Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
File: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft (raw, json)
Hash identifier: vIikwyg0HcafD6DIGYysNSSzuE66QMXhXetAAHgoAzo=
Subject key identifier: B1:21:A6:91:96:75:DD:44:F6:B8:19:19:13:FB:73:55:D3:2B:7A:06
Authority key identifier: 65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
Certificate issuer: /CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Certificate serial: 019D265FADFC286286D585F49622E3B6C2CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
Manifest number: 05DD
Signing time: Wed 25 Mar 2026 19:01:37 +0000
Manifest this update: Wed 25 Mar 2026 19:01:37 +0000
Manifest next update: Thu 26 Mar 2026 19:01:37 +0000
Files and hashes: 1: 7Lr6p7DxKnwsqNm2CLB6OM0-G9k.roa (hash: MVl7TrZfOYT29YZfSTEksTVjTVaYtldybqMvFAfAqSw=)
2: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl (hash: +EedEbrDsBu5fZq8EEhokXikaEKFjWPSvhIQ5+NPkKI=)
3: nLzx58TFso7KcSU-xZqQFwqs76E.roa (hash: X8XgfJ4xsaevH8Jt00V++9TqwIkHOO/EM9BBJ5XdWxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:ad:fc:28:62:86:d5:85:f4:96:22:e3:b6:c2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Validity
Not Before: Mar 25 19:01:37 2026 GMT
Not After : Mar 26 19:01:37 2026 GMT
Subject: CN=b121a6919675dd44f6b8191913fb7355d32b7a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:73:36:e8:ba:03:2c:62:7d:9b:8f:78:35:26:
18:3e:51:d0:fb:88:93:ea:66:fa:0f:b3:4e:31:4e:
7b:f4:b7:02:81:46:d8:f4:90:79:c5:41:47:22:1b:
6c:1d:9c:b8:63:5f:f4:f9:9b:e2:ec:69:4f:56:b6:
19:9e:79:1e:89:2a:66:37:1c:73:70:de:79:59:e1:
ee:02:3e:8f:50:4b:bf:cf:19:fc:cd:df:eb:43:00:
cb:a2:fb:06:09:60:3d:4d:fa:2f:09:90:2c:9a:aa:
8b:fa:3c:c5:c5:d8:a8:ec:5e:85:27:b3:c1:1f:f1:
5e:c5:d0:6c:cf:ea:ea:15:c0:5f:5e:4b:28:91:6c:
2b:70:0e:4e:18:25:38:08:85:cc:4c:4f:6b:fa:1d:
87:6b:2f:65:8d:98:d1:de:85:7b:15:51:8d:54:c9:
49:ce:9d:a0:21:99:aa:46:eb:e3:03:64:77:f8:d1:
e6:77:c9:eb:c5:ee:7c:98:37:ca:f8:f4:8e:14:70:
a4:9b:f7:01:84:2e:9e:d3:31:b0:38:45:02:f4:ca:
6b:58:6d:98:22:32:ea:90:93:91:4d:2e:e6:ca:13:
3d:bd:70:91:db:68:62:15:b2:80:ee:d8:1f:00:a2:
f0:90:40:5c:19:c9:4e:8e:1a:f4:29:c4:b9:87:bc:
f8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:21:A6:91:96:75:DD:44:F6:B8:19:19:13:FB:73:55:D3:2B:7A:06
X509v3 Authority Key Identifier:
keyid:65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:de:92:0f:32:73:8f:e0:4c:cd:3e:fd:f6:02:fb:32:0b:59:
29:5d:c7:a1:60:27:45:e5:06:a0:56:65:28:25:dd:a2:72:ac:
3c:e3:f2:a6:78:af:1d:fb:ae:1a:82:82:30:28:a5:58:cb:ba:
61:2c:1c:cd:74:69:ec:38:ae:9e:4f:9f:a6:36:de:b9:c3:97:
d6:36:ae:61:5b:e6:d5:fb:0e:41:f1:f5:23:64:91:a2:64:33:
c2:7e:6c:74:e5:7f:02:ab:78:ca:58:c3:b8:49:05:6b:e6:df:
55:8b:ab:8f:b5:a1:cd:56:c0:95:62:57:27:73:3f:70:9f:eb:
a2:26:f2:97:eb:d5:54:51:75:f8:6d:e9:0d:10:fa:33:eb:3e:
2e:9c:98:ee:9f:4c:3e:5b:61:50:fa:5c:95:3e:da:fd:51:0c:
e8:67:e0:9d:2c:f5:a3:d6:80:05:9b:ba:01:04:7e:e7:e1:6e:
39:a3:91:9a:c1:98:f8:17:9c:d4:f4:7b:02:80:69:2b:71:83:
81:62:4e:fd:79:5e:15:92:5d:aa:42:ea:b5:fe:32:0b:57:66:
7e:9f:d7:32:d5:10:3b:f9:6d:c0:1b:d2:bb:a9:fa:e6:ca:6e:
8f:2c:e2:90:86:1b:a1:b7:5a:d4:a7:d0:0c:9d:20:70:30:af:
e4:ad:32:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:26:35 2026 by rpki-client