Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
File: zWj3o5G3sWSe1JA0gtPpMe0049g.mft (raw, json)
Hash identifier: ewE8aqUJPKXZsb0PkiHDBqJfzDw5jiwfshax2/PaNrk=
Subject key identifier: CE:76:E5:A0:42:FA:FB:9C:DF:BA:03:A8:55:5A:4B:91:83:65:3A:57
Authority key identifier: CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
Certificate issuer: /CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Certificate serial: 019D2929AA907C323F54140AB7C856839A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
Manifest number: 1183
Signing time: Thu 26 Mar 2026 08:01:29 +0000
Manifest this update: Thu 26 Mar 2026 08:01:29 +0000
Manifest next update: Fri 27 Mar 2026 08:01:29 +0000
Files and hashes: 1: 1-xP6wGH4E4j9NJ-NB2QfLldx1Lw.roa (hash: uFFlZsAMKLJKDEktW5ybjbZi8RHcBaE5UQZ62izVnr4=)
2: G9U4X93rXqstWDjqCmr74O0MOOc.roa (hash: lHIU6yFEQWHJAGlwWMO/pP3VoRev0tS4Byvjv7Nl/Nk=)
3: SV_A5OMf5Dv_YVGf3i03i121qDE.roa (hash: Yx1VNJorHPI+3bEwTwwZMtNZ1vpLF6jyHjPFF9j0vFs=)
4: u0VefA4FNPAM3OaDOe1uGO8G7GM.roa (hash: L/EGbgrpKOwV4dXB0O77kAg3sNSvZROrNTY/PmdUGpM=)
5: zWj3o5G3sWSe1JA0gtPpMe0049g.crl (hash: nxdiHpQSiJqJs8Jkm4auh/HTKDoQ4eRtnHKuMNCewQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:aa:90:7c:32:3f:54:14:0a:b7:c8:56:83:9a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Validity
Not Before: Mar 26 08:01:29 2026 GMT
Not After : Mar 27 08:01:29 2026 GMT
Subject: CN=ce76e5a042fafb9cdfba03a8555a4b9183653a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:72:4d:33:90:b8:78:d4:4f:ab:35:38:08:2a:
33:3a:50:c3:22:d3:bd:66:ac:d9:64:fd:6e:e2:b8:
95:a4:66:dd:c4:2c:ce:6d:56:48:9d:1b:c9:70:9b:
d7:37:ac:b6:45:c5:f5:7a:0a:c7:05:1f:85:8f:7e:
cf:1f:b9:2e:9c:78:a2:3d:6c:81:c1:0f:50:14:c2:
a9:51:f0:37:7c:13:4f:6c:ac:6b:41:b0:b1:8f:2c:
f7:74:46:e7:3a:fa:e2:30:ff:8f:3e:db:31:ae:f3:
1f:ae:b6:2e:3b:90:45:6e:6f:c3:fe:5c:6b:a1:82:
51:5d:0f:f5:15:d6:ba:85:bd:73:57:76:f9:27:e8:
31:1e:0e:10:bb:b7:a1:0d:6a:01:2f:6a:1e:2f:0b:
e8:84:b9:2b:f3:d3:e0:44:b1:d9:8c:36:97:05:f9:
24:6f:d2:48:6c:94:5f:7e:ea:25:62:1b:c2:18:6b:
b1:b1:b5:c4:5a:9a:0f:53:7d:59:3b:11:8e:b9:af:
64:5d:6c:a3:98:fb:92:ec:ed:af:b8:dd:22:ce:ad:
39:34:18:09:0d:cf:10:62:da:d7:af:8f:65:17:5e:
0c:cb:bf:6e:55:59:27:34:ae:f7:ab:fe:4c:91:76:
55:6c:27:c7:ba:cc:2c:bb:21:44:3a:b4:ea:f2:6b:
aa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:76:E5:A0:42:FA:FB:9C:DF:BA:03:A8:55:5A:4B:91:83:65:3A:57
X509v3 Authority Key Identifier:
keyid:CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:07:89:08:6b:30:d2:b4:54:a2:d0:fd:e9:1b:da:99:0a:fa:
28:ae:d3:3b:f6:ea:31:fd:a0:55:60:d4:c6:5a:ca:81:4d:4b:
90:fd:81:7a:99:34:dd:c0:04:49:4c:55:fe:05:4e:bd:12:ba:
0b:56:f4:99:94:f5:7f:78:72:71:a0:dc:ab:61:87:e1:a5:0a:
41:9f:82:9d:7c:b9:ef:a9:70:6f:29:c3:e7:63:48:cc:59:d5:
ca:d0:12:99:81:84:ac:43:f8:62:68:48:2c:c2:b6:10:c0:51:
40:7e:b3:2a:64:ff:65:6f:02:e6:5a:1a:92:35:31:3c:0c:7a:
bd:bf:6b:2c:91:ff:24:35:88:88:a6:bb:42:8e:5d:c8:e8:7b:
c6:7f:ed:ba:f3:91:23:d2:e8:8b:c0:30:cf:42:47:36:23:f4:
99:2d:40:34:ff:03:a6:5e:4c:0b:7f:c0:c9:ad:f1:88:47:51:
78:80:5f:1c:54:a0:1f:e1:99:95:3d:c5:fb:3e:f9:85:67:e8:
cd:d9:c5:cf:34:6a:23:f2:6e:93:9a:79:7a:f1:3a:59:4c:43:
70:52:d7:3f:86:87:ce:47:d2:f8:79:b6:a9:e0:01:5e:3f:6c:
25:64:6f:d0:62:1b:d1:71:86:d6:17:ef:ce:71:11:e5:20:eb:
ee:f7:fd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:40:49 2026 by rpki-client