Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
File: zqedzVo97kUOrz-TFS7W2oBrv3E.mft (raw, json)
Hash identifier: IUSHmsCS0K1hlaKOGQi9Ot/89LLIE0bZI3tTxpmMSsQ=
Subject key identifier: DE:A4:05:C9:8E:51:C9:07:25:36:43:D7:8C:8F:02:79:85:EB:93:86
Authority key identifier: CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71
Certificate issuer: /CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71
Certificate serial: 019D25F18A9BA24911A85CD0AA103B822693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
Manifest number: 03A0
Signing time: Wed 25 Mar 2026 17:01:19 +0000
Manifest this update: Wed 25 Mar 2026 17:01:19 +0000
Manifest next update: Thu 26 Mar 2026 17:01:19 +0000
Files and hashes: 1: SJnvGTH7bR41e5sWsYIQeWDc_EA.roa (hash: 2jW13TfSzXoQtuBntu6l4+b+fs69bx4ZNVoFcIWRCOo=)
2: TGdsEBW0dA1vBlmQUvr6OCjcRdA.roa (hash: DkyX51xLuQvm/HIMS5Gk0Y7OjI/mNozxguG8FiDw6c4=)
3: kTM5AwyuwsmweHVqh4Sx5C7l3lk.roa (hash: 9Ex97t0Gq70q6AwRnqwBR36JInydAPypzTvDsdOkxbE=)
4: lmqA3qKbM2Ln4wNDV7bOP2KNIjw.roa (hash: xyC0OirskdCSUadmtCeoUwblgPmS4gYDwVr6k8DHX9w=)
5: zqedzVo97kUOrz-TFS7W2oBrv3E.crl (hash: H1m6igQCelyFxRW2hi+qvA50ZMjXH2xt6f1Vtp202NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:8a:9b:a2:49:11:a8:5c:d0:aa:10:3b:82:26:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71
Validity
Not Before: Mar 25 17:01:19 2026 GMT
Not After : Mar 26 17:01:19 2026 GMT
Subject: CN=dea405c98e51c907253643d78c8f027985eb9386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0e:87:6b:03:02:17:0b:33:8f:8f:a7:51:a3:
d0:d5:b4:68:53:b8:54:1c:9d:50:75:22:18:de:a6:
db:aa:78:14:d9:de:8a:b1:3a:4e:25:56:77:6c:c9:
5e:16:20:c4:7c:d1:a7:e7:56:99:1e:a2:65:e1:be:
0c:34:5e:d1:e3:f9:1c:a1:00:2d:5c:94:41:3b:67:
f5:26:78:e2:d1:c4:96:8f:93:7d:12:c8:98:9d:1b:
b2:c5:78:4f:2c:73:b6:b1:bc:87:37:d9:96:d9:bc:
e5:8d:48:4e:51:e0:71:81:74:2e:03:72:0c:4f:5a:
e0:dd:02:9a:ee:ac:42:55:5c:a0:70:6f:3c:d4:e2:
e2:7f:e0:d6:01:4c:d6:01:c5:ea:62:3a:b2:d8:eb:
87:31:7f:71:59:ff:1f:e7:31:8e:b9:11:30:40:3e:
b9:65:7c:e1:20:eb:75:d8:11:dc:ac:42:63:be:70:
53:7f:98:bf:64:98:d7:6a:47:82:ed:a9:e6:a9:ea:
da:dd:82:1a:12:26:47:72:e3:ec:db:7c:93:06:47:
e3:c7:88:a2:a2:5c:1c:59:08:ef:ff:7f:9f:ac:33:
35:62:81:af:90:f3:a9:5d:9b:e8:d8:15:7b:2f:42:
58:85:3b:f2:d9:a0:87:f4:95:d8:5a:2a:15:98:c8:
7a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A4:05:C9:8E:51:C9:07:25:36:43:D7:8C:8F:02:79:85:EB:93:86
X509v3 Authority Key Identifier:
keyid:CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c2:4f:a2:d5:bc:69:ca:03:2c:9d:7c:80:5a:95:9b:28:96:
06:1c:75:23:ce:ce:c5:43:43:aa:c6:0d:6d:28:44:63:fb:c1:
3c:38:7a:f1:62:e2:bd:a2:86:4f:42:92:1b:4d:8e:8f:08:f1:
7f:e8:79:ce:d9:24:96:94:cf:ee:0d:81:ff:bc:43:1d:b9:a4:
29:47:31:d1:f7:10:21:93:d4:0b:85:2a:4c:53:87:01:62:75:
04:0e:ef:9d:c5:02:58:ac:fc:61:2b:c1:42:ed:25:92:6c:10:
4a:13:f4:38:41:a6:d0:7c:2c:7a:2f:a0:0c:46:d3:a5:68:15:
21:1b:e1:fc:aa:2f:02:1e:4a:6d:d3:ab:e6:ee:09:70:e9:6c:
0a:5b:ae:14:30:c1:33:d1:67:7a:63:e5:6b:80:a0:cf:e5:ab:
3e:eb:53:9d:93:dd:f1:32:30:94:56:47:72:d5:df:dd:f1:9d:
46:66:be:e0:c7:e6:a3:8f:29:8f:fc:2f:a6:6a:0e:d3:45:ff:
16:8c:2b:f6:be:e4:b2:92:42:57:b3:e6:be:97:40:4f:b6:44:
df:00:e1:2f:41:f9:2a:c2:89:35:60:0d:55:4d:46:c6:68:10:
3d:11:04:44:15:a6:c1:d3:c0:58:8d:5a:bf:a7:d1:44:a7:7e:
79:1b:3a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:49:08 2026 by rpki-client