Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
File: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft (raw, json)
Hash identifier: kfPZp9H8cUqPsTJycRf6WD9AKlDtqdR1wQCpeBrMWwc=
Subject key identifier: 17:DF:29:12:8C:79:14:03:F1:42:BB:CA:CF:19:49:39:CD:9A:10:8B
Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
Certificate issuer: /CN=646579561eca5879a747025e5798487b19cd2a97
Certificate serial: 019D284D7A549720E4A642817E17029CFD69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 04:00:59 +0000
Manifest this update: Thu 26 Mar 2026 04:00:59 +0000
Manifest next update: Fri 27 Mar 2026 04:00:59 +0000
Files and hashes: 1: 1-ar0P82ef_StXuE7zueriWBD8hE.roa (hash: u9ZMHFdbfeEonEHEjHmh9TkFg76are6Y/T2IPG1BknM=)
2: HmIJXkixJ1rahF7EYYPCTla8Klc.roa (hash: gwb50AaVi0ThYCb3TRftn7wyLBQSCU21VtQTQhMGtAM=)
3: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl (hash: Rpi86uKt9yUGrK0j/TtSC3+nMpJHN2Jhb3WZSAvhE+k=)
4: g95v2zig0ZqaQU7eeusrbdTK5G0.roa (hash: cLTgf25tE2pedm+NWY4o5xvbCdWa6GTqSbkhECMQQmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:7a:54:97:20:e4:a6:42:81:7e:17:02:9c:fd:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=646579561eca5879a747025e5798487b19cd2a97
Validity
Not Before: Mar 26 04:00:59 2026 GMT
Not After : Mar 27 04:00:59 2026 GMT
Subject: CN=17df29128c791403f142bbcacf194939cd9a108b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a7:e8:e4:0c:ce:87:fa:a0:7f:fe:09:4e:c7:
7b:d7:97:44:89:5a:87:d6:c8:e3:d5:ad:b5:84:2c:
e1:64:44:75:60:1b:5e:f2:19:e6:8f:34:4d:a9:34:
c8:e1:f4:0f:49:d5:63:a1:48:d0:4e:c0:4c:f9:1b:
ac:39:a4:fb:ba:11:7f:d8:e6:92:c9:b7:7a:63:d5:
af:1a:ec:ab:6e:e1:dd:d4:a5:fa:1f:9f:c0:f6:8f:
35:80:15:b8:f3:eb:80:c2:85:71:67:5e:57:b0:83:
93:5a:d8:de:60:71:e5:cf:9f:8f:b0:d8:64:26:9b:
8f:1d:c4:08:11:c3:0e:4f:3d:10:62:31:c1:da:e9:
4f:54:c9:84:0f:2e:f7:8a:99:cc:a3:a4:2d:13:12:
9f:81:0b:a7:a2:3b:55:f3:a6:53:ac:93:e0:35:9d:
b5:6e:57:0c:d2:37:ad:ee:6b:46:c3:22:7b:a3:29:
42:61:e0:54:7d:a8:58:c7:08:13:4d:59:f6:f4:7d:
d7:bf:b9:3b:69:f9:76:15:82:6f:d5:b8:87:3b:1e:
9f:58:28:d2:89:0d:e0:3d:91:96:0d:03:98:d2:cf:
4c:7a:67:be:ff:cc:87:e2:25:ca:fd:f8:f3:b3:a1:
05:12:16:bb:82:9b:8d:00:8c:74:aa:34:86:1c:44:
22:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DF:29:12:8C:79:14:03:F1:42:BB:CA:CF:19:49:39:CD:9A:10:8B
X509v3 Authority Key Identifier:
keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b8:87:53:b6:5a:a8:c0:e4:d1:7a:28:95:18:39:26:20:05:
e0:e8:8f:06:67:9a:45:68:14:13:2e:e9:a5:77:63:11:8e:1c:
ab:74:d2:63:d7:d6:79:85:2d:51:73:bc:c6:fe:51:e9:75:6c:
35:dc:b7:cd:8f:e3:4e:6e:ff:e7:d3:ee:87:dd:45:67:61:83:
46:ff:a1:7b:a2:2b:61:65:47:ac:3c:17:70:96:47:d7:62:75:
a7:91:74:d3:f9:9b:82:1a:48:be:42:e0:8f:1c:75:8e:fe:2e:
fa:82:9f:ca:88:51:a0:75:fb:a5:8d:a4:3b:eb:11:75:03:0d:
43:ad:d6:a5:94:bc:76:c0:69:44:d3:74:0f:c3:aa:92:58:06:
91:f8:e1:38:13:df:69:60:b3:5d:85:db:b8:0b:f7:1b:25:9a:
ab:1f:06:2a:3a:46:93:cd:30:ad:a9:25:a2:55:ef:b7:2e:83:
f2:fc:8a:9e:09:5d:8f:7e:f5:7b:01:8e:38:e3:91:8c:74:2d:
be:10:e1:b2:6f:40:bf:70:a9:d3:ff:2e:71:85:e0:46:af:5b:
70:4c:e2:f5:69:cd:d5:b9:8d:d4:f6:c1:0f:9c:1c:63:7d:0f:
88:ee:02:4f:1a:28:9b:a8:4e:0f:c5:66:f6:85:b2:3d:28:ac:
b5:68:83:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:40:12 2026 by rpki-client