Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
File: z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft (raw, json)
Hash identifier: YswgFFZn5ycs3l40q5hhFC26eg+nEQvZ/wfoTvajsJc=
Subject key identifier: CD:23:38:C7:9F:1F:8F:E5:32:C9:8F:5E:F2:91:D6:9A:10:70:5F:3E
Authority key identifier: CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
Certificate issuer: /CN=cf9833261697652c35547e98fc05a7e2294edbc7
Certificate serial: 019D28F31E1CAB849EF30B64AFBBD50BB743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
Manifest number: 0652
Signing time: Thu 26 Mar 2026 07:01:54 +0000
Manifest this update: Thu 26 Mar 2026 07:01:54 +0000
Manifest next update: Fri 27 Mar 2026 07:01:54 +0000
Files and hashes: 1: 0S-ozMaRAyvvdMvSJW3g5Kk4iVo.roa (hash: OQHH+g7JmAcn53oHjDt/GSfgh8qJfjfcS42p09F0WtU=)
2: NQIBAohX75IaNOk07YtqfQi_l2Q.roa (hash: FDra3udXguGsI5fh/D9xyGvlXRNRLrQbxmcagtWhiYA=)
3: wAgPAR1yzaKF5ISv6v3dvwjLWao.roa (hash: hhxh1IVQoJ4OjQ4sKNlyVMIfwcDlCbms6Xn0khvEao4=)
4: z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl (hash: 9oNpMoFiHx1Qe+KF/yhvuZAvwMS5kPPWBg/sIn30MVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:1e:1c:ab:84:9e:f3:0b:64:af:bb:d5:0b:b7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9833261697652c35547e98fc05a7e2294edbc7
Validity
Not Before: Mar 26 07:01:54 2026 GMT
Not After : Mar 27 07:01:54 2026 GMT
Subject: CN=cd2338c79f1f8fe532c98f5ef291d69a10705f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9d:52:a7:0a:c7:5e:a4:cb:67:ad:85:fd:ab:
6d:13:7e:e0:ac:ce:3b:89:c3:3a:80:f7:73:53:c1:
43:d8:ab:7a:2b:ab:d6:a3:62:da:f3:2e:71:3a:39:
19:56:03:cc:c1:df:d5:c3:92:a6:37:39:de:89:2a:
fe:52:4f:50:4c:42:a0:ba:f7:c2:b0:c8:78:d5:f0:
53:19:cc:8c:63:29:d9:0c:9d:ef:79:cd:87:ba:f0:
d2:e1:67:59:b1:20:94:15:f6:32:7d:e2:d9:75:4e:
bc:53:c7:5c:79:2a:66:96:31:e3:c2:3d:78:e1:58:
19:69:75:b1:e0:38:8e:c6:65:a7:d1:97:53:51:be:
45:6c:5d:94:70:7c:b0:ca:f7:2d:f4:07:29:a4:16:
a5:17:09:2c:71:18:be:77:ce:ef:92:fe:65:6f:b9:
84:d6:33:63:78:5e:03:60:6e:5e:ab:26:78:99:d8:
1e:bd:3a:20:3f:01:cf:ee:0e:e7:28:31:38:f7:e8:
fa:75:5e:8b:fb:8d:37:02:2f:cb:32:52:a1:60:a7:
99:a5:58:4b:f3:0e:37:e6:9e:ca:bc:af:e8:eb:51:
5c:e9:f9:36:37:b7:2a:8b:d3:de:98:02:82:c1:24:
22:de:42:96:c9:17:a0:f0:63:0f:bf:bd:09:89:0e:
7c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:23:38:C7:9F:1F:8F:E5:32:C9:8F:5E:F2:91:D6:9A:10:70:5F:3E
X509v3 Authority Key Identifier:
keyid:CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:8e:3d:9b:84:58:dc:b5:bf:7b:91:98:fe:8b:f7:c6:aa:9a:
fc:bb:92:cb:80:75:f2:c0:72:2e:5c:70:9c:8f:fe:1c:45:1b:
4d:98:a5:17:49:d0:f8:99:91:3f:82:ab:3c:d2:a1:d1:18:61:
f5:5a:79:e9:3b:5b:27:4e:62:03:7c:0c:db:15:ec:06:3a:bc:
1a:39:65:67:ee:4a:c3:39:7e:80:e8:bf:4c:89:27:f4:31:21:
6e:89:0e:84:13:95:08:0d:be:58:f1:3c:21:76:8b:2c:bd:ba:
d0:4d:d9:81:db:67:15:7d:e8:07:da:fb:a6:40:3d:72:a3:08:
28:7a:75:c1:28:13:00:cd:63:83:55:f8:5a:04:50:11:bc:1b:
88:19:7e:06:15:08:ca:c8:cc:d6:fd:43:90:05:8f:1a:3f:1b:
30:94:0a:ae:6d:3c:9d:05:26:96:5b:15:60:8c:ec:e8:93:94:
b1:69:07:1d:9f:14:45:8f:44:a7:5c:5f:8a:6c:ab:c8:24:a5:
a7:44:e7:bb:43:7c:da:e3:95:62:84:a7:70:cf:7f:9d:11:c5:
0d:43:5e:5d:51:0f:19:dc:db:cf:fb:eb:2a:92:e4:36:87:75:
8d:66:80:1e:e2:0f:fd:42:68:8b:1c:ef:e1:f1:a9:9e:11:7e:
3c:a8:c6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:03:03 2026 by rpki-client