Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
File: ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft (raw, json)
Hash identifier: bQdNh++Mp8PHOPcxyyVHeajqwi5OUm2k6t2EUrnyQIQ=
Subject key identifier: 6D:91:A9:D4:42:B0:C9:39:79:0A:86:3A:FB:A9:E3:D2:63:61:AA:7C
Authority key identifier: 65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
Certificate issuer: /CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Certificate serial: 019D265F4F190B1B8A06E152FC10925C2659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
Manifest number: 188B
Signing time: Wed 25 Mar 2026 19:01:13 +0000
Manifest this update: Wed 25 Mar 2026 19:01:13 +0000
Manifest next update: Thu 26 Mar 2026 19:01:13 +0000
Files and hashes: 1: ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl (hash: gdF2dg5L36UxL95yHhxaAErEXhNuwzXlKfAFb4AFGC4=)
2: ruf5ygSKBpBoMppN0_Ydb0zlKDA.roa (hash: AYXx9sIQleSTgwqrdqLha3RogyCLh5BNOu7WolJzJ7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:4f:19:0b:1b:8a:06:e1:52:fc:10:92:5c:26:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Validity
Not Before: Mar 25 19:01:13 2026 GMT
Not After : Mar 26 19:01:13 2026 GMT
Subject: CN=6d91a9d442b0c939790a863afba9e3d26361aa7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:92:e8:32:bd:c7:3e:3b:83:44:cb:6d:af:a9:
5c:6b:3c:03:47:a2:1f:87:ca:46:03:40:ef:e2:bb:
a4:7e:be:9e:25:8b:90:6b:aa:93:46:b4:78:50:f8:
23:28:9f:14:fb:66:6f:3d:eb:3f:79:a2:b4:73:a9:
19:56:4e:a9:bb:1e:b1:b9:82:31:1a:f2:4a:20:28:
e4:5f:8c:1a:d3:3c:80:8d:7e:18:a7:a2:2e:34:c3:
55:e0:2b:82:a8:95:13:6a:a4:5a:f5:f0:9c:d6:b5:
67:a7:62:c6:6e:45:ef:24:9d:83:c2:64:36:1d:01:
46:71:fe:db:e2:a0:db:7a:49:00:bb:43:b4:5a:1d:
4c:54:b7:fc:93:cc:0a:d9:fb:90:11:7f:18:0b:0a:
02:99:e5:0f:97:f5:e8:b4:bf:60:05:1d:ab:4f:80:
49:30:ca:f3:7b:80:3b:03:10:87:d0:e5:db:7e:29:
4a:c5:6b:d8:ed:3c:12:6a:40:d3:70:ef:0e:d5:4c:
79:2d:ff:53:54:2d:4e:56:38:fe:60:cb:3d:53:32:
7e:90:89:1d:03:54:8b:0b:a7:67:df:00:a3:a5:ed:
a6:10:00:a2:58:4f:af:11:1a:99:1c:d8:88:cb:94:
01:12:7c:f4:5d:c5:21:3b:08:e5:9a:db:98:0b:c8:
45:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:91:A9:D4:42:B0:C9:39:79:0A:86:3A:FB:A9:E3:D2:63:61:AA:7C
X509v3 Authority Key Identifier:
keyid:65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ac:0f:a3:12:f8:d6:30:8d:fa:3f:40:56:67:40:33:0d:97:
29:d4:bb:d9:bd:7a:33:aa:75:32:07:20:47:6e:29:7d:08:87:
6d:73:d6:57:4f:b0:71:9c:7f:30:ad:db:a4:9b:be:6b:c2:dc:
a7:d4:b2:74:4e:2b:32:2c:8b:c5:7f:a9:72:0a:0f:c6:29:ab:
7f:5d:d7:61:32:97:7a:33:aa:33:92:3f:06:fb:a6:5a:a4:b9:
01:ab:8f:8a:10:c0:0f:f8:b6:60:19:00:37:4e:7f:fa:86:32:
7e:1c:37:3e:c4:67:90:72:f4:ab:0e:a3:d2:09:54:02:01:b4:
02:a0:cd:21:c4:10:e8:85:5b:f1:78:e3:02:04:93:31:a8:ec:
40:22:b0:25:38:41:37:f5:05:ca:a6:05:0b:38:2c:e2:6c:89:
95:5c:ce:c3:5e:d1:6f:08:96:67:48:d7:6f:b2:71:4c:ac:20:
75:ae:ee:42:c7:f4:82:eb:e8:fd:63:9b:51:03:73:54:2a:10:
fe:7b:82:19:b7:c6:2f:b8:46:d1:92:0e:cf:7f:00:8f:19:ec:
83:21:b5:fe:43:01:51:d4:56:0d:fd:dc:05:07:8f:21:fe:8a:
16:95:df:3e:ea:4d:ca:a6:82:c9:1e:55:5e:3c:e3:5b:0e:36:
3f:ed:56:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:26 2026 by rpki-client