Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
File: zSC8r3ISPi2fXieIazg5t0JEELc.mft (raw, json)
Hash identifier: n10vlvYzxMTSLHl0fi3dvHYaCG2RgZV0EecgNAYYYuo=
Subject key identifier: 6C:53:5F:0C:3F:E6:60:CB:D7:F1:E4:4C:65:02:32:59:B3:0D:2D:18
Authority key identifier: CD:20:BC:AF:72:12:3E:2D:9F:5E:27:88:6B:38:39:B7:42:44:10:B7
Certificate issuer: /CN=cd20bcaf72123e2d9f5e27886b3839b7424410b7
Certificate serial: 019D31F5AB09884166290CA0D84F061A8D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
Manifest number: 0E7A
Signing time: Sat 28 Mar 2026 01:01:16 +0000
Manifest this update: Sat 28 Mar 2026 01:01:16 +0000
Manifest next update: Sun 29 Mar 2026 01:01:16 +0000
Files and hashes: 1: MxSa_Y12ZkKW1wWb8756TfNw_Aw.roa (hash: EaKZOSwf60cJtDMMGuhN9/rV4xuZMLDks62/ENEPebA=)
2: zSC8r3ISPi2fXieIazg5t0JEELc.crl (hash: ITDf8fDyfDmut0VaXdHIieCe2mXg8jDTXiaPye5lwX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f5:ab:09:88:41:66:29:0c:a0:d8:4f:06:1a:8d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd20bcaf72123e2d9f5e27886b3839b7424410b7
Validity
Not Before: Mar 28 01:01:16 2026 GMT
Not After : Mar 29 01:01:16 2026 GMT
Subject: CN=6c535f0c3fe660cbd7f1e44c65023259b30d2d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:66:25:9f:cf:e2:14:0b:f0:f1:b6:21:47:50:
20:2d:64:fa:2c:49:a5:e2:57:95:01:54:83:25:b8:
e7:0f:6b:bc:c9:3c:a9:98:63:65:1a:f7:aa:c4:7a:
9e:c6:7e:94:21:d2:73:e7:55:cd:14:33:b9:63:b9:
4a:1a:e8:e9:46:25:69:c8:d3:75:42:ad:8d:fb:9d:
d9:38:06:83:c0:8a:36:1a:3f:5b:1a:e1:3c:9d:d7:
42:b9:8d:1d:cd:ea:bd:67:87:b2:e8:5b:39:71:ae:
62:cc:99:0e:ee:7e:5e:a8:37:82:7e:c5:78:1c:05:
b5:7c:2b:79:3e:c1:8e:48:1a:92:72:29:a5:cd:a7:
02:b1:1f:f3:38:76:02:26:cd:1d:db:e2:46:07:a8:
36:0b:49:c3:69:0b:f8:95:7e:6d:f2:26:04:88:38:
54:82:09:a7:9c:48:b9:60:d9:8e:68:82:94:36:02:
ff:d7:9f:0c:d2:0a:41:06:a2:ef:fd:a9:a1:0e:b9:
73:15:de:d3:df:81:b4:d3:43:3c:83:b5:84:01:f8:
4d:b9:5c:ea:7a:b9:5a:3e:76:fe:c5:94:e7:cd:b3:
8b:b2:f9:e6:17:9f:9b:e5:33:1f:a7:62:f1:60:bb:
2d:b7:fb:6a:2b:6c:05:34:bb:10:bb:e8:44:bf:03:
db:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:53:5F:0C:3F:E6:60:CB:D7:F1:E4:4C:65:02:32:59:B3:0D:2D:18
X509v3 Authority Key Identifier:
keyid:CD:20:BC:AF:72:12:3E:2D:9F:5E:27:88:6B:38:39:B7:42:44:10:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:87:12:fd:51:a4:40:cf:55:5d:96:05:05:3b:20:41:cb:b3:
4d:c9:3e:1e:52:9c:a8:57:5e:ed:a7:0e:7c:6d:ed:e2:e4:b3:
50:b7:2f:b5:34:7f:37:37:c6:bd:d7:2e:34:db:89:61:3d:41:
fd:75:ec:32:55:ef:94:fe:c9:bb:b8:73:18:1d:6e:9d:ef:bb:
aa:45:67:df:1d:8f:62:13:d9:ef:7e:96:fc:c4:41:64:07:82:
ae:7e:3d:b5:22:47:b4:66:01:18:b6:5f:ff:41:4a:af:c0:5d:
34:1a:f5:9f:94:ca:3e:5b:df:c7:fd:b1:db:82:c1:c1:db:dc:
3a:94:90:61:84:fb:e2:0d:17:be:3a:9d:2b:44:df:89:60:5d:
22:46:bf:30:ee:68:c5:06:04:3f:90:80:5f:1b:63:28:a5:21:
41:74:43:ec:6a:37:7e:6b:54:75:bf:3b:ee:29:b9:39:34:82:
7c:00:53:e5:9c:1f:69:b3:2e:8c:ae:63:02:99:ba:c7:58:2b:
72:40:d4:cf:ab:76:f2:d9:f7:dd:76:33:18:a3:6a:19:dd:47:
7e:cb:aa:5a:2b:8b:77:3a:9b:0e:66:7c:12:8e:ca:f5:19:43:
0d:8b:b8:e6:5a:c0:7f:5e:45:b6:07:14:46:bb:1e:6d:10:5b:
7c:8d:e7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:15 2026 by rpki-client