Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
File: zRJC5sfr2Coj-hoI85br5as0z2s.mft (raw, json)
Hash identifier: GwNPgSpOl5TGM1LP6s/E2PtiwFLxCQfzDpdeEhGjLQU=
Subject key identifier: 25:31:17:70:7D:F0:55:3F:14:2B:53:EE:11:56:A6:E3:5B:C9:F0:65
Authority key identifier: CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
Certificate issuer: /CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Certificate serial: 019D2771EDAA38B2DE7BCE5E21C607DF6023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 00:01:10 +0000
Manifest this update: Thu 26 Mar 2026 00:01:10 +0000
Manifest next update: Fri 27 Mar 2026 00:01:10 +0000
Files and hashes: 1: nOWsqCuFuUl88d8fe68oh7ATL8Y.roa (hash: 3ZcPCRJToIBazA6ZM2eZ5k1Cl21KURsg9GhtHBDZCsw=)
2: vyrrFLAQmM4kpL-C4kzXL9B0pEk.roa (hash: uDR2ErZozryJ4og8nKltQlCSGLY9GDhP6CrAdfmEEk8=)
3: zRJC5sfr2Coj-hoI85br5as0z2s.crl (hash: jBY1SulQWNlKAxZXcC2IHp+eAEiakp241m3f3RQRgzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:ed:aa:38:b2:de:7b:ce:5e:21:c6:07:df:60:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Validity
Not Before: Mar 26 00:01:10 2026 GMT
Not After : Mar 27 00:01:10 2026 GMT
Subject: CN=253117707df0553f142b53ee1156a6e35bc9f065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:96:f8:8c:7f:5a:e0:4e:08:bb:bd:83:f2:2c:
85:19:2b:4b:56:2c:68:08:da:d3:22:3d:32:40:9a:
48:e5:5e:d6:a7:fd:a3:9c:d8:d5:c5:3b:fd:d9:f0:
9b:ad:88:2d:48:7e:97:7d:54:6d:6f:f5:96:47:6e:
17:1f:39:35:c5:10:cb:99:9d:40:65:72:6e:98:15:
cd:55:fe:82:17:1e:f3:57:7f:13:d3:69:5c:ed:c1:
44:58:45:c1:83:5a:0b:7f:b1:f3:a1:ca:fe:46:26:
38:cb:8d:3e:1b:e0:f1:a2:d1:f1:b2:96:f0:59:5a:
13:04:e5:9b:dd:91:f3:2b:a3:b2:b4:e2:86:49:14:
a0:a5:06:95:9e:c7:71:da:e5:a9:ac:02:56:1f:c7:
82:c0:2c:b3:3c:c3:f0:7e:c2:2a:60:b6:7c:a7:cf:
54:2d:a9:04:ae:76:e8:67:a7:e0:3e:1e:ef:4e:fa:
d1:aa:33:5e:3e:55:78:a8:29:8d:3e:8b:7a:c6:eb:
3c:3e:b3:96:0a:ab:1e:bb:0f:ef:14:0c:15:2b:21:
ce:6a:97:92:da:d0:ef:27:8f:1d:01:ff:bb:ca:35:
a2:37:4b:be:54:57:bd:2e:ee:70:c7:41:46:7c:ea:
5d:fc:7f:bc:a3:72:51:1a:ca:d4:d2:a8:6c:62:92:
e2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:31:17:70:7D:F0:55:3F:14:2B:53:EE:11:56:A6:E3:5B:C9:F0:65
X509v3 Authority Key Identifier:
keyid:CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:fc:8b:12:e7:aa:1a:45:6b:52:0f:61:25:6a:4a:a2:e3:7b:
4d:2a:55:91:00:82:b7:69:d2:e6:01:f8:72:52:b8:e1:f4:c2:
cc:e2:2b:2c:e3:47:7b:14:77:9b:68:34:73:91:b8:26:28:4d:
d3:56:90:0f:85:1a:2b:ed:d1:4e:9f:41:f8:55:12:94:f7:be:
23:59:5c:0a:a2:38:14:e3:91:a9:db:6f:0b:43:c3:b1:80:d9:
36:87:95:66:1d:5c:e4:c4:15:d6:ed:7f:a2:0c:0d:01:4d:e4:
57:f4:18:60:35:90:cb:1b:12:65:c7:02:c5:b4:c9:18:2d:a1:
ff:bb:80:80:a1:5b:c4:11:5a:e0:28:20:44:8b:cd:48:9d:80:
48:c6:95:2f:0a:9f:83:63:11:2f:32:e3:ef:43:89:19:48:cf:
89:45:e7:7e:fb:9d:d3:8b:95:65:9b:5d:35:74:a0:a5:f5:8c:
bc:47:33:1c:1f:e8:f6:67:0c:2b:df:8e:f6:60:61:26:0b:59:
4a:61:61:ab:f2:74:d9:2f:98:25:30:71:7b:79:17:79:73:0a:
24:31:ea:a2:53:2e:99:f0:9a:ef:30:fe:f7:7a:71:08:93:97:
c9:58:95:00:5b:40:bf:c5:e5:78:58:f6:4c:67:d7:42:03:e6:
42:ac:1f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:57:01 2026 by rpki-client