Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
File: zpE13-0LtjNdGd3W1-mfSK--PAE.mft (raw, json)
Hash identifier: iwpUtYmAg9QV263dqEBQruvTr069ib+Pc3Qk6L8RR4g=
Subject key identifier: 37:C5:9C:89:3B:AB:4D:54:36:8C:08:35:DC:91:6A:A9:87:B5:05:E7
Authority key identifier: CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
Certificate issuer: /CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Certificate serial: 019D27E0563836BE61F666EF10A7A6108BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
Manifest number: 14EE
Signing time: Thu 26 Mar 2026 02:01:46 +0000
Manifest this update: Thu 26 Mar 2026 02:01:46 +0000
Manifest next update: Fri 27 Mar 2026 02:01:46 +0000
Files and hashes: 1: JsGq180cWpQwLGA873fpca8Bxj4.roa (hash: RBi5C0yGtp+dilj2CHlX7dy6n4QE4ZE7FypDUnxLwcU=)
2: _ugkR7EVVfxByxX4xFuzJ-ICxnM.roa (hash: k76p+M7xU4ZojZboTeMRkkpRvcXvQeBc65zI5mAjkww=)
3: zpE13-0LtjNdGd3W1-mfSK--PAE.crl (hash: XhWF1IplZi7hTZSJf67RbNIOzG5UCaxYJKMe2UKghyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:56:38:36:be:61:f6:66:ef:10:a7:a6:10:8b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Validity
Not Before: Mar 26 02:01:46 2026 GMT
Not After : Mar 27 02:01:46 2026 GMT
Subject: CN=37c59c893bab4d54368c0835dc916aa987b505e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d6:0f:4b:7c:b8:38:5a:1d:dc:63:2d:a1:0c:
b8:0e:44:ba:2f:db:20:0e:74:00:5d:84:4e:9b:17:
da:29:32:3a:5d:2f:00:dd:26:92:65:32:93:80:e4:
48:69:92:af:23:68:e3:d4:a5:d5:a3:f7:aa:81:e7:
cb:10:15:55:9a:e3:5d:01:e4:83:a9:d5:8a:d9:d3:
62:c3:f5:85:3a:e7:89:a3:34:c5:13:4f:5d:f6:ae:
da:f5:57:fd:f3:5d:cc:53:25:44:bc:c7:54:74:06:
0f:41:eb:5b:25:2e:66:c2:76:61:e3:94:ea:be:be:
76:28:f6:1c:6f:18:06:b6:62:22:85:81:39:0f:ea:
9d:5d:08:22:26:6b:2d:05:4b:46:12:43:55:61:64:
bd:8b:59:36:f1:c6:5e:b6:27:27:8a:4f:0c:d1:de:
cb:4f:df:de:b8:1c:01:88:0f:31:90:11:dd:0b:b0:
05:26:ba:3c:10:73:ab:2b:ff:7d:68:a4:26:a7:d4:
76:23:0e:94:44:ad:62:a2:ad:57:c3:ee:87:ee:9a:
31:ef:a9:20:e1:c4:6c:da:61:11:5f:d9:f9:4a:bc:
55:b9:c2:92:76:17:2b:88:83:a6:c0:a8:df:dd:57:
45:f0:41:16:10:11:78:c5:0d:00:fa:37:06:8e:be:
b1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C5:9C:89:3B:AB:4D:54:36:8C:08:35:DC:91:6A:A9:87:B5:05:E7
X509v3 Authority Key Identifier:
keyid:CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c3:f8:42:c7:2d:6a:24:02:29:24:2f:81:29:77:0d:94:9b:
6d:63:9a:9e:6d:c0:a6:af:6e:93:58:30:2a:b7:86:56:d1:23:
65:d2:f3:69:19:f6:7f:20:b0:cc:fc:a2:22:53:63:94:c5:fb:
4e:18:d7:0f:48:df:b0:1f:df:cb:e9:12:2c:2d:7f:ea:76:41:
83:f4:e8:1b:43:50:f3:c5:a9:45:dd:75:f4:96:d9:be:13:28:
d6:f3:7f:89:7d:c5:16:7a:be:c3:08:e4:ea:e7:96:31:a7:97:
ef:66:88:3f:fc:ab:d0:bc:57:de:03:5b:d9:5b:38:aa:85:74:
c3:d0:c7:15:4c:3c:f4:03:2a:cc:53:70:d5:02:33:a0:71:29:
52:0f:3e:53:3b:32:e7:b0:c9:8f:55:88:a6:16:6d:f4:17:c4:
f5:e9:85:37:63:64:6f:d2:fc:91:57:a7:a3:e7:1c:1e:4d:36:
9e:78:2e:44:23:52:f2:a5:33:54:05:f1:8a:6f:75:66:77:2d:
19:cd:be:b8:eb:86:c6:ca:de:41:49:60:6f:d3:11:38:84:3a:
75:d7:22:b8:f5:d5:f5:22:bd:59:c0:8f:f8:2c:ef:23:20:5f:
83:d1:e8:b3:a6:78:26:7a:1c:b9:f9:05:60:7b:41:2a:fb:2d:
ff:e6:c7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:17:48 2026 by rpki-client