Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
File: ZRUuTmwkXAP-zfpIv5E5bL7-168.mft (raw, json)
Hash identifier: kSE8iAJP5eeKxLeOpeZHSANK1joJl0CZMDUOEqS/g4A=
Subject key identifier: 22:D2:31:AB:DB:00:C8:9C:68:97:4B:1C:BA:95:A0:46:AA:40:A0:24
Authority key identifier: 65:15:2E:4E:6C:24:5C:03:FE:CD:FA:48:BF:91:39:6C:BE:FE:D7:AF
Certificate issuer: /CN=65152e4e6c245c03fecdfa48bf91396cbefed7af
Certificate serial: 019D2A0512FB3677555C99E41B022951F924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
Manifest number: 52
Signing time: Thu 26 Mar 2026 12:01:08 +0000
Manifest this update: Thu 26 Mar 2026 12:01:08 +0000
Manifest next update: Fri 27 Mar 2026 12:01:08 +0000
Files and hashes: 1: ZRUuTmwkXAP-zfpIv5E5bL7-168.crl (hash: TEtK0ndi8v4bTLcZyh7dJmML3XZzOTGvnios7/aXmUY=)
2: zNqty2MMMtiYifN34tRpIOVX9sQ.roa (hash: yLB5f8Ek8IZkDyn4YFbsPyCUS3Yue+tSUM0kBMSr3B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:05:12:fb:36:77:55:5c:99:e4:1b:02:29:51:f9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65152e4e6c245c03fecdfa48bf91396cbefed7af
Validity
Not Before: Mar 26 12:01:08 2026 GMT
Not After : Mar 27 12:01:08 2026 GMT
Subject: CN=22d231abdb00c89c68974b1cba95a046aa40a024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:98:78:c6:c8:cc:23:63:52:e4:e1:ab:43:ba:
88:60:d2:6e:0b:59:49:39:4d:2c:1a:d5:2b:5f:bc:
1a:96:79:54:75:c7:b9:42:db:8b:87:c4:b4:a9:af:
d9:6d:42:08:85:99:97:e8:5b:b4:e9:3c:8a:71:ce:
e9:be:a2:4a:e1:c6:46:0f:18:73:bf:5b:f8:9e:65:
54:bf:15:f7:e8:49:ad:8c:f5:1f:7e:b8:f3:41:9b:
b5:9c:d7:5c:45:c6:2c:b3:e1:b4:7c:ca:d1:1a:98:
05:0c:5a:b5:60:94:bd:97:58:04:84:26:4e:8b:40:
2c:8b:45:ea:d5:04:19:3d:8d:fa:cf:8f:f8:56:a4:
36:e0:75:da:0c:5c:60:64:74:33:08:e6:a7:13:5c:
07:ab:34:e2:13:4b:a2:d8:01:14:eb:db:c4:77:82:
6f:3f:8d:2f:76:16:9c:ea:f7:d3:f6:58:07:f7:8c:
9a:b3:80:a4:15:2a:10:6c:81:37:fa:57:05:11:db:
f6:59:99:1f:53:34:02:b6:36:c7:05:8b:b9:de:f1:
1b:08:80:fa:70:31:2c:ca:b9:02:29:7f:8c:ac:4d:
5d:c4:9f:03:71:d7:43:96:be:a8:5e:05:8e:fe:d8:
f2:2d:1b:75:d2:9a:8b:77:d5:05:2e:0d:ac:34:7c:
ac:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D2:31:AB:DB:00:C8:9C:68:97:4B:1C:BA:95:A0:46:AA:40:A0:24
X509v3 Authority Key Identifier:
keyid:65:15:2E:4E:6C:24:5C:03:FE:CD:FA:48:BF:91:39:6C:BE:FE:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9e:cc:e1:41:db:ea:50:3d:de:92:33:2d:96:a9:6c:9b:88:
b7:04:e6:b9:c6:c0:c4:c6:55:24:03:e6:de:82:d5:db:6f:e0:
c8:d6:46:bc:2c:f1:68:33:60:b0:3f:e4:f2:ee:8d:04:78:19:
4b:9e:b2:17:d2:b5:6c:94:a4:1b:5d:a4:51:55:3d:c5:42:b9:
4c:a4:01:92:68:a1:f6:30:76:ce:25:80:e1:2f:7b:fe:fa:5b:
d7:bd:ca:ea:cb:67:a5:30:28:3f:e4:62:8b:63:60:9b:80:16:
6f:0b:71:a2:e2:f2:da:d7:9c:8c:a9:07:f2:94:c3:8a:33:25:
28:eb:4d:dd:fb:ca:82:0b:1e:5a:23:8e:61:4d:b3:41:d9:af:
2b:44:d6:86:95:43:38:68:46:b6:aa:b3:3d:90:17:30:0a:ab:
1e:c5:05:a8:a9:4d:54:a7:f4:ea:29:e8:8e:76:fb:5e:c6:49:
44:25:a2:1d:68:cf:b0:ef:bf:4c:20:7d:28:5c:0d:17:9d:46:
74:b3:66:4e:77:01:d5:e4:70:e7:1b:4b:cb:c8:71:29:72:64:
50:22:37:6d:77:be:88:a9:fe:78:51:20:a0:79:1c:c2:27:69:
e2:7d:ad:49:21:61:fe:a1:9b:b8:c5:16:22:d2:1a:0e:de:a8:
0b:d9:3b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:11:57 2026 by rpki-client