Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
File: ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft (raw, json)
Hash identifier: +YnEX3UD8uU/ubYrPw3PiM51LJYY5wSPSRe29nxWY1c=
Subject key identifier: 8A:07:83:4E:20:68:B6:34:CD:C3:30:B8:FD:AC:4F:BF:E9:62:AE:97
Authority key identifier: 66:94:F5:B0:FA:B5:FE:D2:DF:95:35:E2:A9:C0:29:F1:87:D5:54:04
Certificate issuer: /CN=6694f5b0fab5fed2df9535e2a9c029f187d55404
Certificate serial: 019D28BB7E0ED870B792D41DC54BC21A26D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
Manifest number: 09A7
Signing time: Thu 26 Mar 2026 06:01:09 +0000
Manifest this update: Thu 26 Mar 2026 06:01:09 +0000
Manifest next update: Fri 27 Mar 2026 06:01:09 +0000
Files and hashes: 1: PKBAlxhxjbQl3V5bDnuBzljib9Q.roa (hash: eWzoIIDioxxQX7PyiTO6rBCtAXhu7H8TtLvFoqesiBg=)
2: ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl (hash: lt+WB1blOyNFW2WDbl7duxhp+Vi/vkvZobZWCO05cVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:7e:0e:d8:70:b7:92:d4:1d:c5:4b:c2:1a:26:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6694f5b0fab5fed2df9535e2a9c029f187d55404
Validity
Not Before: Mar 26 06:01:09 2026 GMT
Not After : Mar 27 06:01:09 2026 GMT
Subject: CN=8a07834e2068b634cdc330b8fdac4fbfe962ae97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:27:59:35:cd:f6:0f:1c:ba:fb:ef:c4:cc:e7:
a3:2d:5d:d3:93:a2:52:a6:6e:dc:e4:97:b0:9e:a6:
80:1e:7b:28:13:37:b1:0c:38:9f:ca:10:ff:89:57:
f8:2d:8b:64:68:7e:92:bf:c0:02:93:45:14:e6:bb:
30:95:76:81:9e:4f:32:12:0e:0a:00:45:7a:d6:07:
6c:0e:1f:c9:d6:13:8a:19:8f:37:f0:45:40:f4:af:
48:f6:b8:36:d0:4a:e5:4c:73:d3:18:0a:29:4c:99:
c2:56:71:1e:76:38:9c:2b:cf:b9:e2:d4:9b:c7:70:
85:06:01:5f:0c:28:f6:50:2e:c3:4b:3e:ec:bb:6f:
f8:7c:e9:30:4e:2a:9e:56:c4:9e:91:61:c4:e5:89:
eb:e5:cd:e3:a8:b5:26:4a:ec:c0:f6:23:1c:2e:d4:
89:1d:f5:d2:4f:38:b2:7e:1f:18:36:c5:bf:fc:ac:
98:64:2d:e2:bb:28:97:a1:79:b9:c8:5f:91:42:ac:
08:94:bd:c9:8d:bc:45:ef:a8:73:01:6a:6f:b8:fc:
a4:b3:fa:99:28:24:12:b7:9c:24:cc:60:c2:c1:5b:
cb:1e:82:17:30:6a:25:91:78:42:49:35:e8:8a:2b:
2f:c2:3e:ab:bc:b6:c6:6a:2a:f3:31:cf:25:e1:c3:
a5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:07:83:4E:20:68:B6:34:CD:C3:30:B8:FD:AC:4F:BF:E9:62:AE:97
X509v3 Authority Key Identifier:
keyid:66:94:F5:B0:FA:B5:FE:D2:DF:95:35:E2:A9:C0:29:F1:87:D5:54:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:4b:ae:22:0b:6d:04:b1:71:3f:09:33:a2:50:01:15:e7:1c:
b0:d2:32:cc:13:b9:30:50:e3:9d:d8:9c:b1:73:6f:e2:17:63:
6a:2d:38:e1:44:b9:36:55:2c:5a:74:f6:94:7a:23:23:d4:aa:
f0:6b:7c:00:92:b0:cb:73:99:46:a5:d0:e4:7d:96:fb:bc:c5:
a7:0d:11:a3:b9:6e:1f:2c:54:c8:32:3f:5a:b9:cb:51:62:b3:
5a:73:11:13:2b:84:98:f7:47:f1:94:79:c1:56:61:37:bc:cd:
99:72:5c:cc:c4:b8:d4:8f:b3:56:68:24:a5:1a:de:a9:a6:61:
56:98:38:f1:33:2a:f4:4a:ad:d3:b8:6b:d5:5e:70:be:b5:a8:
d3:e1:f6:f3:4b:43:5e:50:b1:d7:72:85:79:ff:d3:08:51:e7:
d8:64:e9:84:c4:e7:0c:84:fd:46:b0:50:69:9f:6c:bc:11:da:
83:16:2a:38:23:df:b5:68:6e:e4:bb:97:95:63:ea:a8:51:0b:
a0:f3:a3:64:13:91:d1:37:5a:bf:81:72:b6:6e:64:14:8d:05:
17:8f:e3:74:d8:c0:8c:11:ce:17:24:8b:13:7c:3d:72:f5:2f:
4c:28:a4:ea:7f:78:7e:d4:d9:9d:9b:c9:f3:3e:b3:df:d1:e4:
07:65:34:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:18 2026 by rpki-client