Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
File: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft (raw, json)
Hash identifier: QJFbYct7LRuvMpwImAB0aKHexaT/AmrbTwSAYmhoiRc=
Subject key identifier: 7D:CB:30:09:1F:95:30:8A:10:26:99:45:DD:CE:EF:07:26:56:2F:55
Authority key identifier: 65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
Certificate issuer: /CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Certificate serial: 019D273AE3153EBC2668E362D72F32974622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
Manifest number: 1747
Signing time: Wed 25 Mar 2026 23:01:03 +0000
Manifest this update: Wed 25 Mar 2026 23:01:03 +0000
Manifest next update: Thu 26 Mar 2026 23:01:03 +0000
Files and hashes: 1: 09kUsc8xVsHQfG22SiNr4dqPF4E.roa (hash: ysqhE++XuPh/xw2jA2E/+Gvhp8/HFy9qw2ro2jCSjO0=)
2: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl (hash: zv1k/YEGbCXJyRuON/oAWaQjIswgYd7u9L8H7FzogiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:e3:15:3e:bc:26:68:e3:62:d7:2f:32:97:46:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Validity
Not Before: Mar 25 23:01:03 2026 GMT
Not After : Mar 26 23:01:03 2026 GMT
Subject: CN=7dcb30091f95308a10269945ddceef0726562f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2d:55:b8:18:2f:c2:aa:93:7d:80:6f:3b:c2:
b3:7b:ef:5f:e4:43:4b:f1:5a:67:fd:9c:6b:ad:78:
ac:99:66:3e:39:85:e3:68:91:b3:9a:3f:57:06:9c:
21:4e:9c:d2:97:c3:7f:5e:36:b6:40:ff:71:79:b7:
a9:27:4c:c2:f2:81:99:17:a1:37:30:76:bb:44:fa:
b8:7e:bd:da:80:ff:b2:47:e0:ce:57:cd:ab:63:82:
d5:a0:45:42:e3:19:5b:ee:50:60:7b:bb:ab:6c:62:
18:cb:00:2d:a7:c1:6a:1a:73:84:d6:bd:28:20:46:
45:31:b6:ac:c4:67:ef:19:ee:ac:4d:16:81:d3:2b:
4b:c2:93:5a:0a:19:bd:1a:bb:e2:f3:ec:e1:0f:80:
9c:e3:2f:84:ec:f1:1f:e1:24:62:0f:ea:0e:51:a5:
39:a9:bf:cf:a0:cb:6a:b4:9f:e3:fc:49:b2:d9:9d:
04:ef:c5:4a:63:3c:1c:7e:72:b9:2b:1e:23:f1:ee:
23:ff:f3:8f:f6:38:7b:4b:08:27:12:03:2e:2a:1a:
28:a5:4d:6e:b1:b7:b4:05:03:1a:e0:47:bf:61:1f:
4d:2f:f9:69:38:9c:c6:0e:8d:68:13:29:6e:be:42:
50:9f:93:3b:bc:c9:f0:5b:ba:a0:e0:58:1e:0d:7d:
a8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CB:30:09:1F:95:30:8A:10:26:99:45:DD:CE:EF:07:26:56:2F:55
X509v3 Authority Key Identifier:
keyid:65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:eb:12:52:2f:d2:d4:17:75:c9:be:5a:7c:0a:6a:04:e9:35:
9a:12:ce:98:44:c3:e6:22:45:5f:33:26:1c:2a:a4:a1:52:34:
b3:43:b4:52:06:e0:61:c3:99:8f:5a:6a:ac:63:13:31:54:68:
31:9c:b9:b9:07:97:24:11:cb:52:75:46:e1:66:cb:9b:2e:ec:
cc:66:83:f3:ac:f8:61:fa:60:1c:81:34:f2:8c:14:b8:06:df:
d0:30:d4:a1:06:90:d9:88:02:2a:d0:e4:77:9d:dd:ba:ef:4f:
f9:2b:c8:07:89:83:e8:15:70:40:56:5c:15:5f:59:17:81:4b:
f0:30:44:29:fa:e8:2d:67:77:0e:d9:06:a6:7b:ca:6a:87:3b:
15:08:98:45:fb:63:45:95:28:dc:e8:f5:af:86:2f:f5:d4:dd:
20:f4:b9:2a:ed:3e:84:0b:60:92:c8:1c:fc:64:bf:b4:2d:bb:
4b:ac:b9:ac:85:5a:f5:8c:fb:64:84:e3:61:4a:e9:6d:bb:6f:
7d:f4:79:b7:ec:99:12:28:56:e9:5c:09:c9:df:76:d0:9f:2c:
fa:07:48:12:08:96:0e:af:fa:3c:94:41:a2:dd:49:6f:f7:ca:
d4:06:d6:dc:5d:ad:c7:4f:42:46:ab:8b:1a:52:c6:d6:91:0d:
01:77:b0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:21:54 2026 by rpki-client