Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
File: ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft (raw, json)
Hash identifier: bWSQUiqMONuyjDTHCFhpI5K8c1Igzphon69oGbbdMaQ=
Subject key identifier: 2D:AB:92:72:92:E7:2B:2F:4A:6F:DB:B6:24:13:01:F4:BF:0C:B2:D3
Authority key identifier: 64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4
Certificate issuer: /CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4
Certificate serial: 019D27E01432E6CE6222F9F5A3B385AD712A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
Manifest number: 108A
Signing time: Thu 26 Mar 2026 02:01:29 +0000
Manifest this update: Thu 26 Mar 2026 02:01:29 +0000
Manifest next update: Fri 27 Mar 2026 02:01:29 +0000
Files and hashes: 1: Z8LVBFcg0z0aAMYhWrQLHZb_nn8.roa (hash: V2MLHL/okJ/3o6MZQXWdDGTI8xzQQww1eNzhJoWdwk8=)
2: ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl (hash: AakwVRfOJYzBbvjcfkQPerKXe9bsYcRd3vA5UOgilEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:14:32:e6:ce:62:22:f9:f5:a3:b3:85:ad:71:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4
Validity
Not Before: Mar 26 02:01:29 2026 GMT
Not After : Mar 27 02:01:29 2026 GMT
Subject: CN=2dab927292e72b2f4a6fdbb6241301f4bf0cb2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ef:2b:31:95:fc:91:f4:2e:a8:2c:bf:87:34:
5f:a6:d7:35:98:04:39:b1:b6:60:4c:88:dd:37:04:
04:b8:30:f0:62:99:88:ea:20:13:ca:9f:40:73:26:
5e:b2:fd:ee:43:07:97:a2:80:31:ad:44:27:2f:9a:
3b:5c:f5:83:87:3b:83:48:0a:0d:a9:8d:05:fa:03:
31:b0:dd:8d:87:a6:8c:68:00:7e:01:a0:4f:8d:e0:
d6:2f:c2:c6:67:cb:53:3c:21:df:ae:d5:95:97:58:
b7:a3:dc:a4:25:ed:f5:0e:21:61:fd:a6:3f:82:f5:
7c:68:41:5a:f1:3e:1c:a0:77:c5:63:44:33:33:18:
ca:12:d3:01:f7:21:26:41:1b:fe:4b:3d:71:b6:8d:
a2:6f:a1:f9:14:c6:c3:e2:aa:62:b4:7d:38:d5:94:
39:52:3c:2d:66:c9:22:ac:f4:8f:e5:29:c8:29:cf:
02:1f:45:72:be:02:9c:80:78:ae:2d:34:ce:7c:e9:
7f:94:cc:02:4e:02:c7:fd:6c:ea:05:8c:5e:18:ff:
cd:28:92:f3:be:71:2e:06:aa:32:85:69:55:3c:21:
7b:1f:be:b2:17:af:12:65:1c:66:f5:ba:b4:f7:39:
e5:0c:23:15:81:77:60:29:a4:c6:be:53:c8:14:de:
70:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AB:92:72:92:E7:2B:2F:4A:6F:DB:B6:24:13:01:F4:BF:0C:B2:D3
X509v3 Authority Key Identifier:
keyid:64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0a:4f:5f:99:a9:f6:b8:94:5b:b7:63:1e:d5:ef:4b:b1:29:
7a:f5:0b:fb:92:b9:16:e4:a4:60:46:27:47:c0:7d:46:4e:eb:
d4:93:9b:85:5e:57:11:5c:f5:97:54:ea:c9:8b:bd:fa:77:56:
c9:64:83:7c:2c:59:82:be:2f:ae:de:5f:63:5a:75:80:af:52:
93:f8:fb:86:e4:48:82:84:99:ed:65:d0:71:b1:94:b7:59:2e:
50:34:3b:25:70:f6:b1:96:77:e0:32:0b:5b:08:1b:f4:3d:25:
5f:a3:bc:69:e2:bc:0c:83:54:5f:15:58:1d:7a:51:bf:09:f4:
f6:a5:f5:b1:52:bb:5a:62:26:6d:72:c6:42:b3:07:fd:23:31:
7c:f0:fb:99:c4:2d:2b:32:04:34:96:e5:4a:cc:92:9e:cb:e4:
1d:0d:46:66:39:2d:66:3b:b7:63:a5:fe:10:a8:74:0f:30:04:
93:39:a6:c8:dd:d9:bf:a0:87:c7:73:41:19:6a:99:d6:07:35:
b8:8c:f5:e6:ec:8b:59:27:b5:51:25:e6:5d:56:b1:88:91:50:
11:0d:d4:83:79:7c:a4:ba:42:9e:55:1b:05:f2:86:3d:b8:d8:
ce:27:88:9e:64:9b:ee:dd:9c:f2:af:92:8b:a3:5c:bb:93:b4:
19:8f:50:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:39 2026 by rpki-client