Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
File: zuTBXIcH3739qDvjppPDWUfxbVk.mft (raw, json)
Hash identifier: hMivY7aNqCy6uqqghiIUMTZU0Zu1jQ2SK73H072xgwc=
Subject key identifier: 0D:EA:F6:97:9F:75:A0:1B:7E:36:6D:9D:F8:28:7F:3D:94:44:01:C1
Authority key identifier: CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59
Certificate issuer: /CN=cee4c15c8707dfbdfda83be3a693c35947f16d59
Certificate serial: 019D273AAC47F976E5FDD9ED8E131D030687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
Manifest number: 144E
Signing time: Wed 25 Mar 2026 23:00:49 +0000
Manifest this update: Wed 25 Mar 2026 23:00:49 +0000
Manifest next update: Thu 26 Mar 2026 23:00:49 +0000
Files and hashes: 1: 3XADLdEbS1FY6n6yUx5o7fgS4pU.roa (hash: sJxb+ZizUKA1xitVNheZoX8adqgMHbTrnaDCSefof/w=)
2: zuTBXIcH3739qDvjppPDWUfxbVk.crl (hash: g72cq4f+W55iM3MhvJZ8z9UWcwFt/i0OCC75F/v4nP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ac:47:f9:76:e5:fd:d9:ed:8e:13:1d:03:06:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cee4c15c8707dfbdfda83be3a693c35947f16d59
Validity
Not Before: Mar 25 23:00:49 2026 GMT
Not After : Mar 26 23:00:49 2026 GMT
Subject: CN=0deaf6979f75a01b7e366d9df8287f3d944401c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e6:9e:19:79:cd:90:de:f0:e1:81:e5:ce:c1:
91:5a:0b:68:a9:7f:b5:bd:46:bc:95:44:60:25:6f:
e3:da:bc:b4:86:b4:ef:d5:10:6d:ca:0a:0b:f0:77:
8d:f5:de:a1:29:16:dd:3f:70:7f:15:c0:6d:de:81:
ce:df:55:99:23:91:48:93:8e:02:d6:05:37:c9:fd:
03:cb:90:f8:06:08:1e:74:20:c0:d8:bd:13:55:7a:
33:f0:2b:c7:42:d5:9a:d4:3b:64:10:b1:c2:88:26:
5f:fd:9a:42:ea:ef:55:cb:bc:46:d2:fe:21:c1:be:
34:cb:89:8d:25:01:38:60:cd:fb:8a:30:b7:79:db:
be:ba:f4:43:31:73:c7:fd:3c:af:68:da:d1:99:41:
83:dc:ce:22:8d:3a:9d:e4:9f:4f:56:f7:ef:9e:dd:
13:02:82:e6:a5:15:8b:7d:b6:cb:e9:e9:3c:ce:7a:
81:01:76:9b:19:0c:ce:08:31:e6:6c:35:ee:95:76:
6d:3f:be:21:6f:23:0b:59:d2:86:15:16:9b:e3:38:
29:60:7e:e3:94:d2:c1:5c:62:90:7b:11:83:0f:00:
c0:86:69:fd:20:91:24:cc:a2:2f:6c:94:dd:10:20:
56:b7:e6:9b:51:2e:0a:3f:da:59:8a:ab:36:44:36:
76:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EA:F6:97:9F:75:A0:1B:7E:36:6D:9D:F8:28:7F:3D:94:44:01:C1
X509v3 Authority Key Identifier:
keyid:CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c2:b2:dd:d3:95:5e:44:ef:06:23:2a:bd:27:39:ac:b8:18:
0b:2c:54:6c:00:2e:2d:8b:d8:a7:14:6f:75:89:ed:91:97:c5:
9e:67:9f:2b:19:ed:f6:cb:37:a5:73:fc:93:dd:cb:a8:d2:94:
74:7c:89:50:b3:3d:8d:2d:76:80:5a:20:4a:fb:98:03:d2:65:
17:b8:f5:b3:89:11:70:29:f9:55:cb:4d:cc:87:7c:44:96:f2:
0a:40:52:8a:5c:4c:63:86:f7:32:55:c2:b9:5f:58:f1:60:b9:
a7:ca:15:a8:80:7b:f4:49:90:ed:09:8d:5d:f6:d9:ca:ac:a5:
ad:75:e5:a5:48:54:6f:b5:59:ab:bf:e9:c7:c0:7a:1c:e9:4c:
cc:21:f5:18:e2:40:68:63:12:a6:c8:cb:81:26:39:e1:2d:85:
91:68:55:ea:ca:40:1e:14:c0:c4:57:c3:88:d5:5c:06:7b:4b:
b9:14:a5:73:31:e6:54:84:8d:77:36:a8:10:5a:5e:b6:f4:9b:
6a:69:07:8c:53:f4:6f:9f:c0:58:26:93:37:cc:c0:24:f9:58:
dd:91:83:54:1d:ba:f8:fe:bc:76:56:30:0b:19:f8:29:3d:df:
7f:a4:b6:05:7f:8d:ba:b8:5c:49:d4:12:97:d6:ab:1b:28:81:
76:cb:4a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:50:59 2026 by rpki-client