Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
File: zxhBQM0aIj9ji3mW9UifSF2O5ic.mft (raw, json)
Hash identifier: BJy0yQXD/1UNis70MQNGnK9sdB6exk7Nzf6c6urFA0A=
Subject key identifier: E4:74:F7:54:6D:3E:2C:41:90:17:6D:73:01:11:D5:14:77:C8:29:33
Authority key identifier: CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27
Certificate issuer: /CN=cf184140cd1a223f638b7996f5489f485d8ee627
Certificate serial: 019D28F2A0C54E374478A73C61789D504BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
Manifest number: 07F9
Signing time: Thu 26 Mar 2026 07:01:22 +0000
Manifest this update: Thu 26 Mar 2026 07:01:22 +0000
Manifest next update: Fri 27 Mar 2026 07:01:22 +0000
Files and hashes: 1: ynB9BnMOzLQWkJYT8Yx3TzBkQGU.roa (hash: yOnugz5IMt/r/ItObFdGYTlUVT1M5hQ/rMrPgRDzlRk=)
2: zxhBQM0aIj9ji3mW9UifSF2O5ic.crl (hash: VBf5UEWOQsluOrRARmqMGebDpXE3nSEBPQdCmp278tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:a0:c5:4e:37:44:78:a7:3c:61:78:9d:50:4b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf184140cd1a223f638b7996f5489f485d8ee627
Validity
Not Before: Mar 26 07:01:22 2026 GMT
Not After : Mar 27 07:01:22 2026 GMT
Subject: CN=e474f7546d3e2c4190176d730111d51477c82933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f6:60:b8:5e:e1:8a:e2:0c:dc:41:6f:86:db:
1c:2d:d0:9d:b8:8f:72:c6:05:2f:b9:f8:a9:a4:09:
76:63:b0:18:29:75:96:02:dc:3c:58:8f:e0:7c:82:
a4:23:03:e7:11:e3:83:45:22:d6:67:aa:f0:09:2a:
32:d2:82:a3:d3:e3:9d:80:25:d8:da:d3:d4:8e:43:
35:52:74:c1:b8:da:87:30:d6:16:71:51:55:6f:5d:
37:87:73:da:eb:47:17:95:a2:3a:d3:45:3a:6b:5d:
91:dd:7c:d0:c2:26:24:c7:0e:79:20:29:e7:80:02:
51:66:31:42:05:29:56:7d:55:65:ff:be:47:98:df:
ff:92:6c:b5:73:b2:a9:01:ef:91:b8:82:c2:5d:d6:
e4:85:26:31:a0:bd:72:96:61:50:20:42:e3:9f:29:
ce:8d:17:af:f2:74:80:78:a8:bc:b0:c7:2e:f1:d0:
19:6e:e6:65:bc:2e:56:94:4a:08:d5:a8:63:07:a0:
e5:75:b7:d0:a5:79:f7:74:f2:2b:74:40:21:bd:85:
91:02:e8:97:e0:71:a3:8d:06:1a:e5:3a:c6:62:6d:
a1:fd:87:ed:33:ab:b5:42:94:0a:08:07:a4:03:