Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
File: zHrEehn2b0GDl-6l_vFaB_8sACM.mft (raw, json)
Hash identifier: rbBzUmjp+xuEehZfqDmrhPoWNtFKzs3gQr8IVGxFt/Y=
Subject key identifier: FC:19:9C:8E:5A:10:66:71:05:D0:49:D0:F1:6E:CD:CB:9F:7C:2C:77
Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
Certificate issuer: /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Certificate serial: 019D28BB965F8C420D361D04B376E6690C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 06:01:15 +0000
Manifest this update: Thu 26 Mar 2026 06:01:15 +0000
Manifest next update: Fri 27 Mar 2026 06:01:15 +0000
Files and hashes: 1: 4lysncKwxgSAj9n9yli9Am0CcOE.roa (hash: jyfAwSL6x2o2QJ3Pd5vHV7+3sGhamJlWvutXDf8SBf4=)
2: AENYJALANSjKlBoltdKemnCFKjs.roa (hash: s2OVjDuX6iIGr8lYPRWiO+GCWriVBdcRjsgW+JAkKFY=)
3: zHrEehn2b0GDl-6l_vFaB_8sACM.crl (hash: 2l5os3p6Ss2/m0j1++v75aJMnWgW66UTJR7O03Na4js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:96:5f:8c:42:0d:36:1d:04:b3:76:e6:69:0c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Validity
Not Before: Mar 26 06:01:15 2026 GMT
Not After : Mar 27 06:01:15 2026 GMT
Subject: CN=fc199c8e5a10667105d049d0f16ecdcb9f7c2c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:5a:83:ed:de:d6:49:e2:8b:5f:4d:06:b6:
0e:6a:28:dd:d6:e0:6a:69:f3:57:a9:0e:0f:70:f8:
e7:2d:34:02:43:3e:2d:78:aa:bf:5c:99:90:2c:3b:
74:c7:28:b6:ce:0b:a2:a1:91:bf:08:70:40:ae:8b:
cf:7e:d7:3f:7d:07:f5:20:11:ef:ce:da:55:3d:da:
bc:82:17:7f:cd:ec:e0:be:5e:69:b9:4f:1d:da:06:
dc:1f:a3:b0:39:74:7e:f7:61:fa:d0:fb:bb:68:2d:
d1:66:da:a5:2a:26:98:e3:8f:73:dc:1d:e7:22:66:
2b:6a:9d:bd:e7:c3:db:66:72:a2:ea:4b:f7:01:3e:
e6:db:bf:8d:04:a0:95:79:ca:0a:d7:71:47:89:26:
2b:d1:9c:94:5f:5e:8f:55:14:8f:64:8e:7e:16:55:
ea:8d:2c:62:df:ff:69:78:f1:a9:bf:a0:91:47:de:
25:d0:03:35:72:c7:68:f6:45:50:4e:b8:3f:e3:c1:
c0:7a:e1:a6:a8:65:43:15:5b:e3:32:ec:94:1b:30:
72:53:45:d2:02:e4:10:81:6e:54:1b:4d:02:ae:ad:
73:cc:3b:9f:98:d3:cd:f2:18:c3:d4:44:72:03:0b:
01:4f:dc:97:aa:ab:d0:73:71:fa:ca:fe:b2:f1:ed:
eb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:19:9C:8E:5A:10:66:71:05:D0:49:D0:F1:6E:CD:CB:9F:7C:2C:77
X509v3 Authority Key Identifier:
keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:f6:c4:c1:35:69:80:b2:48:24:7e:af:c6:d8:8b:9c:03:a2:
ec:ae:6a:ad:1d:14:9b:c7:16:b2:92:0a:ee:cb:a8:88:b4:2a:
