Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
File: ZjokSA8E0TGL8acNq_-ksn7zLaI.mft (raw, json)
Hash identifier: xiSgoBL3NcGGz7/rSxLiQgS0fUKrVtpCnzhGIdRnyXc=
Subject key identifier: 5A:AF:AE:7A:42:15:26:15:A2:F8:EF:ED:85:D6:69:49:9F:F6:1D:95
Authority key identifier: 66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2
Certificate issuer: /CN=663a24480f04d1318bf1a70dabffa4b27ef32da2
Certificate serial: 019D25F1718CB5A6668454090BFA781AA613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
Manifest number: 04A2
Signing time: Wed 25 Mar 2026 17:01:13 +0000
Manifest this update: Wed 25 Mar 2026 17:01:13 +0000
Manifest next update: Thu 26 Mar 2026 17:01:13 +0000
Files and hashes: 1: 32nhL28HnVvRRTyw5tBUJdjr4j0.roa (hash: +zLh6gIHoybz3iAAOdtQltxgsMfjG3zetDelOFc51nc=)
2: 96HXx8zQ_EVFzIMYvhg1zJYI3qc.roa (hash: nDqvJNasRGULrzj7GnOr0ISCf0+9RDFSbOhihRxibJc=)
3: FhaBlVdFb-u9B3Q3s8w-zUsnA3Y.roa (hash: Nhhs8U4S6VG9Y9DrRCnYgND9wClvtFHBCzE3i4DaeSU=)
4: Gg_alP2mFO3oRShalv4zYhkZtEI.roa (hash: c1t1ZXq7lnILVOJ0YZafOnYK9luC0QXvmJ3DhCUXZKo=)
5: ZjokSA8E0TGL8acNq_-ksn7zLaI.crl (hash: wWp3yue3EMixGs+QwA+obP+i7vfonI1D0D/XHWJfXUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:71:8c:b5:a6:66:84:54:09:0b:fa:78:1a:a6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=663a24480f04d1318bf1a70dabffa4b27ef32da2
Validity
Not Before: Mar 25 17:01:13 2026 GMT
Not After : Mar 26 17:01:13 2026 GMT
Subject: CN=5aafae7a42152615a2f8efed85d669499ff61d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ad:6e:6e:be:81:d2:12:e0:08:17:ff:65:aa:
c8:5c:08:d2:e9:4b:ec:17:77:6f:5f:5b:1e:84:ee:
3b:58:73:c6:10:eb:4b:06:e7:8b:2b:f4:b0:56:49:
3c:38:11:52:03:5e:39:25:ff:6f:8b:d8:09:41:ce:
8b:c3:8b:2d:97:be:d2:34:7b:04:9d:41:a6:62:3d:
e0:2d:80:8a:db:bf:8b:be:c1:1d:01:d6:94:46:77:
6a:a8:7e:c3:cf:1d:de:55:26:e7:10:0b:16:40:c2:
f9:1f:03:89:57:10:59:37:79:b1:63:74:22:ff:8f:
ae:5a:1e:61:68:2f:7f:7c:21:3f:8b:bc:ca:9d:68:
97:63:96:7b:50:e3:bc:e3:38:76:35:d1:2a:6f:32:
d0:e2:2f:73:69:3d:9e:ff:64:f7:0e:00:fd:f3:39:
ba:7d:62:9a:0b:fe:61:95:17:31:91:c2:f1:f8:ed:
21:87:a4:80:ba:09:76:04:a9:ce:32:b2:e9:47:9b:
3a:ea:5e:7e:ac:9a:63:37:e0:48:e6:75:2e:f2:96:
ce:0b:ef:54:1d:c6:1c:8c:54:09:4f:e0:fa:36:52:
9e:77:26:d9:e2:2f:6d:c7:e9:b7:72:c9:9d:e6:89:
07:d0:94:52:21:5c:e4:f5:63:ef:c0:81:12:91:b5:
ae:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AF:AE:7A:42:15:26:15:A2:F8:EF:ED:85:D6:69:49:9F:F6:1D:95
X509v3 Authority Key Identifier:
keyid:66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:93:ac:1f:cc:e9:45:45:79:93:3a:28:d6:6c:ae:51:0b:89:
46:50:b8:2b:da:7d:9d:72:24:7f:bf:64:bc:a0:6c:52:3b:df:
ed:17:fe:6e:3f:0b:fe:23:d3:fb:72:a9:4c:32:0a:6a:18:10:
68:e2:8e:d1:8d:dc:ae:ec:e7:1f:2f:f4:f7:bf:01:55:39:0b:
32:0e:5e:bc:e5:de:6e:d6:ef:89:83:fb:97:bf:5e:f3:30:b6:
ea:f0:74:02:f5:17:c9:be:96:d4:51:57:ba:18:ee:c9:28:d2:
58:08:d2:c2:15:79:74:5e:05:23:1a:6b:1c:10:22:fe:04:20:
c8:d9:c6:9f:3e:b8:e2:89:0c:fc:e3:22:d9:6b:44:56:d4:03:
74:99:3c:a6:75:ba:6f:d5:c6:63:5d:f7:b4:b9:30:ed:4e:ad:
29:20:73:7a:b9:3f:98:88:63:00:5c:9f:3d:a0:1c:ad:0a:fc:
ab:d7:cb:c9:d2:79:e4:53:16:fd:f4:05:0c:1f:34:58:ad:eb:
45:ce:13:24:5b:fe:dd:de:ea:5e:43:51:e4:83:60:c1:92:76:
44:74:1a:12:2d:53:d1:c8:7f:34:aa:df:85:00:bd:05:e1:f3:
c6:20:84:bf:43:5f:2a:66:dc:fb:88:ec:0e:24:13:d4:b5:45:
d4:04:56:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:48:14 2026 by rpki-client