Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
File: zEDZYkKwgu_ltPIliCCzBZOWGY0.mft (raw, json)
Hash identifier: hyZRqiyktuE+ySn6wSSFrhXlMd0zrzGS9A17gMUr0VA=
Subject key identifier: A4:A8:B0:5A:D8:4B:05:09:3F:61:98:18:BA:52:A4:3D:A8:A6:A8:CB
Authority key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
Certificate issuer: /CN=cc40d96242b082efe5b4f2258820b3059396198d
Certificate serial: 019D2AA9C0D5E4AF5C27FE3BD232B8827454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 15:01:01 +0000
Manifest this update: Thu 26 Mar 2026 15:01:01 +0000
Manifest next update: Fri 27 Mar 2026 15:01:01 +0000
Files and hashes: 1: 98fyEBb-PIBiroCj51bzkd-V_i4.roa (hash: 2RN0v3XP/euGb82/ECdLfjWteqkCXDXBbJynvO0cBWE=)
2: y97Q2cCIA4p_jfA1RbOfelZQKOo.roa (hash: oRmoVnYM94QBjpHDaFRFV+BA4jZYdHdlmrs4oEppUqA=)
3: zEDZYkKwgu_ltPIliCCzBZOWGY0.crl (hash: 1hj8f4GOmUn88aFVXOeQxGcLZhNSSqJp7JXQKwtTir0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:c0:d5:e4:af:5c:27:fe:3b:d2:32:b8:82:74:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc40d96242b082efe5b4f2258820b3059396198d
Validity
Not Before: Mar 26 15:01:01 2026 GMT
Not After : Mar 27 15:01:01 2026 GMT
Subject: CN=a4a8b05ad84b05093f619818ba52a43da8a6a8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:95:74:11:8b:bf:f7:ca:96:94:94:b2:90:53:
9f:ae:b2:b7:c7:37:80:d2:82:94:98:a6:a4:47:bd:
ed:10:6f:07:ce:ee:be:f1:ee:7e:a1:42:43:e4:07:
16:4a:00:96:66:95:36:52:fa:c9:2f:04:1a:22:d8:
8d:51:2f:8a:d3:ca:50:e2:9a:ff:6b:84:c7:82:68:
5f:97:96:0e:83:98:f2:77:ea:1b:af:09:f7:5e:c9:
05:9c:2b:a9:b7:9e:a0:e3:7d:af:a5:51:9c:24:3a:
ac:d1:bb:7d:48:8c:b7:b9:28:f4:f9:95:88:b8:32:
c5:59:23:cb:f9:e2:13:d4:de:c9:61:f1:be:02:b7:
11:96:91:fb:ab:af:c9:47:e5:b2:9b:52:1f:e7:72:
ae:9c:44:0e:e4:20:f0:d2:0a:da:88:6f:0f:4e:94:
a4:bd:16:86:33:48:d3:31:02:7e:c4:83:06:c4:16:
f1:4b:41:09:50:15:f7:2e:98:9d:c0:af:a7:b4:be:
a4:dc:8d:bf:36:6f:a4:c6:1f:2c:7b:71:d4:d2:53:
23:4b:6b:56:11:0d:69:c3:e3:a6:df:16:c9:ae:6e:
89:ac:4c:80:37:0a:29:b8:bd:02:7a:b1:96:7f:45:
24:75:d3:18:e5:cb:aa:29:66:66:60:ff:26:92:10:
db:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A8:B0:5A:D8:4B:05:09:3F:61:98:18:BA:52:A4:3D:A8:A6:A8:CB
X509v3 Authority Key Identifier:
keyid:CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f0:e5:09:4a:50:a3:d5:84:83:2f:0d:26:a2:5a:ff:32:0e:
98:89:00:dd:60:aa:c7:bb:89:da:5c:1b:a0:3e:6c:98:de:a9:
ad:24:18:ad:48:ed:cd:84:45:aa:fd:7e:3d:63:7b:dc:d6:be:
15:dc:12:65:f1:3a:34:17:49:87:a1:4e:ad:36:be:f1:48:b6:
c6:21:72:9e:8c:34:49:64:f0:4e:d4:3f:04:98:73:e3:81:72:
c0:a6:56:b1:c2:ee:40:71:ba:25:80:a9:99:d8:a4:18:0b:81:
50:86:7d:a3:ad:26:10:30:e0:8e:6b:7d:24:a5:f5:38:81:13:
3b:f0:ad:d4:73:10:15:3b:b1:88:d2:e8:34:8c:59:ab:36:93:
34:d5:70:59:e2:74:bf:dd:63:f7:d6:23:ca:a2:c0:bc:60:ad:
ac:5f:b1:d2:44:1c:60:51:7e:de:5f:93:89:37:47:d5:db:a8:
0b:cd:0e:49:27:6e:13:65:12:7f:a8:b8:32:c2:a4:c5:d4:6d:
f7:75:e8:d9:64:86:96:79:b2:36:f4:65:65:fc:25:9d:8c:9e:
56:e1:af:da:72:8d:06:52:af:06:5d:aa:5f:33:af:05:e0:88:
f2:3a:60:90:59:1e:f2:1a:82:f4:63:e0:3c:a1:6f:19:36:7d:
66:23:03:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:38:54 2026 by rpki-client