Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
File: zbFQJ29VuuRVmI06E-WTQQdNzQo.mft (raw, json)
Hash identifier: OESdMvJxWAJ0o9WOjSEVAxwpXXUIeO79UqlOkocVBUU=
Subject key identifier: E2:9C:E8:F5:A1:5B:4B:19:95:5D:C3:71:68:AA:C8:FC:31:06:10:81
Authority key identifier: CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
Certificate issuer: /CN=cdb150276f55bae455988d3a13e59341074dcd0a
Certificate serial: 019D269607236F42B18CFBC45FCA7CA25648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 20:00:59 +0000
Manifest this update: Wed 25 Mar 2026 20:00:59 +0000
Manifest next update: Thu 26 Mar 2026 20:00:59 +0000
Files and hashes: 1: lz_wShBEMScRLpNIlFJG1rBoiF4.roa (hash: d/v05QGqY1AL+DPGS5unWRu61oq5dQYWqSy/Y4KvwgA=)
2: zbFQJ29VuuRVmI06E-WTQQdNzQo.crl (hash: 0Rfe4N4u2J6t4f2r1GuCjaNf+mqOkN4Ev5a1dEtgvRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:07:23:6f:42:b1:8c:fb:c4:5f:ca:7c:a2:56:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb150276f55bae455988d3a13e59341074dcd0a
Validity
Not Before: Mar 25 20:00:59 2026 GMT
Not After : Mar 26 20:00:59 2026 GMT
Subject: CN=e29ce8f5a15b4b19955dc37168aac8fc31061081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:65:c3:2f:79:b6:3f:07:26:48:4b:55:b5:e6:
88:34:d0:52:fc:80:a4:5f:fe:e2:bf:a4:8c:37:19:
f1:d2:1a:2e:e6:56:23:e7:6a:b9:19:27:f1:bb:e9:
6c:21:57:5c:f8:75:90:45:af:b1:a5:a1:0b:70:ef:
79:f3:f9:d7:cf:ec:6b:71:4c:0e:b7:25:85:3d:c5:
19:9c:39:ee:db:7c:82:fb:b7:a2:d9:ff:a6:d2:6b:
2a:4d:df:ad:9b:e7:59:25:46:61:78:72:92:69:7b:
3e:9d:a4:6d:bd:53:9e:a4:07:84:0c:99:84:97:f8:
48:99:30:9b:54:71:c3:e6:f8:80:2f:8a:dd:c6:51:
7d:b2:34:78:fc:f1:be:a9:8b:f7:0b:9d:8c:b9:8e:
de:f0:a3:72:ac:01:49:fd:ee:23:2b:12:ca:61:fe:
fa:47:8d:72:5b:df:f0:21:4c:94:5a:48:d8:e1:3d:
21:fd:56:c2:c1:a0:76:bd:e9:1f:b4:4a:08:68:c3:
3b:14:7f:04:24:a4:2b:ac:88:27:84:c5:ce:8d:eb:
1a:44:9f:85:f5:0d:44:99:ec:b9:2b:28:13:a6:0d:
73:46:f4:7c:0d:9d:bc:fd:f4:96:f6:fe:e6:87:19:
bf:88:7c:97:4f:4c:7f:b4:0d:1d:55:07:9e:c9:2d:
c8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9C:E8:F5:A1:5B:4B:19:95:5D:C3:71:68:AA:C8:FC:31:06:10:81
X509v3 Authority Key Identifier:
keyid:CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:22:f8:39:50:1b:d3:3e:2c:32:48:e3:b7:ce:4e:0e:cc:0e:
38:f4:a3:78:bf:97:0d:0a:29:fb:68:e5:93:c7:f7:db:8c:48:
44:c3:16:cf:f4:d6:a3:d0:68:d1:c7:ba:5b:0b:c7:14:02:01:
3a:01:1f:c7:9c:a6:d9:df:41:90:bb:33:a2:06:84:c2:64:6b:
a4:d4:97:35:65:1d:33:d8:8a:eb:af:d9:d6:cb:84:49:25:07:
f4:b4:b6:d0:53:0e:d0:1f:bf:cc:9b:04:ff:15:72:e5:a2:9b:
3c:66:66:a6:bd:18:a9:df:8c:37:c6:8a:dc:8a:fc:2d:7a:47:
d3:ea:09:4c:ba:0b:e7:c4:c7:5a:85:f5:04:3a:a5:0f:96:5e:
ae:a7:f2:dc:f8:27:f4:f2:f1:1f:2f:8d:f0:2a:6e:e1:d9:58:
ef:a3:b3:b0:c3:0b:ff:e5:09:ea:2e:2a:ca:42:94:2c:58:d0:
00:99:b7:0c:83:fa:09:21:0c:ba:80:e6:87:95:06:63:db:9f:
81:32:64:a9:75:21:13:19:93:0f:49:41:3e:02:14:5e:18:95:
47:37:cf:12:27:84:28:f1:f1:4b:23:4c:d2:d3:a2:91:be:65:
2e:71:e6:3f:f4:cc:a4:42:1b:f2:49:70:8b:86:70:9c:46:18:
8f:b4:60:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:57 2026 by rpki-client