Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
File: zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft (raw, json)
Hash identifier: ZOd7387YePewzK9R+eewHA5bvNXxtrggEl61Spmr49Q=
Subject key identifier: 05:D5:4D:7C:46:6D:54:2C:E4:36:CE:7C:C5:CA:EC:FA:84:42:6A:4B
Authority key identifier: CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3
Certificate issuer: /CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3
Certificate serial: 019D265FAD7D439FDDFA643976D231DA1190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
Manifest number: 1881
Signing time: Wed 25 Mar 2026 19:01:37 +0000
Manifest this update: Wed 25 Mar 2026 19:01:37 +0000
Manifest next update: Thu 26 Mar 2026 19:01:37 +0000
Files and hashes: 1: GnEvIAlaB-UByoYHOt2F_BVdPQE.roa (hash: fX8z3h8g/jt3tVZ0Hy99MVng9ZbtXgnxN+T6t3Ums8A=)
2: zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl (hash: rA0Q6otT6nktGYG7j82UzZ7VqeSof1PGOfGq8oRbl+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:ad:7d:43:9f:dd:fa:64:39:76:d2:31:da:11:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3
Validity
Not Before: Mar 25 19:01:37 2026 GMT
Not After : Mar 26 19:01:37 2026 GMT
Subject: CN=05d54d7c466d542ce436ce7cc5caecfa84426a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f7:79:6a:93:c0:37:a4:a4:ee:7f:e1:00:12:
4e:8f:2e:88:ab:a0:92:46:6c:0d:d6:6e:6f:fb:2f:
b5:bc:0a:6a:b2:3c:d2:0c:4b:f0:a8:12:4b:f0:e7:
86:cd:60:fd:63:2e:24:8b:c0:00:f4:7c:1b:85:08:
ab:53:bd:06:7a:27:2f:97:06:f9:ad:e5:87:0c:d4:
95:7d:32:50:0e:a5:f8:40:5b:48:fb:8e:8d:d3:2a:
05:43:f8:9d:96:c1:e0:14:9e:bc:86:d3:fd:34:3f:
ed:89:27:3a:db:41:7a:0c:69:6c:1a:77:6a:14:a4:
ff:ae:16:56:35:94:ac:95:8c:db:93:e7:61:b0:f7:
c1:b0:c5:af:dd:78:83:b5:36:95:12:cb:92:7e:cf:
2c:49:20:18:da:dd:22:d4:0b:7e:fa:13:cd:02:00:
ff:9e:10:57:cf:d5:a2:73:d1:c6:28:ed:bf:84:18:
61:64:6d:e9:57:8b:10:c8:56:73:b0:aa:54:3f:49:
64:8e:65:d7:eb:35:8f:5b:4a:69:86:94:25:95:7f:
e8:82:d4:45:5e:05:21:f6:44:81:cc:7c:ca:46:53:
a6:29:2b:86:42:da:5d:f4:15:31:3d:ed:c1:f5:b1:
3e:2a:0c:5b:e1:1d:47:73:87:ae:e0:72:8e:ce:f2:
28:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D5:4D:7C:46:6D:54:2C:E4:36:CE:7C:C5:CA:EC:FA:84:42:6A:4B
X509v3 Authority Key Identifier:
keyid:CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:fa:63:25:22:db:3e:bb:3e:51:39:05:b1:57:35:d0:6b:e8:
d2:87:03:4f:bb:61:cc:f5:4c:08:b7:ea:86:d2:4f:ea:34:4a:
b9:91:f9:e6:b1:93:cf:c6:50:fe:bc:03:28:55:fe:15:56:95:
17:4f:c2:07:4d:32:c0:69:bd:c5:8a:b4:29:5a:eb:e7:5b:24:
9b:14:ea:b1:5b:1e:e6:d6:ab:29:aa:c3:8f:d9:0f:66:4b:75:
b1:5b:27:3c:56:e8:6b:6f:c6:9a:ad:76:88:30:9d:6e:8b:1b:
c1:57:1b:9f:4b:3a:c9:66:50:ad:d6:6a:71:cb:0f:78:07:ee:
d9:21:bc:0a:25:ed:52:ab:93:73:36:89:89:b4:3e:17:3a:c4:
ee:d1:8e:d9:4f:b3:66:b2:b4:c0:93:72:e1:c5:22:e8:26:4b:
10:95:02:eb:ca:c0:c1:41:fc:b7:09:53:e0:eb:78:d8:1c:52:
a3:74:99:e9:19:c3:e7:ee:2e:d1:26:19:20:48:21:87:cd:1f:
b0:13:c8:47:2a:a7:5d:aa:52:7d:a3:4d:b4:e3:ed:c8:4a:a7:
25:5a:f8:2b:11:c6:5e:e9:45:d9:0c:1d:e5:3c:84:b0:da:9f:
43:f0:1c:18:28:04:a1:c4:da:d4:cc:79:3d:1d:6f:bd:87:d3:
f4:9d:14:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:21 2026 by rpki-client