Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
File: z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json)
Hash identifier: s9lrGD19seTfGr/R3ogTpgv0OapsfHkPMoG/OI1g27k=
Subject key identifier: D1:A6:CD:2B:A8:02:BF:FE:0B:59:5C:39:9E:18:4A:2B:52:12:4A:21
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 019D27DFB34F701B9176C4B5E366036C3592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
Manifest number: 18D2
Signing time: Thu 26 Mar 2026 02:01:04 +0000
Manifest this update: Thu 26 Mar 2026 02:01:04 +0000
Manifest next update: Fri 27 Mar 2026 02:01:04 +0000
Files and hashes: 1: LZY-PqyJIZbUMaW5LyxkZu3B0ME.roa (hash: n7XhC8EKYYjZlJRLiTzAC3ZXaalwMOd93SyUZUX87f0=)
2: tw9opvf0Dc5mqTovtjfu2Csg6vo.roa (hash: /sxGcP7rnMogpd9PU079PAunh+PKIDCxrO0qaczcWVs=)
3: utu4HG5Q_7wmUAMYqV-VoOkOlAU.asa (hash: GWkYlaZN+/4nG13OOIg1vJsZ8EIkcdYZl1pQv3olPHk=)
4: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: biYjNx1BzfanIqa7y8i3Ab077H9fAqXeZywy5ZpZVYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:b3:4f:70:1b:91:76:c4:b5:e3:66:03:6c:35:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: Mar 26 02:01:04 2026 GMT
Not After : Mar 27 02:01:04 2026 GMT
Subject: CN=d1a6cd2ba802bffe0b595c399e184a2b52124a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9e:cc:e6:3e:e2:8b:3b:08:8b:b0:c4:e8:13:
6e:76:c8:96:63:8f:4e:8c:af:54:df:00:e1:90:c5:
f9:65:e8:6b:91:97:be:6d:90:bf:8a:9e:98:b8:7f:
f2:3a:fb:69:25:fa:5e:8a:26:69:5a:52:20:8c:29:
ec:73:57:04:8a:7c:07:69:1e:b1:55:00:66:10:1a:
68:94:c8:41:81:bd:2a:ba:8f:d4:59:71:a5:ef:c8:
70:9f:e8:f9:27:7f:f3:ca:18:8f:b5:ef:96:dc:fd:
86:6c:ec:57:e0:d4:45:03:f5:ae:3c:f2:34:5b:5f:
7c:84:25:ee:b4:d1:ad:e8:0c:81:f0:e5:c8:3c:5c:
27:1b:08:2a:19:86:f5:51:a7:14:7c:b8:5e:0d:9e:
54:c4:23:f6:30:78:15:39:08:32:0f:7f:45:5d:f7:
e1:db:ae:43:08:73:32:36:fa:7e:b3:bb:24:d7:cd:
79:ec:6e:5d:c9:63:29:5e:27:bf:50:42:13:88:7f:
48:4b:e0:d3:e9:f5:b0:cf:94:4b:1e:3b:f3:78:b4:
d1:dd:57:6a:8d:dd:ae:31:ed:4b:ba:f4:ee:ae:c5:
15:1c:ce:89:ce:0b:08:28:8e:25:eb:00:29:26:78:
a9:1b:79:f8:84:ca:79:3d:79:1f:0a:35:ec:a1:1a:
72:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A6:CD:2B:A8:02:BF:FE:0B:59:5C:39:9E:18:4A:2B:52:12:4A:21
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d9:2d:f7:15:5c:4e:c9:98:a0:c3:a3:85:fc:60:25:85:4f:
96:3f:ac:c5:16:8b:8d:80:d5:62:03:c9:58:2f:43:79:90:ad:
63:87:6e:25:21:c4:40:3b:d9:a7:0a:7d:a6:5c:dc:58:5a:44:
c9:94:15:26:79:06:8b:ac:ad:9f:6d:e3:51:a3:aa:67:7c:7c:
bb:c0:5e:fd:c7:af:38:ef:ba:97:09:37:33:59:db:24:74:49:
e7:8d:51:f0:87:ea:1b:2d:e7:59:e3:cb:a7:66:5c:ba:02:4e:
47:3d:a4:a0:d3:43:fa:a3:1d:9f:b2:ff:ca:a8:6c:81:b6:41:
01:eb:3a:56:23:1b:d4:82:9d:2e:df:f3:8c:aa:1d:f7:44:86:
40:55:d4:ac:44:4e:c1:bd:a2:4f:0c:ca:a6:ab:05:74:8d:3a:
f1:bb:46:fc:25:4e:a0:c7:df:e3:2a:3e:e6:14:19:43:51:66:
62:70:66:50:ad:a1:c7:66:8c:b9:5b:32:0f:17:fb:fb:15:ca:
af:15:d3:66:99:be:52:aa:fd:48:95:cb:12:2e:d1:70:01:ac:
ca:a4:ae:9d:8f:33:9d:cd:5f:0d:c5:37:67:f3:d4:a5:a5:ad:
92:a0:8c:d8:04:9c:59:5a:8b:b2:f9:e2:d5:93:03:d3:aa:f8:
c7:a0:77:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:03:34 2026 by rpki-client