Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
File: Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft (raw, json)
Hash identifier: PM57kwD9CMU5RJ+lWN4uzY1lUf8tuiSjTOFrgarHajY=
Subject key identifier: FF:93:0D:B0:08:F1:62:9F:C5:07:FD:81:A9:7E:06:7F:0B:F3:33:FE
Authority key identifier: 66:DF:B4:31:58:D9:DD:B2:F5:B9:F2:92:37:53:BE:D3:FB:11:73:CA
Certificate issuer: /CN=66dfb43158d9ddb2f5b9f2923753bed3fb1173ca
Certificate serial: 019D254CD9B5AD2134217F91B26A462646FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
Manifest number: 15BF
Signing time: Wed 25 Mar 2026 14:01:26 +0000
Manifest this update: Wed 25 Mar 2026 14:01:26 +0000
Manifest next update: Thu 26 Mar 2026 14:01:26 +0000
Files and hashes: 1: MK5B2h9Q0ERwN9XCDOgzBibuA-8.roa (hash: N47GLmPQEQK3T6K6K5QwCYgIvSWVtPfThL2ceHkYyic=)
2: Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl (hash: eFu4q6HywmYhscAKCZSYKriS/cNr182uIZEUBUsudmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:d9:b5:ad:21:34:21:7f:91:b2:6a:46:26:46:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dfb43158d9ddb2f5b9f2923753bed3fb1173ca
Validity
Not Before: Mar 25 14:01:26 2026 GMT
Not After : Mar 26 14:01:26 2026 GMT
Subject: CN=ff930db008f1629fc507fd81a97e067f0bf333fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fd:10:3e:aa:55:c2:22:d1:ca:9b:be:8b:ed:
30:f7:b0:ff:f4:49:30:00:d7:f7:ae:ff:d5:56:03:
6a:72:a6:f9:07:2e:77:1d:73:65:6a:14:eb:4a:9e:
1b:83:7f:5e:6b:28:ef:10:4e:83:3d:5e:9d:e1:b0:
c3:18:82:f2:55:58:a9:c7:a1:9a:95:75:dd:51:1d:
dc:f1:60:a4:f0:54:7d:39:0e:92:dc:f5:e2:00:97:
b0:bb:1e:16:f1:26:31:f3:51:bf:0f:cd:0a:0e:59:
c2:02:a2:5a:aa:aa:71:e1:28:de:0f:fc:bd:22:e9:
36:f8:03:3f:1e:8a:ba:a2:a5:bf:fc:50:6a:db:a3:
d1:4b:40:2f:57:6e:a5:c8:5d:78:c5:5a:ea:29:f4:
de:13:12:00:b0:2a:5e:31:3e:9e:ea:82:74:26:18:
ac:d1:98:40:3e:d1:b0:ef:75:47:fe:2c:98:f1:12:
d0:c4:54:a0:d6:c9:8d:df:14:45:d3:d3:b7:9f:b8:
68:7d:9d:82:aa:65:7f:08:54:db:75:56:73:4d:5b:
03:b1:d0:fc:9e:b5:11:2f:22:a5:2c:26:73:e0:83:
a9:65:df:fe:8f:70:ff:ce:ff:13:ca:78:0d:98:83:
c9:ca:8d:6b:39:85:0d:f4:a8:2d:9c:54:47:4a:c1:
18:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:93:0D:B0:08:F1:62:9F:C5:07:FD:81:A9:7E:06:7F:0B:F3:33:FE
X509v3 Authority Key Identifier:
keyid:66:DF:B4:31:58:D9:DD:B2:F5:B9:F2:92:37:53:BE:D3:FB:11:73:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:0e:10:d1:e1:8e:7f:02:60:4d:8d:93:a1:f2:91:bb:b9:6a:
77:2e:a0:8e:d7:6a:4c:b9:c1:13:d3:8a:b6:13:47:77:ea:18:
ec:cc:90:0f:1e:9b:3e:b3:2e:dc:8e:11:5c:c7:d6:dd:ea:a8:
fd:c5:4a:5a:de:4e:4c:47:57:a4:e8:c8:cb:7c:50:e3:fa:cc:
79:14:3f:d4:21:64:1d:0e:fd:25:01:0a:4e:9d:6d:fc:1a:83:
51:79:30:68:29:23:26:62:25:45:3f:c1:e2:b6:5b:c4:0c:13:
fc:cd:4c:4b:77:b1:a8:4c:44:3f:d0:8d:40:de:bb:e6:2d:40:
ff:50:01:c1:a7:6e:06:84:72:a6:73:ca:5e:bc:9f:eb:3d:3e:
e8:bd:4a:8e:bf:fb:9a:df:b1:45:80:47:4d:9b:c9:57:8b:d0:
74:bd:dd:15:0d:bf:0a:84:4d:13:11:51:c6:91:aa:48:13:45:
c5:06:3a:eb:08:ad:b3:d5:bc:32:65:26:85:3c:72:62:a8:b7:
6c:04:90:44:55:e3:aa:39:eb:35:fa:9f:49:20:b0:4f:74:ef:
49:d4:1b:33:5b:4f:08:d8:33:b7:36:99:26:49:85:46:3c:43:
17:33:da:9c:98:86:ac:74:83:50:82:48:d8:53:c7:e3:f9:27:
40:4e:b4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:28 2026 by rpki-client