Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
File: z96Fu9R49ehC9MT42FIl0QDg9N8.mft (raw, json)
Hash identifier: /CeINdvJEJXligSNbZnXl7dL+0DJ3sxM/2ZEr2PGlns=
Subject key identifier: C1:E6:05:8A:A5:A1:A4:D4:F3:B2:B7:6F:0C:85:51:90:24:BE:82:C1
Authority key identifier: CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
Certificate issuer: /CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Certificate serial: 019D25F11C09CD43AC3898B789ED2108B2ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
Manifest number: 16A8
Signing time: Wed 25 Mar 2026 17:00:51 +0000
Manifest this update: Wed 25 Mar 2026 17:00:51 +0000
Manifest next update: Thu 26 Mar 2026 17:00:51 +0000
Files and hashes: 1: AYmY6bS1DW5wNX1gemsinMtxn4A.roa (hash: zRK2sb27i2HJzTqfMswAMQmmf/Cx/9L2B5J6Nm4MQxc=)
2: LmZL7NQJ3CA-ChgOtrMd32jvZBI.roa (hash: IeCaOVu0UoDFXz4huIJasKVw/iNCvSqG8pZqqp+jQ3I=)
3: cjZ33bD33v-eUIybd6UwPNRRpoQ.roa (hash: FLqtX2+FQiCXJcMBU06mRmURivJmg3QovEfaA3JnsmE=)
4: z96Fu9R49ehC9MT42FIl0QDg9N8.crl (hash: ZAcasG0JB4WBLstxYgO9fl0rhBbg6ZYLExbXMHTC46c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:1c:09:cd:43:ac:38:98:b7:89:ed:21:08:b2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Validity
Not Before: Mar 25 17:00:51 2026 GMT
Not After : Mar 26 17:00:51 2026 GMT
Subject: CN=c1e6058aa5a1a4d4f3b2b76f0c85519024be82c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:af:86:c6:b7:7f:a0:1e:e3:38:0d:55:26:9f:
c2:b0:6b:97:19:10:1b:5d:a8:1f:bc:de:e4:a9:e7:
73:5e:19:ae:f6:c9:c4:e6:76:89:79:80:e1:b6:49:
fc:78:e7:60:f1:6c:44:8a:ec:d2:ce:5c:d2:31:60:
7a:09:40:ef:44:40:f7:21:ee:06:b1:cc:53:ac:93:
36:ee:f3:fe:05:d9:a4:2f:c0:03:18:29:6f:1a:f9:
0f:cb:bc:be:57:44:97:ee:04:1d:30:4b:c0:00:d8:
04:73:c7:ab:7a:6e:67:ca:4b:10:3a:c6:9a:7b:b5:
04:d9:aa:34:55:24:f5:0e:5b:cd:e0:24:0a:79:72:
16:41:69:46:1a:52:33:d4:7b:2a:70:72:cf:d5:db:
31:31:82:c6:1b:b8:8a:93:f8:b3:02:80:d7:38:0c:
cb:f3:43:ed:ed:a7:ab:af:f8:0d:49:d5:fb:f1:30:
9e:ca:d4:3e:bc:f2:46:1f:1f:ec:a5:cc:44:28:43:
33:39:69:d1:a8:1f:a6:92:99:ab:76:7f:3c:71:02:
35:e1:c4:ac:ea:bd:f6:10:18:8c:16:63:d0:2d:55:
3a:e9:de:d4:95:9c:39:0d:b8:fe:64:c1:4b:9d:7a:
d8:ba:12:bd:7f:a7:6d:68:a2:48:c3:4d:dd:d1:4a:
5a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E6:05:8A:A5:A1:A4:D4:F3:B2:B7:6F:0C:85:51:90:24:BE:82:C1
X509v3 Authority Key Identifier:
keyid:CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:8f:d6:9a:39:cf:ad:5b:d2:c4:ef:f3:c5:f6:d1:42:95:13:
de:e9:6a:cf:22:b9:3e:d1:e1:85:f9:c5:78:18:41:85:b2:c8:
35:55:cc:4c:34:09:e4:7c:43:35:97:f1:42:dc:13:2d:d1:ae:
58:34:2d:2f:c0:94:d8:98:74:e4:58:d6:5c:c1:a6:e2:c5:f4:
21:85:2b:73:1a:af:b0:79:16:f2:0b:3b:01:b3:74:4d:5e:cf:
b5:9d:0a:2e:75:66:d7:39:73:3a:38:8c:26:14:77:a1:53:f3:
31:f9:ec:90:3e:34:4f:8f:f2:12:eb:e1:f8:2d:db:77:e2:88:
79:8f:05:b7:09:3d:ef:75:1d:3d:2f:47:51:dd:f9:80:06:3a:
97:2c:1f:5e:0c:be:d8:7f:5d:d2:43:38:f2:ca:3d:d3:a1:41:
7e:f8:df:30:39:2a:e8:4e:10:a5:a9:74:e0:1a:49:ce:ca:9a:
4d:10:80:b0:4a:75:d1:c7:39:20:a0:34:16:40:9f:c5:4e:1c:
09:fe:9d:fa:87:64:a6:fb:40:8b:26:92:9e:59:a7:18:33:cb:
56:e0:94:fa:af:a6:c3:5f:94:9b:93:6b:03:b3:d4:52:fe:e2:
57:48:5c:6b:3b:ae:a2:13:fc:bb:5f:7b:a9:0b:5e:0a:eb:c0:
ef:8b:a4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:47:10 2026 by rpki-client