Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
File: zBlkheZzlI1VUF23UQ87lXfNOts.mft (raw, json)
Hash identifier: 8REvQQ/O48DcDf3Uw4ovWyKC3t0X9biwdreKtBrmMso=
Subject key identifier: E1:2D:9E:97:F5:B3:C0:10:87:D4:77:2E:7F:2C:48:12:00:CE:1A:DB
Authority key identifier: CC:19:64:85:E6:73:94:8D:55:50:5D:B7:51:0F:3B:95:77:CD:3A:DB
Certificate issuer: /CN=cc196485e673948d55505db7510f3b9577cd3adb
Certificate serial: 019D2704A1ABA199D461798E300082153293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
Manifest number: 03
Signing time: Wed 25 Mar 2026 22:01:48 +0000
Manifest this update: Wed 25 Mar 2026 22:01:48 +0000
Manifest next update: Thu 26 Mar 2026 22:01:48 +0000
Files and hashes: 1: X2BbHndtPwpXSs2sGEdVgFLq9BU.roa (hash: emzj289yDYGpibBHeVzv0i5u6U+HSsPi/OSfpVmeMAM=)
2: zBlkheZzlI1VUF23UQ87lXfNOts.crl (hash: UmlU9aQpPuB5R2Q9+U6eM3uX0aXY3mcq6x5r4WiZPFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:a1:ab:a1:99:d4:61:79:8e:30:00:82:15:32:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc196485e673948d55505db7510f3b9577cd3adb
Validity
Not Before: Mar 25 22:01:48 2026 GMT
Not After : Mar 26 22:01:48 2026 GMT
Subject: CN=e12d9e97f5b3c01087d4772e7f2c481200ce1adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6b:5c:d7:85:e4:f5:8e:14:70:4e:1d:e0:67:
7c:68:56:f3:75:08:f9:90:cc:02:99:e1:a0:51:ce:
bf:68:bb:c9:78:9c:f7:2d:1b:4b:90:98:0e:26:75:
ca:eb:8e:7a:05:96:c0:0f:12:31:96:46:91:eb:6e:
8d:73:1a:61:a2:48:c9:20:86:58:c1:5c:b6:23:34:
3b:0d:fc:cc:f4:78:39:ff:8d:39:68:1b:be:be:7d:
b2:d3:f3:38:fa:93:b7:80:05:5a:21:ac:f8:e4:a9:
84:83:0a:5e:51:4e:8d:c2:fa:cf:15:6c:a4:ac:df:
ac:4b:a5:32:f4:a9:c5:15:17:c6:28:cf:f6:d4:43:
8c:ec:39:b0:77:80:ca:29:3b:34:58:39:bc:40:81:
bd:12:7d:13:19:c4:18:2d:01:74:0c:3e:e9:2e:e1:
a0:c6:46:79:a9:b1:e0:00:77:a5:a7:83:fd:a1:12:
98:eb:00:1a:43:c1:86:64:d1:5b:f8:6a:68:55:37:
74:ae:6c:b2:a0:78:05:7c:5c:25:c8:df:4f:a6:56:
4a:f0:43:ad:fd:7e:70:1a:8b:5f:17:c6:f5:47:13:
ff:9f:b7:87:7e:3e:ec:8d:13:dd:b8:1c:bc:1b:86:
74:b5:ed:b4:09:27:f1:38:fb:c6:01:a1:5e:f5:10:
eb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2D:9E:97:F5:B3:C0:10:87:D4:77:2E:7F:2C:48:12:00:CE:1A:DB
X509v3 Authority Key Identifier:
keyid:CC:19:64:85:E6:73:94:8D:55:50:5D:B7:51:0F:3B:95:77:CD:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:64:2c:ba:9a:3e:23:ef:60:6a:03:54:25:1d:d2:da:07:80:
9d:90:89:8c:25:0f:e0:5d:88:bb:a4:19:44:22:6a:65:bc:71:
0d:2f:a6:8f:f3:b6:a5:11:52:d3:53:dd:2f:82:73:3e:2a:74:
49:3e:f1:34:0e:39:c8:67:e3:be:60:37:88:d7:43:04:a3:45:
d3:74:27:de:40:fe:ab:67:b9:c5:db:d4:4c:91:68:e7:42:3e:
7d:1a:2e:14:ce:e0:31:f2:d2:e9:4d:fa:38:1e:cc:24:f6:e4:
b5:c5:66:36:57:d0:e9:ff:2a:d1:bd:4b:ed:17:91:91:54:44:
34:ff:65:49:39:29:d2:4c:14:45:4b:c4:55:3d:d6:a4:5d:38:
56:de:f8:0f:9a:9d:91:b9:78:01:23:10:5a:42:6c:3d:78:85:
59:f4:ca:63:58:24:89:7e:74:8d:3c:ce:f5:c9:65:0f:30:ae:
27:0d:c5:c9:70:14:a5:f1:27:6e:bc:b1:ee:43:a6:e5:6d:18:
de:a6:84:44:6c:b8:31:9f:49:99:40:39:b2:6d:e1:a9:a1:5f:
b2:ae:8f:2a:4d:69:bc:91:c1:ef:96:e6:7c:a8:5e:aa:8c:ea:
69:64:5e:35:23:c7:1a:45:f6:96:21:8c:94:68:e0:15:61:99:
87:75:91:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:02:43 2026 by rpki-client