Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
File: zxuxqgyTt5GML9JDO0HCHXnUTao.mft (raw, json)
Hash identifier: E0qrvjtziSZ0dTrl+w7FUfBLtNR1+O4Ot6zpaM4OkU4=
Subject key identifier: A2:2C:B2:03:8D:7F:02:F3:9D:0D:D1:A2:70:8B:43:E1:8B:2C:38:4E
Authority key identifier: CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
Certificate issuer: /CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Certificate serial: 019D284E57A12BCCF93A9B4001B4070CF57D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
Manifest number: 0D4C
Signing time: Thu 26 Mar 2026 04:01:56 +0000
Manifest this update: Thu 26 Mar 2026 04:01:56 +0000
Manifest next update: Fri 27 Mar 2026 04:01:56 +0000
Files and hashes: 1: SKTC8iFjoyKhvbRbbjVeP1tuXkY.roa (hash: x4nm8dMDKJDEpeH+JfZ+1a0v/EVg7R0GUoex2DYQAOs=)
2: zxuxqgyTt5GML9JDO0HCHXnUTao.crl (hash: 9PJKah4ygTCLSmXJA2HqjOWlqpSggjzOB8qfQ7TPwTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:57:a1:2b:cc:f9:3a:9b:40:01:b4:07:0c:f5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Validity
Not Before: Mar 26 04:01:56 2026 GMT
Not After : Mar 27 04:01:56 2026 GMT
Subject: CN=a22cb2038d7f02f39d0dd1a2708b43e18b2c384e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:37:a9:26:83:10:8a:1f:9b:94:c7:1d:ce:d5:
6d:68:57:14:0a:1f:8d:91:d1:7a:f4:21:48:e0:79:
e1:98:57:e8:a9:98:90:af:b0:ea:ff:11:d0:7e:ca:
8e:b4:57:46:2e:ae:26:30:b0:a6:d7:21:8b:e0:cc:
14:3e:16:43:31:4d:1d:ba:5f:e0:fc:05:7e:66:ac:
c6:c3:9f:3b:b0:7d:61:3a:29:4f:38:1b:c1:ac:5c:
17:71:1b:27:86:de:51:33:9f:fa:9a:0a:01:bd:bc:
2f:db:a6:07:bc:1e:3f:32:f7:04:4c:38:c7:9c:ae:
81:2e:a0:c6:b0:f1:ab:12:20:0f:db:e3:a3:4c:11:
d9:46:0b:81:8f:71:26:fd:14:09:7f:3e:0c:ce:5e:
60:ec:af:cd:e6:a6:72:0f:15:65:d5:52:34:f6:14:
83:3a:c6:2c:39:e1:c9:03:1f:2f:1e:b7:57:bb:3d:
0f:df:ec:31:54:2c:0d:cc:08:68:66:f1:50:7d:b3:
9e:b5:f3:69:0b:bc:3c:0c:d7:1b:0a:c9:16:21:4c:
65:8b:ba:8c:c6:6a:22:3b:0b:63:cc:14:2e:40:d1:
9f:4f:64:4d:01:fd:55:46:1c:c7:f5:16:8a:35:02:
4c:84:3f:1f:04:3a:ce:c1:ea:b4:aa:62:2a:a7:a4:
f2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2C:B2:03:8D:7F:02:F3:9D:0D:D1:A2:70:8B:43:E1:8B:2C:38:4E
X509v3 Authority Key Identifier:
keyid:CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d1:be:01:c1:a5:bc:3d:07:16:54:ca:be:e7:f7:48:e3:3b:
ce:eb:cd:f1:65:59:b8:de:94:4d:df:e7:08:03:2f:f9:68:b8:
8c:dd:8c:ae:ed:fe:80:63:bb:6c:64:31:4b:d8:a6:89:4a:f4:
95:af:45:e4:be:8f:9b:41:87:86:36:c5:3a:09:13:b4:30:e0:
dd:58:fc:b9:ba:eb:3c:3c:5f:76:05:62:7a:f6:4f:20:36:d1:
43:f5:aa:bd:a3:94:5f:02:8a:55:ed:68:66:13:a7:d5:6c:38:
8a:50:69:a9:2f:be:de:59:b7:0e:9e:6e:38:4d:99:3a:a4:6f:
11:3b:0a:25:54:cd:f0:5a:0e:b8:a8:40:d3:30:e6:51:fd:3d:
28:b1:3c:0f:07:4d:b2:de:32:b3:89:7f:62:a2:ec:e1:2b:64:
e8:3e:80:0b:28:5e:57:42:4b:ab:c8:9a:31:0f:f2:a2:12:74:
5e:1e:d6:d0:94:0f:b3:78:41:db:19:4d:4d:a5:70:3f:c1:4f:
f3:a0:64:d1:b5:bc:f1:90:da:da:20:1d:74:74:5e:4f:71:4f:
e5:27:0f:c1:e7:53:18:b5:ba:b0:6f:e1:2d:d2:58:34:07:81:
34:38:14:f2:44:57:7c:c6:5d:bf:f4:69:e9:62:c9:6a:7a:a6:
5c:c8:d9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:40:14 2026 by rpki-client