Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
File: ZJn3HhXA84zrolfTAwTtRL6ofFA.mft (raw, json)
Hash identifier: uWV8NbQO11NJlR3pI8WHaegWy6sWq/cAXQNnuKAdBFQ=
Subject key identifier: 75:BB:E3:32:01:AB:AE:6E:23:F9:F5:16:84:5D:F5:96:B1:F3:2A:7B
Authority key identifier: 64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
Certificate issuer: /CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Certificate serial: 019D2628537009C01BF696CA0A9CEAB4D5E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 18:01:10 +0000
Manifest this update: Wed 25 Mar 2026 18:01:10 +0000
Manifest next update: Thu 26 Mar 2026 18:01:10 +0000
Files and hashes: 1: ZJn3HhXA84zrolfTAwTtRL6ofFA.crl (hash: JxillYpcNVzO419B1KasarVrBn0+pjDcKkUsWq6QoBk=)
2: jq3mq-50R-JOu-sxSGPaEm55e08.roa (hash: taGtXrf0l3O9eeA97Wyzm9CoWyPxNXpqgCP99+lV8Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:53:70:09:c0:1b:f6:96:ca:0a:9c:ea:b4:d5:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Validity
Not Before: Mar 25 18:01:10 2026 GMT
Not After : Mar 26 18:01:10 2026 GMT
Subject: CN=75bbe33201abae6e23f9f516845df596b1f32a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:da:c4:ec:1f:dd:28:83:14:61:e4:7b:57:8c:
b0:7c:9e:1f:37:4d:29:36:04:89:20:6e:61:f6:44:
8f:16:9a:20:fd:63:fa:5f:4e:81:43:11:7b:dc:c3:
83:1f:a5:63:3c:48:37:a2:96:0d:d4:dc:a6:9c:4e:
6c:e3:75:c4:60:4f:e7:5f:11:7f:69:2b:81:81:57:
de:43:f7:39:1d:f4:95:d6:ca:7e:d3:e4:e1:b2:cf:
bc:e1:17:a8:bf:35:7d:1d:af:cf:e6:b4:c2:e6:5b:
e9:75:26:28:18:75:19:17:06:74:7b:89:6a:da:89:
94:3c:aa:95:28:d4:26:35:f2:62:6c:e5:00:22:e5:
79:8a:97:d3:ab:c2:95:56:9c:1a:bb:35:80:05:1a:
64:40:70:96:19:a2:0d:63:94:d5:bd:2a:5e:c0:5e:
d0:b0:83:f4:e0:8f:c4:83:e7:1e:79:0b:dd:dd:e1:
99:df:3c:45:ad:21:96:9e:e2:d6:a0:c8:ff:88:4d:
55:0e:39:3d:da:97:2c:4e:f2:e4:70:78:20:07:c8:
91:d7:26:c4:cb:bd:92:d5:d2:69:df:c3:57:5a:50:
cf:71:c4:9a:9e:30:fd:67:c7:71:eb:3e:d6:db:e5:
c5:f4:6e:9b:82:93:45:49:59:e1:4a:0b:30:71:31:
d0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BB:E3:32:01:AB:AE:6E:23:F9:F5:16:84:5D:F5:96:B1:F3:2A:7B
X509v3 Authority Key Identifier:
keyid:64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:78:2c:88:b3:b9:6d:cc:cb:b5:44:da:53:60:da:5c:42:d2:
04:d7:d6:df:3c:77:2e:ff:5f:48:90:bc:6a:b6:95:e7:7a:50:
b8:74:af:cc:a2:e9:a5:4d:bc:70:bd:bd:30:68:4f:76:ff:d8:
bd:bd:00:da:2c:00:68:94:71:09:ed:8f:9a:3d:71:3d:d9:39:
06:e9:90:68:2e:e1:af:b1:0f:10:3c:75:5f:f5:f4:07:f6:19:
8a:5a:75:07:a8:50:a2:2b:06:99:c4:f6:75:c2:d0:19:2e:b2:
2f:06:55:f8:4d:e6:92:b3:e4:34:07:03:d4:9f:4c:36:da:35:
bc:69:78:0b:ac:b4:43:a3:eb:4f:83:c4:b9:ce:5b:fb:a5:1e:
9c:03:b2:cb:14:1e:d1:ae:99:1c:e2:9a:b5:5d:94:0c:68:76:
8e:a8:75:10:c4:7a:b4:87:a6:6b:2e:2c:91:a8:bb:4a:a9:94:
3a:c9:4d:15:e5:fd:52:bd:29:fd:71:35:53:a1:b1:57:10:d0:
b5:91:6b:06:74:5f:83:cf:fe:04:a8:71:1f:c9:68:0b:34:57:
31:40:30:79:ae:dc:bf:15:b9:c5:dd:cb:6d:8c:36:ca:39:6e:
81:e3:88:75:ff:da:f9:d4:f6:f0:29:d7:47:d4:b8:65:97:db:
34:ab:1c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:58:06 2026 by rpki-client