Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
File: zEa__4uQ43SFVboUR_1O3sw0ChM.mft (raw, json)
Hash identifier: ONXdaMJjiglGP5k/zN0cPfvWo5MG3nidx5/IGZfCsuo=
Subject key identifier: 56:8A:D9:5B:E6:AE:48:67:8F:F8:FD:BF:1B:E8:2C:91:25:7C:6F:F1
Authority key identifier: CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13
Certificate issuer: /CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
Certificate serial: 019D2584122C0EE656DFD5B8742FF72DDA69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 15:01:45 +0000
Manifest this update: Wed 25 Mar 2026 15:01:45 +0000
Manifest next update: Thu 26 Mar 2026 15:01:45 +0000
Files and hashes: 1: PHWKar5TU6h_lZjEkMKqfIp601A.roa (hash: Aeqrve+PhkZPn8LtUxmzS3olY+bvpZRjJnDsa2PZ14U=)
2: zEa__4uQ43SFVboUR_1O3sw0ChM.crl (hash: DVBR2CO1CKhOV8jocRKBcw4JaFyinYp978jlmBqmTnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:12:2c:0e:e6:56:df:d5:b8:74:2f:f7:2d:da:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
Validity
Not Before: Mar 25 15:01:45 2026 GMT
Not After : Mar 26 15:01:45 2026 GMT
Subject: CN=568ad95be6ae48678ff8fdbf1be82c91257c6ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:90:47:56:4f:51:a4:e5:ff:3e:94:0f:bb:72:
51:1e:aa:99:46:96:8b:aa:e2:c5:d4:2f:87:6d:30:
f2:4c:41:59:9d:09:d4:81:2a:73:a5:7a:5f:45:dc:
21:27:a7:25:c1:49:25:52:1a:02:7c:00:c9:a5:d2:
ac:a5:f3:e0:a9:24:72:21:ec:1e:70:75:9c:a2:2b:
88:e6:82:aa:04:c6:de:d5:c2:15:9d:da:c9:b3:c4:
eb:4b:11:c6:a6:32:c9:4f:f4:a3:0a:9d:45:a7:b4:
24:dc:ac:0f:b9:87:a5:f2:90:d5:a4:21:a3:cc:c8:
00:1d:b8:07:58:ac:65:1a:1c:e1:9a:15:94:cd:5b:
65:be:71:c4:52:ce:13:4d:f4:68:1a:f2:c9:a0:80:
77:63:60:8f:0f:ef:14:99:42:29:25:b8:b9:f2:0b:
a6:09:db:14:ea:4a:99:7e:5d:2d:e6:24:bd:26:78:
c0:c8:62:ee:90:6e:27:0a:c0:03:6b:2b:97:f0:1f:
c7:d0:6f:8d:ec:e5:89:d1:19:4d:fc:d1:e0:45:30:
5d:74:f8:70:8c:19:f5:f3:fc:10:a5:0f:02:30:a0:
3b:4b:29:3d:75:b7:2a:3e:9a:cf:a6:7a:f1:e7:ee:
d3:40:17:c1:bf:65:0a:c1:a4:d5:48:54:b8:56:a2:
c1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8A:D9:5B:E6:AE:48:67:8F:F8:FD:BF:1B:E8:2C:91:25:7C:6F:F1
X509v3 Authority Key Identifier:
keyid:CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:3f:6d:82:92:56:55:4a:cf:8b:cc:ed:c8:ca:c2:18:da:29:
89:b8:62:8d:97:a2:61:83:61:f1:6e:28:8f:7d:93:3f:32:23:
37:71:86:2d:c8:c3:f6:f0:7c:8a:7f:e8:ee:d0:de:90:77:bf:
c6:79:07:39:ca:91:5a:e6:1f:de:38:42:04:38:42:5d:4e:8f:
79:3d:27:49:f9:6e:c3:60:3e:25:22:a5:56:37:5e:be:aa:64:
20:69:60:85:3a:c6:9c:69:b9:c3:71:41:1f:3c:1a:18:25:a1:
d0:5a:43:d6:5f:26:f5:a2:92:c7:59:af:ca:48:e0:33:34:e8:
03:3a:ab:27:74:53:4c:6b:53:64:c5:ed:10:bd:f4:6c:77:62:
e7:62:cb:d8:df:0e:d7:98:e1:7d:e1:5e:a7:9b:38:d9:7d:a5:
89:e7:13:a6:fc:cf:bf:d9:04:1e:55:7e:e2:58:dd:98:15:08:
9a:dc:fa:86:cd:6c:8c:33:05:7f:68:5e:f4:c2:f0:d3:d6:04:
52:12:bc:f5:e1:d4:67:36:63:5b:a6:31:08:9f:0a:8c:17:e5:
d3:24:42:ef:cc:88:b4:cf:70:79:9e:4b:cd:46:40:6a:98:0f:
08:02:e6:74:de:bd:2d:45:79:b5:3a:6c:4a:db:db:f5:4f:a4:
10:86:c4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:59 2026 by rpki-client