Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
File: zJd-nVKvvEd5nTl1_O6KxRygz2o.mft (raw, json)
Hash identifier: ax6bUrsnZw5em5pmFO6oTzzOHtC0FAkS4mTY+WosWy8=
Subject key identifier: AF:97:0A:65:5A:C2:D7:4D:D5:A9:21:15:75:80:56:3F:35:37:C8:DC
Authority key identifier: CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
Certificate issuer: /CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Certificate serial: 019D2695C4C366E92046D2514CAC074AF0E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
Manifest number: 1759
Signing time: Wed 25 Mar 2026 20:00:42 +0000
Manifest this update: Wed 25 Mar 2026 20:00:42 +0000
Manifest next update: Thu 26 Mar 2026 20:00:42 +0000
Files and hashes: 1: Sq1CvQy8o0B9tgh2Xu1eMwRJZtk.roa (hash: HdfFsuae+bs6Px2O/nXidzw9nHeIbmVY360ACfcO/uA=)
2: apKWJZAqjwjRd0dehHbbTa9ZY3A.roa (hash: nVaIovGi66UncedynfpwyGBTPpXsXon+jV7FMQbYQEg=)
3: zJd-nVKvvEd5nTl1_O6KxRygz2o.crl (hash: tpcOBGAar2eVpdLZQAv8qS+muWhYKz+BkqcIQ5vSxAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:c4:c3:66:e9:20:46:d2:51:4c:ac:07:4a:f0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Validity
Not Before: Mar 25 20:00:42 2026 GMT
Not After : Mar 26 20:00:42 2026 GMT
Subject: CN=af970a655ac2d74dd5a921157580563f3537c8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0d:f3:60:07:d6:a7:ca:86:2f:00:45:f0:6f:
c4:38:2c:4b:ce:57:2c:d5:c8:7f:67:6f:bd:60:ca:
ad:69:81:d4:d5:1a:64:d2:7e:be:74:67:28:70:6b:
74:50:2b:53:9e:ae:00:0c:f8:13:2a:1d:55:7d:b1:
c1:0a:6e:ff:18:65:7d:cd:5b:c9:61:41:ad:5b:cf:
ae:e0:c8:33:7c:b1:dd:20:5a:35:99:a8:1d:78:74:
df:70:90:7e:16:1e:ff:5c:ce:63:53:77:c0:b4:0f:
d3:c9:57:e7:90:d3:29:d9:28:8a:d9:bc:d2:02:0a:
56:bb:7b:81:d2:f6:dd:48:36:e0:f7:38:87:da:b0:
9e:f1:35:4c:7a:89:bd:f1:31:3f:c5:49:e2:35:ac:
3b:24:5c:ba:0e:8f:bd:25:ec:84:af:61:d2:f4:59:
d8:d9:2b:fe:00:90:c8:4f:8a:63:7b:21:ee:5f:3c:
3f:c1:92:52:0b:ce:96:50:4b:13:8e:36:ce:4b:b6:
b4:45:dc:45:4c:c5:87:7b:7c:bc:f9:7a:bf:52:ba:
53:9c:9c:27:60:b6:9c:db:ab:36:25:0c:20:7d:70:
ab:39:be:e0:60:d2:d2:eb:cc:7f:98:66:df:e6:05:
1c:69:ca:bf:92:89:93:34:09:ac:f7:22:81:5c:34:
6c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:97:0A:65:5A:C2:D7:4D:D5:A9:21:15:75:80:56:3F:35:37:C8:DC
X509v3 Authority Key Identifier:
keyid:CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:65:62:a0:26:6c:b9:e3:ae:b9:9a:37:96:97:ee:dd:98:64:
f2:19:15:47:c1:db:48:8e:1c:50:75:25:ec:60:4d:ce:72:dd:
84:d7:1d:08:ae:e7:d4:84:38:4a:b0:58:57:09:d5:32:bc:f0:
70:6f:18:4c:5c:6d:37:b9:05:51:08:26:5f:73:f3:f0:18:a3:
77:ae:b7:62:3a:52:d0:97:1a:d6:d0:4b:06:87:1a:cf:36:2d:
4d:5a:b9:25:37:71:0b:0b:0c:f4:a4:15:50:a6:c3:88:d2:59:
85:05:e6:8f:40:48:a8:9c:e8:35:2d:f2:f7:1e:36:1a:80:e2:
94:f3:cb:75:3e:27:5f:7d:97:cc:c7:4e:45:a1:6d:74:11:e0:
48:0b:43:65:32:ea:9b:a6:91:1e:ed:61:65:79:c3:2f:6e:36:
a3:0b:e6:42:35:20:cf:11:92:d3:55:23:2d:08:9f:19:6f:0a:
ee:8e:4d:88:16:b7:89:82:61:dc:16:fc:90:d8:ef:0f:2d:ea:
2a:db:b2:bf:55:75:86:ca:26:87:db:8e:12:f2:14:5e:a1:ae:
cd:64:ae:9e:06:32:5f:06:a4:b1:b8:88:14:d6:32:7d:77:94:
5a:76:93:b2:89:0c:65:81:04:70:8f:6a:43:e8:bc:e8:36:e5:
71:5a:b2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:13 2026 by rpki-client