Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
File: zxNuAf-vhT27Klz8_l0bZ9IMILU.mft (raw, json)
Hash identifier: 4q7CZDMc6MSD2WZM2Yp0V9JvBYNRqE3NKm6O2ha2V0k=
Subject key identifier: 38:57:85:8D:BF:DE:F6:BB:4B:FD:A7:3B:91:93:3B:36:2B:58:90:4B
Authority key identifier: CF:13:6E:01:FF:AF:85:3D:BB:2A:5C:FC:FE:5D:1B:67:D2:0C:20:B5
Certificate issuer: /CN=cf136e01ffaf853dbb2a5cfcfe5d1b67d20c20b5
Certificate serial: 019D2A3BCB5416D075D3537695DCBF6D2812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
Manifest number: 1312
Signing time: Thu 26 Mar 2026 13:00:54 +0000
Manifest this update: Thu 26 Mar 2026 13:00:54 +0000
Manifest next update: Fri 27 Mar 2026 13:00:54 +0000
Files and hashes: 1: gCv9GsrB47w68fkCt0zJCC4RJMw.roa (hash: xbOO4Pn1uaeMtiQL/e3JD3h35YCVx46Ur2oVXzJ3jaY=)
2: zxNuAf-vhT27Klz8_l0bZ9IMILU.crl (hash: zZEBHtPYzYtr7rCcvyCbTvi8io+IDZZPBSH9PRV4roc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:cb:54:16:d0:75:d3:53:76:95:dc:bf:6d:28:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf136e01ffaf853dbb2a5cfcfe5d1b67d20c20b5
Validity
Not Before: Mar 26 13:00:54 2026 GMT
Not After : Mar 27 13:00:54 2026 GMT
Subject: CN=3857858dbfdef6bb4bfda73b91933b362b58904b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7d:d1:a5:2f:56:16:af:1b:3c:43:10:67:ea:
5f:40:07:81:aa:ff:44:7f:d5:59:0f:d2:ea:f5:25:
db:8f:f6:e7:9b:07:32:30:e3:3a:2e:88:9a:f8:a3:
d1:75:26:28:d8:3c:33:78:f8:3e:d7:da:b7:a2:01:
fe:d8:96:a3:35:14:e2:08:f8:ca:9e:4b:a5:6d:21:
4f:7a:af:81:5c:88:a9:3a:9c:0d:08:c6:ea:25:84:
fa:37:21:4b:6e:ae:a1:d6:11:22:0e:44:08:d2:ec:
d4:0b:ea:f1:47:58:57:6f:64:cf:42:cd:34:a2:f7:
45:28:af:b9:72:f2:1d:8b:11:5d:33:56:bf:3c:90:
f2:9d:92:45:86:28:4d:08:7d:71:08:c6:a0:d1:27:
6f:92:e1:a0:b8:f8:66:36:c0:a2:5d:c7:15:73:a7:
1e:35:9e:d2:eb:b8:54:25:45:62:22:c0:6f:56:20:
e9:ec:6b:4d:17:98:04:03:4b:74:96:3a:a1:d5:e8:
96:24:a7:53:f4:3d:d6:7a:ba:d7:b9:ae:dd:be:e2:
97:f8:1d:98:01:b9:d3:70:7a:d1:a2:a6:60:89:13:
b6:b9:e4:fb:6b:6b:25:c3:11:ff:44:24:57:af:3d:
16:3f:9b:29:1f:0e:65:eb:18:00:1a:fd:3c:cb:9d:
62:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:57:85:8D:BF:DE:F6:BB:4B:FD:A7:3B:91:93:3B:36:2B:58:90:4B
X509v3 Authority Key Identifier:
keyid:CF:13:6E:01:FF:AF:85:3D:BB:2A:5C:FC:FE:5D:1B:67:D2:0C:20:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c5:54:b6:ca:86:c4:c3:22:07:8f:d6:99:ea:08:f7:da:aa:
fc:97:a1:bf:d6:91:3f:f4:10:98:18:93:72:14:9f:47:93:fd:
b9:4e:87:dd:71:e4:3e:24:9f:b3:81:48:e6:e1:ac:28:b6:c3:
05:85:07:ad:dd:66:34:6d:30:90:2e:70:55:ed:d8:c0:d5:a8:
3e:35:fc:b2:0b:1f:6f:11:1d:53:68:8b:76:cf:29:27:ed:de:
0f:ec:fd:85:26:6f:c8:ae:9a:30:f2:ad:e6:2e:48:99:d2:5e:
3a:cf:c7:2f:f0:6a:a3:37:69:2d:4a:74:70:74:17:01:26:90:
39:f4:9d:12:0e:e1:83:2b:e7:6b:f4:05:82:2e:07:17:f1:7f:
f4:c5:b8:27:d8:12:20:38:f6:da:a0:4b:25:0d:69:61:70:b3:
d0:4f:09:ff:97:be:b1:82:d3:dd:ab:b4:e1:a8:7c:af:eb:8b:
f9:90:c3:5f:2a:da:25:bf:0d:a1:c4:9b:08:1e:ef:c6:ed:70:
df:80:25:0b:22:12:5b:61:a1:3b:45:30:c8:19:2f:c5:85:4a:
c3:4d:1b:ff:fa:04:97:57:41:e1:5a:aa:d5:39:0f:24:92:a8:
e6:8f:13:3e:01:78:66:52:7d:15:d7:0f:3a:45:a9:97:e6:09:
ba:44:cb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:41:40 2026 by rpki-client