Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
File: Zckgon4-U6Nn-eqW23uve9Zag-o.mft (raw, json)
Hash identifier: jlYumU20VuuAEtehGVBAqHDHrpwf5cnEmt0eqJrw1lY=
Subject key identifier: A0:DB:FE:00:69:3F:FD:B9:D5:6D:71:C5:2A:DD:93:C6:2E:E3:30:5A
Authority key identifier: 65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA
Certificate issuer: /CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
Certificate serial: 019D29CE13EAABDB9CD3E7A415523552CBB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
Manifest number: 142C
Signing time: Thu 26 Mar 2026 11:01:04 +0000
Manifest this update: Thu 26 Mar 2026 11:01:04 +0000
Manifest next update: Fri 27 Mar 2026 11:01:04 +0000
Files and hashes: 1: Zckgon4-U6Nn-eqW23uve9Zag-o.crl (hash: 5LeOVSNeHaYiQyJ6q1uS5pjmZE7W70rEqWfqh41n0k0=)
2: qvAyroJETTvqQMM_MVkdoGYncxA.roa (hash: nmTwuA7cbFKwFpXIGdTjihs7A1gDgSqO3ta9jqth4L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:13:ea:ab:db:9c:d3:e7:a4:15:52:35:52:cb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
Validity
Not Before: Mar 26 11:01:04 2026 GMT
Not After : Mar 27 11:01:04 2026 GMT
Subject: CN=a0dbfe00693ffdb9d56d71c52add93c62ee3305a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:07:b8:60:d1:4b:a2:b5:9e:90:44:b6:14:4a:
d0:50:4d:ba:f5:aa:61:e6:66:e1:f4:2a:c4:10:4d:
17:74:88:40:73:75:e3:d8:fc:8a:53:b8:6f:95:2f:
4f:c5:f0:0f:5a:dc:65:7e:a8:47:ca:b1:9f:56:4f:
ec:0e:d3:46:1c:f9:93:42:1d:66:76:77:8c:2b:a5:
88:0d:bb:68:d4:c7:6e:d6:6f:cc:81:61:04:fd:df:
71:70:4f:85:67:ee:0a:f8:c7:2a:9e:4b:d5:cc:68:
34:62:74:7d:36:cd:67:12:03:fa:f8:a2:36:ec:65:
b6:c1:5b:21:34:89:ef:97:5e:b7:6d:05:68:c5:63:
e9:2f:16:84:14:00:ee:7d:9b:d7:d2:c9:8b:6f:ff:
4c:ec:5d:49:b5:a8:15:e2:e5:66:07:26:bd:72:f4:
63:21:62:f2:49:91:36:5d:99:d0:11:5f:27:26:c2:
7f:66:4f:ce:15:2e:fb:be:a4:9f:f0:a3:e7:07:19:
f5:36:3e:fd:f2:14:59:71:a6:0b:b7:1e:7c:ec:91:
64:7a:58:53:52:4d:51:8b:c2:20:07:da:73:6b:9a:
26:38:b4:5b:90:02:fc:75:62:9c:e6:02:a2:b9:bb:
9a:de:da:a5:97:f3:65:11:20:ad:84:1c:54:c6:1f:
1c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DB:FE:00:69:3F:FD:B9:D5:6D:71:C5:2A:DD:93:C6:2E:E3:30:5A
X509v3 Authority Key Identifier:
keyid:65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:1e:e5:c0:94:ca:3e:ea:03:bf:ec:03:1c:07:0a:5a:fe:e5:
a6:61:f8:e2:5a:aa:88:0f:65:9f:5a:3b:dc:b0:fc:0b:35:b2:
e3:bd:3f:dd:5c:07:dd:46:cd:97:77:cd:0c:ac:36:da:a4:1f:
aa:18:00:62:2a:fa:5c:78:35:26:c4:93:5c:9a:cf:d8:98:b4:
96:da:62:13:02:38:69:20:06:d7:c6:01:1d:af:cb:72:db:ba:
32:ae:20:d6:e2:ac:19:c6:a6:c6:58:9a:21:3d:d9:55:81:4a:
7d:ac:49:a5:c0:53:2f:65:da:bf:02:58:85:3a:a4:ba:24:a9:
7e:c4:27:df:43:62:d6:0c:e6:b4:35:fa:dc:e3:94:97:f2:43:
e1:16:d0:c9:d2:34:ee:c8:7c:3c:ec:2e:cc:d7:53:43:79:b8:
4a:d6:38:e0:f1:c1:b6:4d:26:0e:3d:39:0f:58:12:ef:4e:20:
5e:86:81:fe:c7:01:53:34:bf:6f:e1:65:b5:46:21:ef:23:96:
67:1f:74:ef:00:b4:f0:65:25:8e:c0:30:d4:22:de:c4:dc:bd:
3e:ac:78:85:21:62:b1:37:d2:d8:2a:89:7d:f7:d4:dc:2f:30:
b4:42:6e:a0:78:e6:69:8f:64:e3:61:f8:db:65:9a:83:38:93:
72:1d:a0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:30:34 2026 by rpki-client