Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
File: ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft (raw, json)
Hash identifier: rgKh7WFzgQEVUYoybogG8buP8BO2JeD0mpyc7tTclrY=
Subject key identifier: 09:F3:18:34:6A:84:71:1D:50:0E:B7:51:0C:97:4B:B8:A9:79:34:A4
Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
Certificate issuer: /CN=65a424cee2fdb0072b541438d913d26636a9b88b
Certificate serial: 019D258350F6A31C9D8F9A136FEEF412AA41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
Manifest number: 1895
Signing time: Wed 25 Mar 2026 15:00:55 +0000
Manifest this update: Wed 25 Mar 2026 15:00:55 +0000
Manifest next update: Thu 26 Mar 2026 15:00:55 +0000
Files and hashes: 1: DKRX12LW62Pwhd7lkkBTAIcEFmg.roa (hash: JQDtg/PbgFXKpQJ1cWIs8ZbTBrSDwWrj/eo/b+RXeDU=)
2: ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl (hash: /3mw6MQcYQRm+DQvw6uHIEjSKlVv03E+21D8vA2/H5E=)
3: f56SXyzVaFxPipkSbWjQspBnG6k.asa (hash: kTkK/KuPdlPU1v4Iqn9nm0PLfpF6FLDnJnaGt4nEmLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:50:f6:a3:1c:9d:8f:9a:13:6f:ee:f4:12:aa:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b
Validity
Not Before: Mar 25 15:00:55 2026 GMT
Not After : Mar 26 15:00:55 2026 GMT
Subject: CN=09f318346a84711d500eb7510c974bb8a97934a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c9:e7:92:a3:6f:c8:f6:bd:e5:03:5b:ad:8a:
e4:aa:77:5c:29:2e:0b:75:9e:65:4e:c3:6d:54:2c:
41:78:c5:d8:97:86:4f:66:60:b7:07:6c:ff:cb:48:
f0:84:ee:df:2a:68:f3:ac:16:3e:68:d3:93:b2:2f:
8c:c2:57:8b:d1:92:f6:f7:62:77:c2:b6:3f:6c:b1:
e0:57:70:68:df:23:14:37:b7:a2:7d:46:53:25:3b:
29:a4:2a:c2:6d:e5:3a:85:23:b6:45:36:21:12:98:
48:fd:bb:e5:33:93:a6:52:e7:fb:6f:3c:c8:8e:f3:
c6:8e:a0:05:43:4b:b6:c0:b3:ee:01:4e:44:3f:b4:
e9:93:bf:87:58:cc:97:56:d5:d0:cf:2d:3f:cc:bd:
0e:fb:7a:0f:77:f1:8c:08:3d:1a:f0:5e:8b:b0:d5:
a1:27:91:da:d3:87:8b:9d:6c:cb:eb:5a:20:60:8f:
0b:6a:ee:5b:75:b1:19:a4:dc:16:5a:42:34:a4:19:
c9:28:98:ec:c2:98:50:6e:0b:f6:49:c5:7c:b4:ec:
87:23:f2:2c:76:0d:2a:fe:d9:0c:e3:9d:dc:5e:e7:
de:cc:8a:e1:7f:3d:d7:01:b8:07:ab:d5:d9:1b:3d:
0c:ff:a8:6c:84:c4:94:90:61:b4:cb:7b:65:89:9c:
a9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F3:18:34:6A:84:71:1D:50:0E:B7:51:0C:97:4B:B8:A9:79:34:A4
X509v3 Authority Key Identifier:
keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a2:61:07:9e:b1:0b:32:7a:95:c2:07:13:ba:cd:27:27:86:
6b:1b:21:cc:a8:89:22:56:81:67:59:d6:24:81:ac:3e:62:c3:
f2:6f:d4:72:8d:05:4b:67:32:4b:cd:51:07:2e:d6:cb:f2:c4:
c0:ce:cc:64:ca:a6:a4:89:6a:53:50:ae:d1:f6:80:48:3d:2c:
86:b4:53:ab:3f:43:27:42:c0:fd:cc:eb:a4:4e:4f:b8:e4:2f:
39:2c:c7:00:71:6d:b9:f0:f0:ee:dd:d9:f9:a8:76:cc:15:52:
33:46:d6:62:9f:8b:cc:54:ac:15:fb:d1:ad:1a:99:a9:9c:16:
2c:22:c4:be:8a:26:2f:e7:42:65:e9:d7:2a:9c:06:6f:b4:0c:
66:e6:9b:fe:53:2f:6a:19:01:0a:2b:22:82:28:bd:d8:20:5d:
19:2f:d7:41:bc:50:f6:4e:bf:a1:bd:89:5b:85:85:68:75:68:
84:d7:89:75:1c:dd:fa:4f:92:8e:34:be:30:46:8a:14:a7:b1:
e1:d0:9b:53:06:f6:bb:dd:68:83:95:15:d0:62:56:bd:18:8b:
c8:db:76:9c:75:eb:59:91:c4:3b:da:f7:de:d8:f4:1d:4f:9f:
3b:7d:60:9d:05:4f:c0:04:3d:6a:4b:36:7c:a1:32:87:4b:99:
a5:08:47:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:56 2026 by rpki-client