Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
File: zIHVTcD9FqySU0uaeA4mdksvj3s.mft (raw, json)
Hash identifier: dkLxeV8aQ1bFgkDsRTc8QLlkiu2PASAq9C5qNEnBNbI=
Subject key identifier: C9:D4:6C:8F:BC:35:6B:68:C8:B5:D9:69:36:A9:27:19:7E:98:2B:EF
Authority key identifier: CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
Certificate issuer: /CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Certificate serial: 019D27049F6C48C5428575A60634B40DE46E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
Manifest number: 1282
Signing time: Wed 25 Mar 2026 22:01:47 +0000
Manifest this update: Wed 25 Mar 2026 22:01:47 +0000
Manifest next update: Thu 26 Mar 2026 22:01:47 +0000
Files and hashes: 1: bvZFPCvF4Igp5im9CQi4MSj0eOc.roa (hash: SLYZCRjXEHo6LL4IR+75+DXz52FJqPAYvzqcrr6DgqE=)
2: zIHVTcD9FqySU0uaeA4mdksvj3s.crl (hash: +zbMb+gD9ZTTmJji0jvVTPL7oAkZOQahcdsAePg4ro8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:9f:6c:48:c5:42:85:75:a6:06:34:b4:0d:e4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Validity
Not Before: Mar 25 22:01:47 2026 GMT
Not After : Mar 26 22:01:47 2026 GMT
Subject: CN=c9d46c8fbc356b68c8b5d96936a927197e982bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4a:b0:f3:e4:2e:1b:d5:e9:99:a6:1a:c1:43:
99:9c:f6:85:d9:8f:a0:f6:b1:51:85:3b:1a:dc:56:
c5:96:36:31:0d:11:7e:83:78:7a:0c:b2:ab:6e:fe:
fe:05:ab:18:1f:9e:4a:cd:0f:8f:08:05:c6:de:c8:
43:b9:85:91:08:89:92:be:2f:ab:76:7a:01:bc:7d:
22:e9:de:c2:9a:0d:b4:0f:70:a7:87:71:f9:6b:ad:
ec:80:57:e1:71:5f:06:61:4a:f8:89:2f:4a:f6:66:
e6:84:6b:4c:88:f8:8d:94:21:7c:11:c9:65:4f:a2:
f5:75:7f:a0:fa:a1:a1:72:78:95:79:28:d6:13:a6:
36:60:8e:c4:e3:bd:ec:e5:fc:29:a5:1f:9d:87:c5:
ea:ad:69:88:da:5d:f3:da:96:1b:d9:1f:8c:e1:83:
32:bf:29:9d:65:1d:65:ef:43:32:cd:bd:27:cc:71:
cb:38:a6:c3:0d:43:70:78:92:d4:a7:d9:a3:7c:dc:
52:b5:a9:c9:8f:63:89:7d:54:01:00:fc:ca:bd:9f:
3c:22:5b:0a:6b:8b:43:22:64:de:a9:42:3f:33:99:
db:1d:5a:27:5a:ff:31:e5:0d:04:ed:f9:fb:3f:b1:
4a:22:f1:22:4c:4e:0f:7c:47:e5:a7:9f:ee:79:19:
c3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D4:6C:8F:BC:35:6B:68:C8:B5:D9:69:36:A9:27:19:7E:98:2B:EF
X509v3 Authority Key Identifier:
keyid:CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:af:b5:8b:c2:1d:07:d0:e1:df:22:66:01:79:fd:1c:f4:e8:
98:97:4f:40:8e:80:7c:f4:f0:ba:9b:e8:19:e1:02:d4:f7:ed:
fb:91:29:87:a4:25:52:9d:df:15:cb:63:b8:93:5c:11:3a:ec:
b7:70:a0:df:44:d0:ff:d4:6d:a1:4c:97:63:5f:ee:04:c1:25:
c5:96:55:c7:04:ea:95:3b:34:5b:24:0a:2c:22:c5:71:3f:d8:
59:f9:6c:b9:d9:54:43:c2:17:91:23:0c:79:82:63:90:0d:6e:
25:c8:35:32:ec:e0:70:e8:e5:cf:19:b1:b9:66:47:72:ff:da:
41:1e:de:ea:00:24:c6:c3:4d:c2:b2:d7:2f:38:13:01:b7:ca:
ed:ec:d6:c7:2c:be:07:e0:d8:d3:0b:26:cd:20:17:f0:45:08:
a7:fb:6f:6c:3a:19:d4:28:26:de:0a:e8:80:d6:46:d4:bc:fc:
80:f5:01:66:85:4e:ec:2e:e2:ef:c2:f1:09:1e:c2:d8:52:ee:
21:ca:05:d6:42:93:ab:f9:4d:d0:3f:23:3f:20:31:2c:0b:db:
4d:94:59:f9:36:5a:de:c4:14:b4:72:29:36:ab:2e:34:ba:33:
a7:0a:2e:eb:84:0e:ad:7a:96:0c:fa:2a:c8:9a:78:f8:bb:71:
cf:7d:05:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:15 2026 by rpki-client