6f:ec:0f:c6:26:
76:ab:90:f1:fe:73:3e:38:4f:68:8c:60:08:b3:77:
96:d9:02:39:ad:c4:91:41:45:3e:e3:78:0b:10:62:
ef:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:20:3D:1E:88:79:EF:B8:00:01:49:0B:EE:57:1C:9F:48:07:55:8F
X509v3 Authority Key Identifier:
keyid:CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:9c:4e:2b:9a:12:fd:b4:96:77:21:bb:51:17:f7:80:60:95:
0b:4a:1d:87:27:49:88:74:55:25:19:19:d8:97:15:67:a3:87:
a1:6e:dd:16:7d:ee:32:1e:a1:87:9b:7f:27:0e:cb:98:fa:df:
24:c5:41:78:7b:0b:18:9b:8c:93:00:b3:ee:d1:5c:49:8e:e4:
b9:95:f1:f3:ae:67:51:33:00:b4:5a:d2:77:2a:11:df:5f:bc:
38:8a:f4:bf:44:8f:bb:cb:e4:3a:18:a0:65:8f:fa:21:c7:0e:
70:77:a8:0f:2c:8d:da:14:4c:21:55:d0:5f:0d:5b:db:4a:93:
5a:24:0f:d6:af:90:bf:61:3e:f9:08:3c:f2:52:27:75:ee:c0:
4c:d0:73:8e:92:5c:b7:f0:06:29:ef:73:ea:c5:11:70:11:3c:
5e:c0:14:f1:80:ff:de:7d:bb:93:50:de:00:81:aa:16:4e:a5:
fe:d9:fd:41:7f:4d:2a:90:dd:67:96:89:04:ed:c8:bc:a1:2c:
b7:06:ff:b0:32:06:fa:59:fd:00:a4:3d:c3:80:b2:25:56:ae:
22:86:79:f4:21:b8:0c:54:f6:7b:cd:b8:9d:12:61:13:12:2c:
4f:7a:e7:27:a6:5a:32:0d:f6:88:17:f2:80:d7:9d:33:0e:c8:
b4:fd:74:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:14:21 2026 by rpki-client