29:52:68:f2:62:e8:90:e2:88:b9:92:59:15:b6:b5:18:f3:9d:
54:ac:c3:be:1a:59:77:78:cd:f3:f5:03:36:2e:c4:6b:42:50:
91:6c:e3:57:17:88:a0:86:84:45:c9:0e:49:a6:41:9a:1c:4d:
62:2f:bb:1d:08:90:82:42:fa:f9:f2:24:c3:59:25:51:2d:f6:
82:0c:76:a9:f3:5a:b1:93:f5:06:fd:18:c8:00:de:bd:f7:03:
b2:e3:74:ff:c4:51:5e:35:2c:1c:37:4d:4a:41:61:14:38:0f:
b0:d5:e1:32:6b:e6:df:30:43:69:18:52:cd:bc:8e:38:00:51:
6c:ed:49:ba:63:c5:71:e5:e1:77:5c:91:02:5b:5b:c2:d5:48:
3a:a1:25:de:a2:68:08:f6:c7:6b:7b:41:41:19:9e:55:a9:03:
46:a9:9e:ce:64:e9:0c:ae:9a:e5:35:6d:4d:3f:1b:d7:6c:42:
50:39:37:eb:bb:ba:0e:11:eb:f8:41:94:49:c9:18:c8:05:9f:
9f:e1:6d:48:c0:8c:b9:05:53:fe:65:bf:33:e1:b1:7a:7b:81:
b1:7d:9f:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou5ZfjEINNh0Es3bmaQySMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjN2FjNDdhMTlmNjZmNDE4Mzk3ZWVhNWZlZjE1YTA3ZmYy
YzAwMjMwHhcNMjYwMzI2MDYwMTE1WhcNMjYwMzI3MDYwMTE1WjAzMTEwLwYDVQQD
EyhmYzE5OWM4ZTVhMTA2NjcxMDVkMDQ5ZDBmMTZlY2RjYjlmN2MyYzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJNag+3e1knii19NBrYOaijd1uBq
afNXqQ4PcPjnLTQCQz4teKq/XJmQLDt0xyi2zguioZG/CHBArovPftc/fQf1IBHv
ztpVPdq8ghd/zezgvl5puU8d2gbcH6OwOXR+92H60Pu7aC3RZtqlKiaY449z3B3n
ImYrap2958PbZnKi6kv3AT7m27+NBKCVecoK13FHiSYr0ZyUX16PVRSPZI5+FlXq
jSxi3/9pePGpv6CRR94l0AM1csdo9kVQTrg/48HAeuGmqGVDFVvjMuyUGzByU0XS
AuQQgW5UG00Crq1zzDufmNPN8hjD1ERyAwsBT9yXqqvQc3H6yv6y8e3rUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwZnI5aEGZxBdBJ0PFuzcuffCx3MB8GA1UdIwQY
MBaAFMx6xHoZ9m9Bg5fupf7xWgf/LAAjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekhyRWVobjJiMEdEbC02bF92RmFCXzhzQUNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hNzU2OGYtNDQwYi00YTllLWJiM2Et
M2VlMWU2OTkxMjY5LzEvekhyRWVobjJiMEdEbC02bF92RmFCXzhzQUNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9hNzU2OGYtNDQwYi00YTllLWJiM2EtM2VlMWU2OTkxMjY5
LzEvekhyRWVobjJiMEdEbC02bF92RmFCXzhzQUNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2vbEwTVp
gLJIJH6vxtiLnAOi7K5qrR0Um8cWspIK7suoiLQqKVJo8mLokOKIuZJZFba1GPOd
VKzDvhpZd3jN8/UDNi7Ea0JQkWzjVxeIoIaERckOSaZBmhxNYi+7HQiQgkL6+fIk
w1klUS32ggx2qfNasZP1Bv0YyADevfcDsuN0/8RRXjUsHDdNSkFhFDgPsNXhMmvm
3zBDaRhSzbyOOABRbO1JumPFceXhd1yRAltbwtVIOqEl3qJoCPbHa3tBQRmeVakD
RqmezmTpDK6a5TVtTT8b12xCUDk367u6DhHr+EGUSckYyAWfn+FtSMCMuQVT/mW/
M+GxenuBsX2fnA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:52 2026 by rpki-client