Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
File: zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft (raw, json)
Hash identifier: 1wP9TqILHoagTKlTffg6uRG93/c5sCjqrLpogbjBWHQ=
Subject key identifier: D4:D5:7B:4D:51:D1:3D:C8:74:AA:9F:13:91:13:31:96:6E:63:7D:B2
Authority key identifier: CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
Certificate issuer: /CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Certificate serial: 019D2627DAE55BAE96D3F85476F134E899C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
Manifest number: 0CEB
Signing time: Wed 25 Mar 2026 18:00:39 +0000
Manifest this update: Wed 25 Mar 2026 18:00:39 +0000
Manifest next update: Thu 26 Mar 2026 18:00:39 +0000
Files and hashes: 1: aE-igOYVXwkygfdsftmlck44E1U.roa (hash: Zm5SKhsISbz1FGue4q9TwJE5ZIQbj5Gs5h02565RFb0=)
2: tsSIuAhpfPkyoEWlotiPKzX6w8I.roa (hash: DsopP3SuV9qAYq1FNnHh/jlHBAIogzYm66PAey2rdvM=)
3: zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl (hash: i2BTyDWBxdlKkmaICss9jTwxo/Bscu07z+l2Ceg3iVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:da:e5:5b:ae:96:d3:f8:54:76:f1:34:e8:99:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Validity
Not Before: Mar 25 18:00:39 2026 GMT
Not After : Mar 26 18:00:39 2026 GMT
Subject: CN=d4d57b4d51d13dc874aa9f13911331966e637db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:59:6b:98:f9:b4:45:97:1b:da:57:28:02:
21:a2:b1:4d:d7:6c:49:31:12:60:65:23:75:77:20:
62:51:a4:0b:64:34:c3:b8:e3:de:d1:dc:d9:24:c9:
c6:b8:8d:82:9f:b3:36:ee:fd:14:ee:ea:b3:5f:be:
ec:16:fe:a9:a3:55:6f:77:69:62:76:be:d3:8e:2a:
4d:62:c1:60:a0:0c:54:a3:ed:0a:9e:6e:ec:8e:fa:
da:67:3d:25:14:3e:74:73:62:aa:20:58:18:9e:5c:
d9:3a:c1:66:5f:cd:71:ab:89:cb:d5:a6:89:c2:72:
c5:6f:a2:f7:ac:6c:71:22:6e:b3:79:bc:c4:6e:dd:
96:ce:ec:30:23:d0:8a:b1:ea:11:50:10:df:ce:e5:
7a:ef:91:b4:e7:27:e0:b4:fa:f3:44:b9:5e:30:92:
f9:bb:ee:fb:3e:77:14:bf:4f:85:3a:f1:c2:7d:04:
bb:e4:0b:11:59:01:45:a2:2c:b2:d5:96:32:99:34:
96:7e:85:4a:1d:f4:37:db:7e:0a:6e:00:b4:11:2e:
80:c5:ae:9c:b3:33:33:9a:93:56:2e:9d:51:a5:89:
6a:8f:62:52:87:ab:74:51:d7:56:54:fb:25:b0:06:
c7:6d:3d:cb:0b:7d:91:54:b3:77:94:b0:74:a8:1c:
13:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D5:7B:4D:51:D1:3D:C8:74:AA:9F:13:91:13:31:96:6E:63:7D:B2
X509v3 Authority Key Identifier:
keyid:CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a5:89:01:8e:ec:16:7f:27:4e:18:03:f8:71:2b:b4:24:10:
2a:30:c4:1f:1e:ff:65:87:7f:83:66:78:6a:28:1b:64:6d:da:
28:b2:ad:95:39:59:ab:fe:d2:46:6f:1d:0d:b6:4c:b7:bf:b0:
db:61:07:87:14:70:1c:56:9a:e9:c2:6c:6c:fb:8a:94:e5:ac:
38:a4:6e:83:02:b3:27:4f:ad:70:48:f8:58:b7:61:79:38:03:
18:08:78:50:d8:f9:31:d9:43:aa:39:de:b8:91:c2:0b:09:0a:
48:e2:06:84:5e:92:8f:dc:97:ea:ac:af:df:30:08:cb:f9:3c:
ca:a8:29:fc:da:1d:7f:f9:da:11:88:a4:17:0b:f0:e6:61:fb:
7f:ce:c7:9b:4b:bb:6b:c3:69:f1:50:93:14:95:41:ae:1f:c9:
ed:e3:2b:fe:20:9e:c9:de:16:00:c3:a4:99:8e:59:1e:59:55:
3d:56:e5:18:40:b9:9c:d6:7d:f6:2e:dc:de:c5:58:50:8e:f7:
dd:a7:48:df:c8:93:af:3e:cf:59:0a:61:c2:0e:e6:3c:95:68:
88:8f:c1:d8:3b:33:0c:45:45:72:27:bf:ac:d4:8e:de:fe:69:
7c:88:e5:d6:0c:e1:20:71:20:cc:b4:65:d5:4f:b2:df:83:de:
03:6b:2b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:44 2026 by rpki-client