Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
File: zlv1IB8YtAK45ii8d_IlL3aecPI.mft (raw, json)
Hash identifier: v8ih2BrNixZHYvboDtzdtoNmh56ENErYbbbBodCXchI=
Subject key identifier: CD:14:91:9A:E2:24:97:5A:9D:39:84:DB:7F:25:E9:F5:67:5E:03:DD
Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
Certificate issuer: /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Certificate serial: 019D27A8652BCE1F5030AB67F1120CB8407E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
Manifest number: 04D8
Signing time: Thu 26 Mar 2026 01:00:40 +0000
Manifest this update: Thu 26 Mar 2026 01:00:40 +0000
Manifest next update: Fri 27 Mar 2026 01:00:40 +0000
Files and hashes: 1: XO6sev2FSqLYRr5iJTi7ipxkMsw.roa (hash: elcbj3ZPXUwSlQ0W1VHvrn7ftkq6V4JJB3c4lvRA2B0=)
2: hjWKjeV-jJppeG0fD1H6zmH-Ykw.roa (hash: OeUU/W5Kc0WkJxZpiZAujOCtL2D7yZcVNpe7fsq3VBQ=)
3: zlv1IB8YtAK45ii8d_IlL3aecPI.crl (hash: 8WxhzfTETnmYyWYrxGFvb+K7ZyEw7fuwuCm2GpjOl2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:65:2b:ce:1f:50:30:ab:67:f1:12:0c:b8:40:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Validity
Not Before: Mar 26 01:00:40 2026 GMT
Not After : Mar 27 01:00:40 2026 GMT
Subject: CN=cd14919ae224975a9d3984db7f25e9f5675e03dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1f:aa:0d:fa:58:a6:1b:f8:b1:3f:25:84:4e:
85:2c:fa:82:a7:bb:73:1d:a1:2e:f7:6b:5b:64:6a:
3c:0a:2b:2f:2a:80:ef:ea:02:f6:f4:0f:0e:4a:38:
5e:01:9b:52:24:94:45:fe:08:79:79:81:24:bb:20:
e6:ef:c1:75:9d:3e:bf:ee:99:fa:3f:8c:f0:00:53:
4d:5b:fb:a2:cf:3b:b2:09:a0:9e:b5:39:94:8d:d6:
14:3a:1c:73:89:8d:bb:cf:57:8d:45:7a:ea:7c:f0:
29:ef:30:09:96:c3:2a:20:12:68:63:ca:ca:53:0c:
76:af:3d:cb:70:3a:d1:6f:3d:9d:55:f2:b2:f6:6f:
54:96:26:1b:82:ac:e6:e2:38:38:76:b2:8b:7a:1e:
ff:f0:54:c3:93:c4:db:5f:31:d6:79:5b:6c:7a:89:
66:d2:b6:c2:96:26:ea:cf:2c:94:e6:a8:71:e8:24:
81:f2:34:fc:ba:59:da:c3:5a:07:22:0a:d6:32:7a:
52:c7:a4:38:05:3f:69:62:e9:53:a3:49:1f:42:5c:
92:80:3d:4c:79:d0:e6:b6:1d:63:8d:e6:71:2f:8f:
eb:b4:26:73:df:38:b1:3f:9c:b6:e6:00:40:07:d4:
7e:b9:ba:e0:fd:a9:8c:25:46:8f:d3:7b:b1:72:72:
e2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:14:91:9A:E2:24:97:5A:9D:39:84:DB:7F:25:E9:F5:67:5E:03:DD
X509v3 Authority Key Identifier:
keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2b:c6:bd:12:37:72:ec:e0:eb:fa:8f:41:0f:a3:b2:c9:89:
44:be:66:6e:03:44:1a:a7:ec:33:cc:cd:8e:13:a9:68:5d:d6:
68:14:d2:d0:bd:ed:5f:81:01:b5:4e:56:1e:c4:f3:30:35:7d:
39:62:49:3b:72:71:e0:63:04:5b:bf:7b:b9:40:ed:1a:c5:c1:
f8:bd:7b:49:01:b2:1b:9f:97:a8:2d:09:5d:f2:c7:d3:4c:42:
96:d8:62:b9:bc:d2:97:0e:ea:c2:d8:58:d8:fa:24:06:34:62:
87:f9:95:f2:e8:67:8c:27:a5:a0:46:2d:e5:29:84:ca:bd:50:
65:b3:ce:fb:78:89:f0:a3:2e:45:06:8d:d3:4a:8d:5a:f9:54:
94:6f:e2:e5:c5:70:48:9f:22:ae:81:21:7c:00:61:98:ec:05:
ab:6d:3b:a9:45:21:29:3c:a8:0f:25:07:a0:ca:ac:e3:cc:06:
be:88:ad:bd:11:7a:f1:83:ef:f3:63:41:21:be:a1:a6:ce:03:
9d:6a:0f:6f:d7:9a:c9:54:ba:a0:33:e4:48:dc:4c:af:e3:e4:
b6:9b:1f:c9:ae:b4:2c:39:a4:a0:8d:5a:8a:1e:12:77:6d:b0:
e1:1b:a6:ec:75:f2:6f:fa:59:c3:3b:28:bb:e9:9a:1c:ee:0d:
38:75:3d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:26 2026 by rpki-client