Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
File: zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft (raw, json)
Hash identifier: 83i4kDzavHZFkJdmSVGGWwaY48WjVv8sy3Tzb51gxYs=
Subject key identifier: 05:01:46:EF:FC:BD:B7:A5:F8:9A:9C:EB:3B:1F:68:F1:A1:FA:5A:3D
Authority key identifier: CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC
Certificate issuer: /CN=cef501d2d052185d4f6569218c28bf35859000fc
Certificate serial: 019D2960FE385902DB61B00679C14FD3F338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
Manifest number: 0139
Signing time: Thu 26 Mar 2026 09:01:55 +0000
Manifest this update: Thu 26 Mar 2026 09:01:55 +0000
Manifest next update: Fri 27 Mar 2026 09:01:55 +0000
Files and hashes: 1: VtiYaN97FHtpr9nyOV9FFG85g5o.roa (hash: YRi8yVEk1+9sLs2A+db3vBfa8pzorD5js8IjbX492Nk=)
2: gIvmrtP4qhP-p_HNvQknynsugUc.roa (hash: T7F6BSJaNt+yN8P1agGWT43ZlvcgWoTw7wuq3mofmEI=)
3: zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl (hash: 1fCfU6C8rRT1oi7S/d94LiaHOR7kwNaQS2OxDfgWayY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:fe:38:59:02:db:61:b0:06:79:c1:4f:d3:f3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef501d2d052185d4f6569218c28bf35859000fc
Validity
Not Before: Mar 26 09:01:55 2026 GMT
Not After : Mar 27 09:01:55 2026 GMT
Subject: CN=050146effcbdb7a5f89a9ceb3b1f68f1a1fa5a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a7:91:c8:ff:50:cf:14:30:e3:07:8e:7a:e7:
ea:c5:94:fd:47:60:fe:99:6a:81:de:d4:28:f4:d7:
7e:69:2c:36:9b:ee:ff:5e:5e:d0:44:b3:99:64:c9:
75:b5:ba:c6:2e:10:2d:6f:ac:72:3a:7e:27:00:88:
e7:1a:c2:f8:55:4c:6b:5b:69:83:ca:e6:f0:a9:7b:
16:c2:f8:13:f3:09:58:91:2f:00:e3:1e:21:9a:3d:
f0:9f:83:81:55:9d:de:de:6e:c8:13:f4:3f:46:4f:
40:dc:b3:1d:3e:44:54:19:d3:6b:bf:b6:ba:af:65:
86:29:b5:1a:e9:6f:47:56:1c:84:ef:db:57:29:b6:
98:78:6c:4c:e6:49:1a:d7:92:74:ef:7e:7d:e4:82:
14:43:9c:4f:2d:88:db:d1:75:b4:a0:68:07:c0:a2:
83:0c:c8:9b:05:a0:b5:26:e7:54:43:f5:03:5c:22:
75:6d:05:53:3e:0d:5e:95:1a:1e:61:ac:c3:f2:ed:
d8:a0:bf:e8:1b:0f:bd:40:aa:de:4e:a9:9a:20:e9:
5a:83:47:98:d2:b0:55:aa:6c:8b:8a:9c:a1:d2:3d:
db:53:ea:4f:34:a4:d1:5e:5d:df:6d:e5:7f:15:60:
c0:3e:82:f8:6f:92:6d:d0:30:6e:45:0c:bc:34:cc:
73:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:01:46:EF:FC:BD:B7:A5:F8:9A:9C:EB:3B:1F:68:F1:A1:FA:5A:3D
X509v3 Authority Key Identifier:
keyid:CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4f:d3:a5:0e:40:9b:ec:c0:1f:41:f4:f5:06:52:e9:da:83:
3b:b5:d5:f5:c0:2a:d9:c8:db:63:08:95:5a:76:af:0d:95:3f:
5d:0c:ad:49:f6:ca:06:99:a5:da:65:79:3d:a3:e4:9d:74:5d:
ae:00:36:55:74:fa:b4:18:04:d1:61:ea:90:c6:37:9d:29:7d:
64:f6:b5:47:73:51:46:17:d2:12:72:bf:88:90:cf:91:af:8b:
e2:b1:14:c6:4b:b1:0d:59:1e:d5:28:d3:56:63:68:32:f5:11:
73:ac:a2:5a:33:ce:27:44:f3:0d:68:a1:98:60:14:57:71:1a:
98:83:04:8e:f9:87:29:7c:e8:3f:19:c3:db:60:43:87:ce:12:
41:f8:dc:b2:6c:5e:c5:01:73:b0:37:5c:7c:70:ef:a1:f9:b0:
e5:0a:39:42:3a:ee:a9:f1:cc:49:52:aa:d8:8c:d1:bd:2e:a0:
9e:b9:38:1e:05:ab:0e:2b:ee:79:6f:53:7f:d6:ba:9c:5d:b1:
77:0c:8a:48:f6:ea:9f:c1:e0:8e:ee:3e:b7:79:ec:cd:39:ba:
7b:74:41:9a:eb:f5:aa:2b:e7:ff:98:87:da:1d:f7:3f:6b:09:
61:16:bf:59:2f:0c:29:11:4c:87:88:19:b3:b8:0b:b8:67:5d:
c0:c7:aa:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:08:39 2026 by rpki-client