Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft
File: zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft (raw, json)
Hash identifier: JhblWYezTyD+aflA6BLCM40tJpQfuIL4IGN8e0D0VA4=
Subject key identifier: 57:BC:7C:E9:FC:E6:50:75:2C:53:85:C4:6A:D7:C6:92:D3:EA:4B:43
Authority key identifier: CD:E4:C4:65:D2:DF:34:58:C0:26:10:F8:78:20:C9:BC:2E:B3:32:53
Certificate issuer: /CN=cde4c465d2df3458c02610f87820c9bc2eb33253
Certificate serial: 019D28BB0E5D441027154B5A0EDFC760237F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeTEZdLfNFjAJhD4eCDJvC6zMlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft
Manifest number: 03C3
Signing time: Thu 26 Mar 2026 06:00:40 +0000
Manifest this update: Thu 26 Mar 2026 06:00:40 +0000
Manifest next update: Fri 27 Mar 2026 06:00:40 +0000
Files and hashes: 1: 4mxTt-PUOLyk8c5boNvoqu_BJ7s.roa (hash: 3fs6xu4eP1mjknmS7OMM29xYKyl1NAuQ3X7q4kngxPE=)
2: zeTEZdLfNFjAJhD4eCDJvC6zMlM.crl (hash: +sDwmiNMomjWjzPIkWLPfU1rewhHzFV9HmVtJiu+fks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zeTEZdLfNFjAJhD4eCDJvC6zMlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:0e:5d:44:10:27:15:4b:5a:0e:df:c7:60:23:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde4c465d2df3458c02610f87820c9bc2eb33253
Validity
Not Before: Mar 26 06:00:40 2026 GMT
Not After : Mar 27 06:00:40 2026 GMT
Subject: CN=57bc7ce9fce650752c5385c46ad7c692d3ea4b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7e:bd:62:21:20:a0:6e:1f:fb:62:84:19:f5:
de:c1:bc:8d:f0:2d:41:7e:c4:a2:79:5a:56:4f:0c:
1e:a7:6c:58:4b:27:50:f4:c7:0a:5a:e0:5b:06:99:
17:31:75:9c:9a:3e:de:7c:cc:9d:6e:f3:73:2a:b6:
d5:a3:2a:90:1e:e5:26:5d:ab:e7:21:bc:d2:1c:69:
6d:10:9f:73:5f:2d:a0:7d:48:fe:5c:cc:e8:7a:7d:
3c:ff:0e:94:af:e9:87:f9:d5:46:01:d5:50:08:87:
5a:af:70:11:c1:96:29:15:5a:3c:c6:21:92:83:24:
a6:a7:b5:9e:76:09:44:a7:8c:5a:17:fd:a6:ba:0a:
fa:01:01:f3:27:5f:60:59:61:09:ee:29:40:7f:ec:
8b:7b:02:ae:c1:a0:b5:81:45:4e:d5:bf:5c:47:40:
03:f4:d4:8c:c3:98:4c:26:c8:02:2c:bf:62:cc:fb:
d7:7c:f0:3f:2a:e1:85:32:e9:9c:c1:d3:17:58:07:
11:9f:89:85:14:17:07:6c:5a:8e:35:8d:9e:0b:a9:
37:72:95:e1:75:e2:ed:ca:68:79:29:9c:4e:20:c6:
c4:58:66:37:6c:11:a4:64:da:21:e8:eb:ea:39:f2:
aa:94:2e:36:f9:03:be:5d:64:cc:86:53:ed:b2:08:
40:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BC:7C:E9:FC:E6:50:75:2C:53:85:C4:6A:D7:C6:92:D3:EA:4B:43
X509v3 Authority Key Identifier:
keyid:CD:E4:C4:65:D2:DF:34:58:C0:26:10:F8:78:20:C9:BC:2E:B3:32:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeTEZdLfNFjAJhD4eCDJvC6zMlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:39:ce:2f:5d:4c:e2:25:2c:f0:4b:b9:5d:5a:b0:0f:91:6c:
33:7e:92:43:67:da:6a:4d:12:69:ab:43:fe:96:66:48:f6:d1:
ee:fa:32:93:c5:8c:3b:6a:f6:0a:29:94:6c:c1:83:6b:33:f6:
be:ce:06:0c:32:a7:8f:80:86:1a:e8:d6:d2:57:9e:5a:06:0a:
82:06:b4:91:e4:e4:03:4f:f4:ed:55:bc:20:4b:7b:d9:34:43:
a2:28:98:70:fe:d5:ea:79:57:4b:17:6c:00:28:9d:dc:7a:6a:
3e:54:99:bd:76:12:d0:f2:47:24:f4:a3:af:25:85:c5:49:03:
87:a3:62:a1:8b:48:72:db:3d:0b:70:b3:f1:3e:38:2b:2d:b2:
29:a5:1c:2f:3f:ab:23:e5:eb:5a:ca:8d:fa:5b:b7:03:30:09:
a1:96:82:20:78:f8:d1:d8:fe:79:90:c9:f6:e9:b2:15:44:4a:
2a:8f:75:69:00:86:7f:c2:66:b1:06:4e:8e:40:6c:68:0d:1a:
48:39:8d:51:f5:4b:24:48:eb:73:39:a2:76:e9:4c:90:68:d8:
ff:03:0b:ee:ff:1e:83:24:4a:be:8b:7a:dc:11:62:f7:cc:09:
99:0e:03:4c:ee:d5:48:21:fe:e5:b5:41:c2:dc:53:c5:e0:e8:
32:f4:4f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:14:07 2026 by rpki-client