Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
File: ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft (raw, json)
Hash identifier: 5WftlgDTxYmWl/PM/2bYKSbsFbtLNb4hL98L3K3oiJE=
Subject key identifier: 4C:54:68:90:EF:C9:02:33:50:ED:CF:26:C2:4D:7B:39:A2:43:7E:BA
Authority key identifier: CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
Certificate issuer: /CN=cdee78ad857607523b50b60acd9e22ca5a107854
Certificate serial: 019D28BB81D82227F1A67CC4252D9F25DDA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 06:01:10 +0000
Manifest this update: Thu 26 Mar 2026 06:01:10 +0000
Manifest next update: Fri 27 Mar 2026 06:01:10 +0000
Files and hashes: 1: jd-Obso-qia3Fzrm-rJvl_CyXrA.roa (hash: w+UMEthLd9XD2Eg9Qq+nBr2hQA3cH7TTPC5wOmg4x3A=)
2: vvIOu90M6kEZ71mN06u0tYK02eU.roa (hash: rr9r1oYZxg4M15XzRNVPfU9mZGnGg57yCNPY5TXNgYg=)
3: ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl (hash: 4a9z43NWiSTYDFZrpKWrfhmdyYR6Q1KpSS2QVY77BLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:81:d8:22:27:f1:a6:7c:c4:25:2d:9f:25:dd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee78ad857607523b50b60acd9e22ca5a107854
Validity
Not Before: Mar 26 06:01:10 2026 GMT
Not After : Mar 27 06:01:10 2026 GMT
Subject: CN=4c546890efc9023350edcf26c24d7b39a2437eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:54:8d:97:11:c1:14:2f:01:4e:94:b5:1d:
3b:f8:28:68:db:20:a5:1d:5a:90:6f:da:f5:30:b6:
19:54:07:94:a8:fd:a7:5c:ce:78:31:81:1e:1f:68:
90:73:74:df:96:81:fd:a9:6f:b6:8e:c3:25:11:8b:
b4:9f:d5:8e:db:db:fd:5e:d9:32:0d:ca:27:1f:cf:
27:56:78:41:6f:38:6f:60:e2:77:e3:07:c2:30:7d:
09:b3:71:24:30:be:6c:01:09:89:6c:49:71:ac:f1:
a4:26:6a:08:dd:f4:0e:97:b8:c5:b0:d6:f1:08:12:
0d:d2:0a:e3:6e:b5:e8:66:69:f2:5c:9d:b4:e5:d4:
1c:a8:26:0f:f3:a0:27:94:d5:4d:de:f0:d4:2c:c2:
e5:83:16:bd:5a:2c:f7:17:f7:50:6e:21:62:0f:42:
79:4f:c0:59:4b:58:b6:aa:2e:02:d9:4a:2a:2e:1e:
cf:05:25:75:43:43:93:9c:70:89:38:c9:e6:e6:5b:
43:8a:80:98:af:e7:70:5e:5a:c3:22:44:c1:cc:ae:
dd:c6:f9:77:fe:27:bb:f6:47:10:87:46:72:61:74:
d8:fd:e2:ae:21:a5:72:97:38:c6:8a:97:84:19:fa:
c4:61:93:a2:6d:4f:43:3d:42:f0:44:4b:df:89:ce:
57:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:54:68:90:EF:C9:02:33:50:ED:CF:26:C2:4D:7B:39:A2:43:7E:BA
X509v3 Authority Key Identifier:
keyid:CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c3:d9:53:11:85:d6:f2:01:8a:04:34:ab:ce:f5:8a:96:27:
52:d7:d3:54:5f:f5:06:2a:4c:38:46:8a:f0:23:a0:aa:ed:6d:
a0:39:af:66:76:c9:70:40:8e:64:80:af:f0:d7:e0:ac:9e:57:
16:5b:3d:e4:54:f1:1d:22:66:bf:1c:24:bd:c0:59:12:74:42:
1f:f0:09:b6:70:3c:82:38:73:f0:ae:f7:90:d0:77:70:b9:e7:
97:a4:3c:25:1c:57:24:73:2a:1c:db:1c:98:e9:1e:5f:3c:40:
18:27:77:aa:76:b4:d4:fc:be:d4:9a:dd:d8:8c:79:2a:7b:09:
3b:07:f4:3b:0a:a3:7c:a7:10:23:e0:fa:88:7b:cb:95:1b:7e:
3e:5f:39:74:3f:a3:49:b4:f4:e2:72:f0:95:4d:21:d7:48:fc:
59:de:72:7d:6b:bf:63:ef:57:00:0e:72:f7:dc:9a:ba:55:18:
1d:67:65:a8:db:e5:74:8f:8b:19:be:20:59:9f:f4:c3:7d:5b:
ea:c8:4b:2f:8e:4f:20:69:4f:09:62:e2:fa:a2:b7:89:7b:0c:
7c:23:3f:b0:89:ee:ab:69:fc:dd:46:10:0a:2e:8c:ca:c2:f2:
28:35:2e:7e:b7:f8:bb:24:e4:d0:8f:a0:63:48:7a:d9:00:65:
20:a9:ff:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:36 2026 by rpki-client