Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
File: Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft (raw, json)
Hash identifier: RqwiRsSTn3WHZ5OeYyl0lyHyK7G/HH10ZWCDkiqQ87M=
Subject key identifier: A2:F3:CC:B3:0D:A6:7C:90:D2:0D:CD:09:EE:09:29:DC:D7:6F:83:00
Authority key identifier: 66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F
Certificate issuer: /CN=6696fa3fe40cf770851c83adcafafb7a4107678f
Certificate serial: 019D2928EC5E3AD29EE0122184A7ED87CD41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
Manifest number: 06AD
Signing time: Thu 26 Mar 2026 08:00:40 +0000
Manifest this update: Thu 26 Mar 2026 08:00:40 +0000
Manifest next update: Fri 27 Mar 2026 08:00:40 +0000
Files and hashes: 1: Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl (hash: OjFkAfNG4RheFnxYOw+NHxqGQuUI9PpoBVxAX9cW0yY=)
2: gm9LYNpC-yBIIMfeArMhuzuO42Y.roa (hash: OAVQXclGqF1DzCgaRJYfwJT9ofhZUBGQrn1q3PHPsY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:28:ec:5e:3a:d2:9e:e0:12:21:84:a7:ed:87:cd:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6696fa3fe40cf770851c83adcafafb7a4107678f
Validity
Not Before: Mar 26 08:00:40 2026 GMT
Not After : Mar 27 08:00:40 2026 GMT
Subject: CN=a2f3ccb30da67c90d20dcd09ee0929dcd76f8300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:be:5b:36:7e:e7:df:f9:4e:69:71:b5:84:
e9:37:3d:1f:ef:13:fb:88:b3:08:c0:c0:d1:aa:0a:
a5:66:1f:0a:cd:83:43:1d:87:54:02:f4:52:5e:48:
21:13:9e:89:47:5f:18:24:0e:89:08:1e:6b:79:92:
4c:ad:4b:2a:39:e0:0b:2d:98:18:da:7f:7d:58:d5:
cf:b0:e5:cd:6c:b0:e8:d4:14:3b:cf:c5:c7:dc:94:
77:22:68:ee:81:3f:0f:51:a5:e6:fe:8e:e4:ca:44:
b7:45:b6:0e:ee:af:c8:40:fa:42:ad:66:f8:14:f9:
af:84:66:55:1b:b8:f9:4c:d0:9d:f7:7d:96:f9:6f:
a1:5b:03:c6:49:f3:64:8e:56:27:58:a1:ac:7f:93:
ef:40:a1:28:6c:b1:9d:8e:c6:4e:c1:c4:5f:69:7a:
c5:ba:5c:e0:dc:a2:20:3f:af:c0:c1:11:34:a9:cd:
a0:4b:8c:cb:47:a4:48:59:aa:f4:4b:95:d5:6c:b4:
11:d2:03:94:33:8d:b5:46:cf:a5:0d:df:69:f0:05:
04:25:77:3e:cb:db:32:2c:1c:4a:98:75:6b:dd:67:
2d:89:0d:6a:52:e9:eb:91:43:4f:b6:e3:79:64:4a:
60:83:63:c3:9d:d1:1f:98:f6:5f:ff:2b:37:7a:3b:
ff:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F3:CC:B3:0D:A6:7C:90:D2:0D:CD:09:EE:09:29:DC:D7:6F:83:00
X509v3 Authority Key Identifier:
keyid:66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f2:10:53:0d:71:69:9a:1d:aa:cd:9f:3c:ba:ed:5e:89:b6:
3a:e4:bf:b3:c6:c4:13:25:bf:64:84:e3:23:1f:c3:d3:29:29:
6f:2a:93:3d:eb:bc:16:c7:df:4f:af:04:fd:e8:78:54:ec:32:
1d:db:73:50:6c:43:8a:55:aa:20:0f:74:ca:7c:4b:fc:ec:2f:
07:54:44:bf:78:66:c8:8a:5a:11:71:7a:7e:e0:a4:16:30:c6:
b7:67:63:a0:8a:4c:71:6b:b5:47:bc:d8:d2:3f:ed:48:1a:3f:
8f:7d:44:8f:96:4d:4f:ee:b7:94:65:2e:ea:93:f0:5d:ae:d3:
24:78:8d:f1:1a:e6:54:99:d2:89:f7:c2:29:2e:ec:ba:17:4f:
c3:13:cd:1a:ec:5d:86:12:6a:60:d4:20:02:c0:c3:12:4a:ac:
51:59:d9:e8:c3:51:14:d6:8a:d9:3b:a0:6d:5f:c8:4d:c8:a5:
6d:2a:c6:d8:fc:6e:a9:97:73:f9:33:55:9f:35:ce:0b:f9:19:
f4:af:ea:96:da:c5:a0:cd:1d:d0:b0:93:c4:c7:e0:5e:87:14:
36:86:b8:89:bf:79:17:fb:34:66:53:95:af:e5:14:64:05:ed:
6f:05:19:9e:7a:78:6a:e8:e5:82:24:44:0a:3f:57:36:fa:f4:
df:c0:8c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:24:06 2026 by rpki-client