Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
File: zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft (raw, json)
Hash identifier: v6CUekEGZkoxwvQLMoYy/1Lt08gd39TYKOCOmgkzKno=
Subject key identifier: CD:B8:2B:A1:CE:CF:87:71:BB:CB:D4:EC:25:68:1B:8A:C8:81:95:50
Authority key identifier: CE:10:10:13:88:B7:CE:37:87:07:99:3A:05:76:AA:3D:DD:95:A9:79
Certificate issuer: /CN=ce10101388b7ce378707993a0576aa3ddd95a979
Certificate serial: 019D25BA7A84159ED0CA4BD7520F4D46732F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhAQE4i3zjeHB5k6BXaqPd2VqXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
Manifest number: 25
Signing time: Wed 25 Mar 2026 16:01:11 +0000
Manifest this update: Wed 25 Mar 2026 16:01:11 +0000
Manifest next update: Thu 26 Mar 2026 16:01:11 +0000
Files and hashes: 1: i9y06XpGQ7gr-mdfp0S7uUFwlS4.roa (hash: /g2Zo7QZ+s2u4dfNouu8ACPFZIuHW58Outw73PTsBo0=)
2: zhAQE4i3zjeHB5k6BXaqPd2VqXk.crl (hash: jscXPTJImsTRJoSiAyyVb1hDnoDGphmmSzsPp3/y9pM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhAQE4i3zjeHB5k6BXaqPd2VqXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:7a:84:15:9e:d0:ca:4b:d7:52:0f:4d:46:73:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce10101388b7ce378707993a0576aa3ddd95a979
Validity
Not Before: Mar 25 16:01:11 2026 GMT
Not After : Mar 26 16:01:11 2026 GMT
Subject: CN=cdb82ba1cecf8771bbcbd4ec25681b8ac8819550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:74:c6:6a:e6:0b:c3:7f:9c:24:ed:87:65:2d:
15:4d:85:2c:80:c1:cd:75:2c:3a:e8:93:b5:47:2a:
98:e7:a2:14:82:3c:d6:bc:b6:81:6b:74:72:f0:32:
1c:14:97:76:5d:23:37:73:72:47:1e:65:49:35:56:
84:68:91:1f:77:0f:76:ba:b9:ce:4c:5e:46:2c:b5:
77:54:7e:0a:32:0a:23:da:d1:ac:6b:f4:71:a3:93:
e2:b0:7e:ce:f3:a1:b8:ad:ae:3c:6e:4f:98:1e:bd:
a4:d1:d0:17:16:95:e7:b7:a7:af:4e:7f:f0:b1:4f:
c0:a6:c5:61:68:cd:3f:9b:42:a9:06:77:3a:8f:8c:
ee:ec:89:61:bf:65:8b:50:c0:ae:a2:d0:24:ec:6b:
33:4e:1a:3f:c5:4a:50:36:a5:70:2a:b6:e5:e0:57:
36:5a:fe:0c:d7:19:08:f9:4a:6d:f7:05:95:38:9d:
ef:d0:84:a1:a8:be:1a:a9:47:ff:82:03:27:24:1a:
cd:78:8f:92:fa:dc:2c:cd:dd:c4:ff:f1:e6:66:28:
58:67:8f:2e:82:44:69:fe:79:e2:2e:ba:b8:39:d6:
db:ea:38:bf:33:47:17:76:ac:09:8c:f1:d3:1f:95:
b5:3d:ab:e1:d1:ec:32:15:98:0b:b2:d2:db:5c:89:
2c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B8:2B:A1:CE:CF:87:71:BB:CB:D4:EC:25:68:1B:8A:C8:81:95:50
X509v3 Authority Key Identifier:
keyid:CE:10:10:13:88:B7:CE:37:87:07:99:3A:05:76:AA:3D:DD:95:A9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhAQE4i3zjeHB5k6BXaqPd2VqXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:28:97:7f:2b:a8:9a:4a:6e:60:f9:4c:7a:64:08:22:10:c0:
d1:89:1e:5f:e9:83:47:d8:30:ab:c4:f8:5e:b4:82:36:ab:d4:
15:77:8e:44:41:0d:e5:04:11:a3:e6:fb:57:ff:ed:8e:54:63:
73:5d:74:a2:b1:a6:0d:10:9d:c8:76:c5:12:22:0f:d6:9d:e0:
95:6b:cf:55:f6:77:37:38:81:4f:85:99:85:b2:18:f1:91:3d:
da:1e:a6:38:ed:83:0f:56:a7:d9:94:bc:82:a0:ac:82:76:69:
46:54:66:f3:aa:23:dd:a0:57:f6:be:e7:0b:7b:3f:5c:a6:1c:
c1:c1:ec:f3:37:25:4f:1f:9d:49:33:e9:02:9b:fe:a9:4e:a7:
bd:e5:6a:d2:ee:21:69:f6:27:5e:4a:5a:27:1a:02:35:a6:af:
6e:c1:7f:68:39:fb:03:46:6f:78:d0:15:a9:5d:37:17:39:a2:
44:4e:21:7e:35:5a:38:19:d0:1b:4e:ce:d6:00:a9:33:d4:2e:
07:45:b2:21:84:5c:02:a8:b7:63:95:fc:b6:5d:c8:82:13:a3:
ff:54:e4:50:ff:59:d7:cf:7b:72:aa:1e:ec:83:91:dc:cd:a4:
6a:f7:7f:fa:c8:34:bd:b8:67:59:f6:0a:2f:b6:52:e7:cb:c1:
19:be:fb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:24 2026 by rpki-client