Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
File: zhIoo6PQBlTUsRFzOHTjHYDAogw.mft (raw, json)
Hash identifier: YF+HjIBlWPDPByY378QFqU8GhOko6k5VHUJgo+y24uI=
Subject key identifier: 8C:5F:D3:C4:17:6B:1B:EE:8B:DD:B4:0F:46:C6:04:C3:17:BB:9F:FC
Authority key identifier: CE:12:28:A3:A3:D0:06:54:D4:B1:11:73:38:74:E3:1D:80:C0:A2:0C
Certificate issuer: /CN=ce1228a3a3d00654d4b111733874e31d80c0a20c
Certificate serial: 019D26CD4A1E1C707218AC7A50AEF6034F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
Manifest number: 03FE
Signing time: Wed 25 Mar 2026 21:01:21 +0000
Manifest this update: Wed 25 Mar 2026 21:01:21 +0000
Manifest next update: Thu 26 Mar 2026 21:01:21 +0000
Files and hashes: 1: 1-kOi4nefmaukalzSye5kdhLHwjg.roa (hash: 0aXXszrWV6/bhcESEiK3I+iPJll6E210hDJhUqm+acY=)
2: zhIoo6PQBlTUsRFzOHTjHYDAogw.crl (hash: dA7xDwnxxTY00zUJZaImePmnh9+FgesSIffmTcMe78I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:4a:1e:1c:70:72:18:ac:7a:50:ae:f6:03:4f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce1228a3a3d00654d4b111733874e31d80c0a20c
Validity
Not Before: Mar 25 21:01:21 2026 GMT
Not After : Mar 26 21:01:21 2026 GMT
Subject: CN=8c5fd3c4176b1bee8bddb40f46c604c317bb9ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a9:f6:18:23:b5:f0:f6:54:a8:13:2d:55:2f:
e1:c9:09:9b:cb:68:7b:13:e2:04:8d:86:ae:94:0c:
6c:fd:4a:4b:07:54:9a:7b:4f:ac:03:f3:5e:81:8f:
ba:e3:bc:ec:63:52:bc:7d:29:5b:88:eb:ba:87:cd:
c4:65:4a:09:ff:0f:78:54:b5:52:74:95:c6:29:f8:
8c:3f:2b:cf:90:ae:ba:a0:a8:a2:33:c7:38:4b:d2:
2e:a2:80:eb:0c:3b:10:20:df:cf:10:bb:c1:88:5f:
e8:bc:a8:de:99:47:65:90:fa:34:f3:91:b0:3c:b3:
08:d7:a1:4e:41:10:2b:82:ad:95:88:d9:8e:6e:ca:
1e:ce:e9:45:93:4e:05:54:8e:3e:15:bb:60:35:48:
aa:7f:56:7c:d1:c0:19:30:67:85:cb:0f:65:7d:e2:
78:79:00:60:f0:11:cf:2c:f7:7e:50:50:b8:db:04:
fe:7a:80:c0:44:c6:1c:39:3b:fe:ef:2e:49:a8:51:
e5:3e:53:33:60:cb:e9:04:80:a2:89:c7:01:8f:62:
8e:bb:60:09:65:57:d6:04:3a:61:6d:46:92:e9:67:
1e:eb:43:ef:64:f3:62:22:98:96:f0:1d:a1:30:44:
a6:1f:50:98:92:ed:bb:cc:6e:09:e9:7c:a9:fc:4e:
5a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5F:D3:C4:17:6B:1B:EE:8B:DD:B4:0F:46:C6:04:C3:17:BB:9F:FC
X509v3 Authority Key Identifier:
keyid:CE:12:28:A3:A3:D0:06:54:D4:B1:11:73:38:74:E3:1D:80:C0:A2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:53:17:ce:7b:dc:fb:8b:81:2b:51:7d:e8:f1:ed:80:c3:94:
ef:b4:c4:da:37:12:4c:08:99:56:a7:d5:85:1e:06:ae:a9:82:
47:41:8a:7c:2c:69:a3:54:ad:c3:98:67:21:3c:cb:77:06:c7:
b4:5a:14:15:fd:6d:e0:b9:b1:0c:56:38:1a:0d:d3:d6:f0:32:
1c:17:c0:f1:f2:b2:07:be:a8:d7:d6:45:99:57:df:93:d0:58:
6b:f8:24:54:46:74:e1:4c:34:fa:d4:76:d1:d3:a7:cf:4e:a3:
6e:ac:7f:2d:b4:8c:c3:e2:41:29:c9:4a:a1:40:88:ec:1e:8f:
f4:ce:e1:f9:95:cf:22:20:30:48:8a:17:c5:1d:b6:69:3f:da:
60:3e:7e:ee:c6:e6:a6:5c:9b:67:55:4c:28:80:31:89:0f:0f:
15:29:80:45:2d:59:75:e8:d8:01:e9:b7:5c:d1:9e:b1:18:f6:
ad:64:cf:82:54:9b:ab:70:19:77:6c:5f:55:8a:7d:23:f8:de:
0f:d2:ed:13:1e:5b:92:8a:e4:7f:b0:5a:c1:da:0a:15:d5:4d:
fe:4f:63:d6:19:84:2c:45:75:ec:5c:39:9e:91:46:c1:58:70:
a6:e6:ce:53:47:62:02:e5:d3:48:85:25:5d:67:15:05:0e:fe:
21:78:b8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:27 2026 by rpki-client