Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
File: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft (raw, json)
Hash identifier: YF9lmP7A+Y9VfBBzD+yrgwVMC9Kzs6fyEZpfxGZtm2U=
Subject key identifier: 82:6B:42:17:CB:FE:46:EB:FB:73:F2:60:2A:89:35:48:6C:44:06:8A
Authority key identifier: 64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
Certificate issuer: /CN=64aec8024caa103a8412696c7e72f77803cd8695
Certificate serial: 019D284E11430ED498F41BC79453018FA75F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
Manifest number: 12C7
Signing time: Thu 26 Mar 2026 04:01:38 +0000
Manifest this update: Thu 26 Mar 2026 04:01:38 +0000
Manifest next update: Fri 27 Mar 2026 04:01:38 +0000
Files and hashes: 1: SWC8q5CH8zumHrflzVp4e7i8dGY.roa (hash: z98d01QAmvPs9qVeEUxQJcsgJEzGZb8FADftU7i+UZw=)
2: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl (hash: /z/DLRD4JfuTaXCdM8vHe2uhH5OJ8WjOZVuEOJwOmS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:11:43:0e:d4:98:f4:1b:c7:94:53:01:8f:a7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64aec8024caa103a8412696c7e72f77803cd8695
Validity
Not Before: Mar 26 04:01:38 2026 GMT
Not After : Mar 27 04:01:38 2026 GMT
Subject: CN=826b4217cbfe46ebfb73f2602a8935486c44068a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:16:6b:36:1c:82:4f:20:63:24:7d:30:ef:01:
29:b7:4f:f9:89:51:13:a7:85:59:a6:08:23:7b:3a:
fb:e9:d2:a1:7f:19:70:0e:59:af:0a:ea:51:67:ca:
12:7c:04:7f:fd:40:cb:7a:03:f1:5e:08:7a:97:73:
45:31:aa:a8:e2:3f:7f:4e:d2:5a:32:7a:df:ba:2c:
ca:e6:b3:af:ba:19:e3:0b:a8:1e:2f:29:50:0f:88:
ef:d3:44:1a:b8:4f:37:32:c6:18:a5:35:50:7d:37:
f8:a8:ac:31:c3:40:0d:03:6d:1a:5c:2b:f6:2a:5f:
07:80:6f:4f:db:8e:ec:fc:39:a2:c2:e1:2a:82:51:
09:a7:1f:84:9f:8a:05:23:be:31:a8:77:7f:89:69:
89:2d:da:2b:86:e0:b3:6b:00:7c:89:f4:bc:ad:94:
c5:0d:c6:90:9f:62:a9:ef:09:44:9b:5b:e1:12:83:
90:9e:61:1f:e3:14:27:ab:0b:e5:88:fa:21:53:74:
c5:30:34:38:fe:e6:bd:ad:93:6a:bf:9d:88:90:b2:
96:81:d6:3f:69:61:bb:0c:b9:49:6d:78:55:72:e3:
c8:b6:03:a3:c3:4b:67:f9:a5:58:63:97:ab:e2:77:
83:30:2e:d4:57:0c:65:9f:5b:75:5e:23:66:f2:09:
1b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6B:42:17:CB:FE:46:EB:FB:73:F2:60:2A:89:35:48:6C:44:06:8A
X509v3 Authority Key Identifier:
keyid:64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:91:de:f1:f2:23:13:cc:9d:16:d9:31:ed:c9:d2:1e:48:8a:
dc:d0:d9:bb:38:2e:d5:85:e2:87:3f:86:31:0f:a0:d7:73:06:
4f:46:e7:d5:ac:b1:81:7c:2b:06:73:29:0d:d5:19:bc:b9:ec:
9b:6f:86:67:b6:50:82:d8:9a:a0:cc:ae:59:37:80:42:96:24:
a7:50:56:86:31:12:5d:ef:34:e9:e4:51:34:08:a1:14:e9:28:
ef:12:ec:2b:30:d5:ce:91:18:b8:b6:d0:8c:f4:4e:b3:29:dd:
61:24:5c:22:34:8a:04:2c:53:5b:d4:f2:7b:4b:62:24:b5:62:
2a:d6:5b:1b:3f:c8:38:71:c9:62:d3:b3:c9:4e:51:d6:24:00:
85:85:1a:11:c5:13:84:46:d6:6b:2c:14:d0:9d:14:74:45:2b:
6a:9e:29:66:45:6f:e5:f0:fd:bc:60:84:a2:89:01:9c:28:f3:
eb:a0:fb:c2:24:f2:1d:5c:3d:f9:78:80:58:0d:a2:e7:7b:db:
db:d1:b1:13:f3:30:82:b8:ef:ff:c5:ad:97:53:8f:52:81:ce:
90:89:1e:cd:99:ed:40:6e:c9:a3:c7:48:75:eb:50:a7:bf:ef:
93:c1:b4:20:79:b7:fb:90:f0:71:ac:8f:24:c8:99:45:30:cd:
ed:0f:4b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:33:00 2026 by rpki-client