Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
File: ze5dkAYfoqckw2dCWGxinUceek0.mft (raw, json)
Hash identifier: YTxnurSuRrPvimF/6yAwRNwh03rifniC4EmOjvRyWrM=
Subject key identifier: F6:20:74:BD:63:AE:CF:52:9D:6C:E2:DE:52:0F:BC:61:64:1D:D7:6F
Authority key identifier: CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
Certificate issuer: /CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Certificate serial: 019D2A3B4C9C779EDC988740FBC0B1D5EA91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
Manifest number: 0D8F
Signing time: Thu 26 Mar 2026 13:00:22 +0000
Manifest this update: Thu 26 Mar 2026 13:00:22 +0000
Manifest next update: Fri 27 Mar 2026 13:00:22 +0000
Files and hashes: 1: 8a76FAqMjieN7aLSC8xEAc3hgOU.roa (hash: pAPcnCH+A+mHZKWJuKSuBMT8TzG5YvvwYe+EaHI/zYI=)
2: ze5dkAYfoqckw2dCWGxinUceek0.crl (hash: ydPPzI0AqcMLKaPsdGDOuUkyvZ5+rgpqjf7ElUvFbx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:4c:9c:77:9e:dc:98:87:40:fb:c0:b1:d5:ea:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Validity
Not Before: Mar 26 13:00:22 2026 GMT
Not After : Mar 27 13:00:22 2026 GMT
Subject: CN=f62074bd63aecf529d6ce2de520fbc61641dd76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7f:f0:b6:9c:78:28:6b:4a:07:4a:0b:d5:a3:
91:78:6a:44:55:4f:9b:1a:86:a9:e9:fd:e7:22:cc:
ab:11:74:38:39:20:21:04:6f:29:7e:af:22:ed:b2:
69:55:db:36:3d:62:78:3d:38:a6:24:c3:83:68:0b:
78:45:3d:f4:a5:9f:b1:ea:5d:51:e3:42:35:a5:2e:
4a:1b:d5:2e:59:5f:6e:f6:d7:2f:5b:5e:3b:bd:0e:
67:a1:0a:98:c7:67:d3:be:f2:96:a0:fc:92:4a:4b:
2c:b5:66:86:1c:4c:04:41:1a:2b:f1:ec:74:b5:f9:
d3:1f:34:4b:0d:cc:f9:03:6f:34:31:58:53:08:5f:
c1:4d:36:32:b2:dc:00:e0:83:b4:1b:90:70:5f:02:
ad:8e:b1:35:cf:0c:be:68:c7:8a:44:a2:4b:a1:a0:
85:2e:aa:8f:87:13:10:b4:07:11:a8:55:65:aa:3a:
69:af:28:3b:ce:af:7d:d0:2b:e8:b3:15:d1:68:70:
da:57:1c:a9:ec:5c:af:5d:37:1f:b7:91:55:57:f4:
1c:15:8c:fb:94:16:f3:c0:55:5e:55:12:0d:a8:73:
8e:d5:8e:97:cc:1b:c3:3c:8c:f8:3b:d8:56:5c:bd:
49:3c:32:12:b8:4d:51:2e:94:28:fa:f6:f1:84:99:
d5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:20:74:BD:63:AE:CF:52:9D:6C:E2:DE:52:0F:BC:61:64:1D:D7:6F
X509v3 Authority Key Identifier:
keyid:CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6e:9e:4e:71:14:81:d9:fc:90:70:ab:cf:e3:a0:d3:b9:b8:
c3:2c:1b:8e:7e:dd:1d:a0:7a:52:41:96:6b:a7:ed:3f:b6:7f:
44:87:0d:a6:5e:29:46:c4:24:f7:61:a0:af:fe:c5:33:c4:a6:
9c:3b:4f:b7:c4:ed:e0:65:0e:7c:8a:16:b1:7c:73:8c:e7:8b:
a0:54:21:e8:a5:b0:0b:0b:1f:ea:ea:74:93:8a:aa:83:12:0f:
2f:b6:de:41:40:7c:14:35:ce:ff:b2:9e:27:43:d6:d0:fa:54:
d7:01:04:74:a3:88:7d:00:95:f1:7e:50:d7:b2:1b:e1:8a:82:
b1:ac:7c:ea:04:7e:76:d3:04:5a:50:48:80:1b:da:32:81:d4:
00:07:96:e1:00:d0:e5:1e:f9:76:99:17:e9:24:98:9a:52:85:
62:a0:88:9b:82:70:a4:ad:c3:8d:9d:78:64:24:20:df:2d:da:
e6:24:20:38:b5:a0:7e:72:e3:64:f2:7a:3b:1c:c1:a2:fc:22:
f3:10:f2:17:92:4e:dc:ff:2f:00:72:1f:e8:eb:85:bd:90:8f:
a0:4c:b4:97:06:54:3a:b0:df:06:4c:4a:6d:fa:1b:d1:92:e7:
6d:69:10:59:b6:da:fc:3b:a8:6e:7f:ff:38:a7:5d:e6:e8:cd:
8a:3a:da:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:28 2026 by rpki-client