Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
File: zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft (raw, json)
Hash identifier: opvkLijHFy4XcEAcUkMhoK7meZ3cJSzugmSq0FJZHDo=
Subject key identifier: 58:F6:4F:F1:79:4C:E7:94:7A:D4:0D:78:BB:21:22:30:9C:E4:B6:8E
Authority key identifier: CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
Certificate issuer: /CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Certificate serial: 019D265F5F13E66CD0ADBAF0337BF31B377F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
Manifest number: 133C
Signing time: Wed 25 Mar 2026 19:01:17 +0000
Manifest this update: Wed 25 Mar 2026 19:01:17 +0000
Manifest next update: Thu 26 Mar 2026 19:01:17 +0000
Files and hashes: 1: HY8y2aUxH2zl7Z8uEFKyCs4_DZE.roa (hash: pgB+L4R4Q18tDhMP8CyO3Aai8GigL3mxjQcI8MoXdXI=)
2: cKZJLTzeqYRhpsddyswZAoLcpsE.roa (hash: HgvgjBFasTjpcgFlyoecgapQ0MDuq029z3qYeWnH2Zk=)
3: zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl (hash: JFlVR/EqT02sHQYzUWSZo/grRrwXGXkdQhGFDhIidWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:5f:13:e6:6c:d0:ad:ba:f0:33:7b:f3:1b:37:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Validity
Not Before: Mar 25 19:01:17 2026 GMT
Not After : Mar 26 19:01:17 2026 GMT
Subject: CN=58f64ff1794ce7947ad40d78bb2122309ce4b68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:09:b4:0c:83:4c:4a:a6:dd:1c:11:f7:62:69:
7c:27:59:ed:74:24:92:55:53:a5:79:1e:09:3b:6b:
7b:93:10:cc:e9:e1:b0:d0:5b:79:97:1a:23:c3:5d:
69:88:44:53:c7:7d:ce:8b:ba:8c:73:6a:97:fe:48:
5d:ae:87:bc:59:7d:e1:e1:1c:09:c9:a8:11:43:95:
85:e0:be:d3:12:8e:a4:e2:c7:c9:38:97:47:90:34:
cd:bf:af:dc:11:59:67:4d:c2:07:0f:3f:7a:d5:d9:
ec:74:11:d5:a6:6c:69:b7:2e:05:6b:51:de:b9:6c:
11:78:05:68:ed:76:a2:98:15:ef:fc:54:36:10:73:
a1:7f:e4:8f:dc:13:cc:53:8b:73:f9:78:69:a7:95:
14:c3:a7:06:d4:ef:47:8b:57:a0:44:e4:7a:52:55:
83:8c:dc:36:40:7c:13:cd:bd:89:3f:df:73:68:42:
11:7c:56:03:f3:39:52:14:3d:ec:cc:26:20:8a:52:
33:c5:f7:83:71:5f:2f:07:08:1a:f1:40:ec:be:20:
49:01:e2:d0:b4:e5:4b:2c:6c:97:42:a0:c5:b1:3b:
72:38:a1:5e:c9:c0:29:83:41:a2:cf:c1:13:43:72:
4c:12:99:ea:71:b0:cd:79:a4:5b:14:48:eb:1d:6b:
76:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F6:4F:F1:79:4C:E7:94:7A:D4:0D:78:BB:21:22:30:9C:E4:B6:8E
X509v3 Authority Key Identifier:
keyid:CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d2:0e:30:bf:3e:86:e8:ca:22:92:a6:fa:6d:cb:05:65:a2:
3d:33:f4:7a:b6:2f:1f:4d:be:3c:a5:7e:2d:03:8d:1f:fe:42:
c4:14:6c:17:5d:ca:2d:b8:a0:2b:9c:e4:5e:54:99:e1:68:aa:
fb:74:e2:1e:49:b3:c1:94:f5:44:6e:25:30:3f:d1:26:8a:14:
82:24:db:ac:3e:d9:4b:5a:9b:7e:10:d3:d5:8d:84:c4:42:77:
b4:8b:4f:71:11:70:bd:29:c4:01:57:b4:4e:c3:d8:1b:69:7a:
52:c0:e3:65:34:87:8a:d3:62:d2:20:21:97:ea:d6:f3:94:ec:
bb:21:8f:e5:f5:a6:a1:17:bc:ee:ff:ab:83:b3:e4:f2:2a:b2:
93:09:24:51:e7:16:bb:b2:a0:f3:b3:25:b8:1e:fc:fc:da:ee:
54:fb:b7:30:a6:a0:94:8d:13:aa:d2:c3:80:5e:8b:ca:b9:66:
25:3c:b7:f0:46:15:e0:66:b7:50:cb:ba:35:7a:19:e9:cb:fd:
5a:4b:00:15:3e:ed:04:52:76:a7:25:01:37:45:47:e8:4b:b1:
69:9b:3d:f5:b3:78:83:83:fe:ed:a6:97:a4:b2:3a:66:9a:f1:
d4:1c:5a:e1:4a:60:52:a7:16:c5:8d:cc:18:bd:6f:55:39:d3:
9e:42:0e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:56 2026 by rpki-client