Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
File: zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft (raw, json)
Hash identifier: LdWIfGN49X1RMcM7yVdhRAULADfc/ntXe73QnCJkQRI=
Subject key identifier: DD:D4:13:2D:74:17:2B:EB:53:75:8E:DD:C5:4D:84:79:74:C2:9C:73
Authority key identifier: CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
Certificate issuer: /CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Certificate serial: 019D292920605685728B07DC5C3999F38A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 08:00:54 +0000
Manifest this update: Thu 26 Mar 2026 08:00:54 +0000
Manifest next update: Fri 27 Mar 2026 08:00:54 +0000
Files and hashes: 1: hP6LOiB-JXjzIxcAoNUeheYCC_w.roa (hash: Am0rp7j+BYvMadHXe785VdV8wLgqVi6auP8kJTGDcRE=)
2: zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl (hash: NeF0HTqBFxeddmTeLySxsx/w+1veO7EmkEQlvOWk/HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:20:60:56:85:72:8b:07:dc:5c:39:99:f3:8a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Validity
Not Before: Mar 26 08:00:54 2026 GMT
Not After : Mar 27 08:00:54 2026 GMT
Subject: CN=ddd4132d74172beb53758eddc54d847974c29c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d1:30:48:1a:48:90:91:8f:cf:dc:f6:81:eb:
e0:28:5d:69:99:82:ae:c2:f3:e6:2e:07:2c:a9:63:
f2:06:54:67:6d:47:c1:b5:a0:ca:4f:2c:5e:a2:ce:
c5:cd:78:b8:25:75:74:e1:f5:0f:4b:20:84:8b:ef:
0e:7e:06:54:90:f9:c9:d4:74:b2:ae:7f:15:7f:67:
82:ca:e4:5d:db:15:e8:de:21:2d:16:6b:cc:53:36:
b0:e6:17:cb:e5:55:d1:2c:cd:c0:f5:0b:2f:c4:a1:
19:aa:0b:9f:71:8c:12:3a:e9:6d:bd:24:38:29:b3:
78:63:7c:dc:84:80:1e:15:b4:34:06:53:e6:cf:a1:
80:79:24:6b:6c:5b:61:25:82:13:01:ad:a3:90:2f:
03:98:f1:76:26:3a:38:c8:59:8e:7d:ae:bd:72:59:
66:82:54:01:fd:9d:90:cc:ee:a5:8c:3d:38:c9:b8:
ae:40:25:19:a0:c5:44:9a:7b:f7:79:c0:90:0b:b1:
ca:bd:4d:39:93:e8:16:82:86:e4:ab:64:aa:ae:d2:
ef:49:95:c3:bf:37:0f:7f:bb:90:88:8b:fa:84:c7:
fa:81:86:41:13:0d:75:81:57:02:6e:07:ff:56:c9:
7e:22:94:9b:e5:e3:fc:6e:13:cf:c7:06:30:ca:9d:
74:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D4:13:2D:74:17:2B:EB:53:75:8E:DD:C5:4D:84:79:74:C2:9C:73
X509v3 Authority Key Identifier:
keyid:CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:9b:8b:07:7d:fa:1b:26:3a:2f:0c:f9:7b:da:af:44:e4:f4:
f5:bf:ed:75:0e:e2:db:67:06:f2:a6:0d:2d:5a:6e:e3:37:6f:
13:bb:64:4b:f4:74:bb:3d:99:1b:6b:de:61:ff:1a:6b:18:46:
09:54:e2:85:7f:da:04:8c:72:46:17:c1:8a:5f:65:f5:50:ba:
2a:a9:3c:2a:99:44:6e:96:32:e2:db:b3:d9:8a:ad:82:4f:d2:
00:0f:87:56:87:ed:e5:cd:76:7e:e2:a9:e6:30:96:de:f2:0d:
d3:3f:a0:72:65:e8:af:25:7c:74:60:71:42:0f:b4:77:3e:7c:
1c:1c:20:32:2c:a1:35:61:e1:da:50:0c:d0:e4:38:20:b9:de:
91:88:d5:88:e0:78:9c:05:68:b4:26:12:2f:49:91:5f:c8:21:
d0:1c:a8:75:4d:e6:1e:48:36:92:bf:73:30:13:59:22:c7:28:
61:d3:a1:b0:39:ad:c8:0a:d6:2a:82:f9:08:77:4f:05:23:1c:
9a:7b:d6:aa:94:5d:1d:34:e2:39:b3:a3:66:80:82:56:40:83:
cb:8a:86:85:8b:64:f1:e8:76:3e:42:39:63:55:87:fe:45:87:
8c:69:2f:d1:39:f3:4f:22:fc:60:9a:3d:e3:fd:9f:27:c3:1b:
79:45:4b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:23 2026 by rpki-client