Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
File: Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft (raw, json)
Hash identifier: vJ62NBgm8hiDPTq695VI8UEA1d2LwN98OuEnc1MctIU=
Subject key identifier: C8:AF:C0:4E:C5:3C:2F:B5:44:C1:CF:65:A0:CD:E0:08:B4:71:1A:EB
Authority key identifier: 66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30
Certificate issuer: /CN=66ec789976d3b584016cac19f34bbede966cd230
Certificate serial: 019D28BB8185CC08F246D873CFF196BE1258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:01:10 +0000
Manifest this update: Thu 26 Mar 2026 06:01:10 +0000
Manifest next update: Fri 27 Mar 2026 06:01:10 +0000
Files and hashes: 1: 1-bvTtCyxjhCFLcxNhXPNFp9zd4.roa (hash: UqrazJGk86AULwhwwPwABEyPtaaQCEyqIBdZnP4+jJA=)
2: Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl (hash: K1tXmL9xAf/+Hnw3Mg8fG/AkXKfWr0NCF9ro0JWk8eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:81:85:cc:08:f2:46:d8:73:cf:f1:96:be:12:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ec789976d3b584016cac19f34bbede966cd230
Validity
Not Before: Mar 26 06:01:10 2026 GMT
Not After : Mar 27 06:01:10 2026 GMT
Subject: CN=c8afc04ec53c2fb544c1cf65a0cde008b4711aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7b:50:7b:de:ca:69:b5:11:70:1b:e7:da:5e:
56:2e:0c:fb:f7:bd:fc:79:62:a4:2b:1c:42:63:fe:
8d:f1:fe:fd:cd:47:14:69:84:69:e5:2a:ff:5f:17:
d4:36:55:78:e5:25:f0:b0:6e:09:30:f4:a2:0a:f2:
1c:12:d5:80:9f:37:63:af:d6:6e:40:be:67:a7:9f:
8d:e5:14:4c:ce:d4:14:9c:1b:de:38:d6:44:d4:16:
ee:10:5c:72:8b:e3:5d:27:c7:ba:ee:d9:09:2e:7c:
99:b3:7a:88:d5:c7:ce:9e:48:37:f7:bc:3f:e7:6f:
9b:ea:e7:c4:14:f6:82:f0:59:93:37:6d:f0:f7:c9:
12:a6:e5:b4:ab:55:5e:ac:5d:10:0d:31:5a:1f:80:
42:38:7c:60:02:e0:c0:6e:66:48:0f:af:9c:91:fa:
6d:c0:37:43:8f:36:f7:6f:e5:b5:a5:d2:1e:a4:dd:
d6:0f:c6:80:1d:5f:90:1f:fa:e6:fd:a8:04:1e:8d:
71:70:bf:44:70:51:8b:16:4a:85:43:85:88:f0:a2:
23:8b:80:6e:dc:bd:21:00:48:c5:9b:4c:34:76:ab:
88:59:41:3f:ee:0a:03:5f:07:ad:30:35:d0:8f:fe:
7c:c7:bf:02:68:de:35:f9:2d:97:c1:99:c0:4c:97:
a5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AF:C0:4E:C5:3C:2F:B5:44:C1:CF:65:A0:CD:E0:08:B4:71:1A:EB
X509v3 Authority Key Identifier:
keyid:66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f4:49:0e:71:e7:35:a2:5d:a3:65:f6:d7:0c:a1:dc:f7:08:
c7:8e:bd:ba:e8:05:86:ef:7b:a0:63:3a:12:10:f9:38:04:43:
6d:8e:c1:48:77:8a:b2:05:a0:e9:b5:2f:f2:ff:20:a2:c8:28:
57:58:ec:5c:c7:23:e1:8d:d1:65:c4:c2:c8:f7:42:7c:c2:4f:
33:70:b5:69:e0:86:ea:ec:e5:c4:35:8f:36:2a:aa:53:ab:bf:
7a:db:ac:c9:76:74:5d:5a:1b:51:8c:f4:54:1e:d8:a9:d8:cf:
f5:c5:1a:c7:1f:c8:f7:11:26:66:54:f1:4a:8b:42:f7:3d:ff:
27:a7:e4:1b:9b:55:22:71:b9:4e:10:ae:c7:cd:c5:75:d3:29:
be:03:41:06:ef:06:2c:4f:25:ee:77:82:08:0d:6a:a3:6c:2e:
e2:79:bd:94:b4:71:5d:11:31:34:7e:95:40:16:fb:69:33:5e:
11:8b:a2:5d:09:1c:43:6f:b0:2c:1e:55:09:22:dd:29:89:a9:
fc:ff:3f:25:cb:13:d8:aa:d6:85:7a:3d:cd:8f:24:f3:8b:13:
62:fe:d1:e8:d6:23:de:87:ff:a3:7c:9c:80:54:56:b7:91:c6:
a4:f7:c5:b2:a3:9c:fe:3a:fa:44:6a:e8:94:db:d9:1c:42:46:
9f:ed:e9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:02:40 2026 by rpki-client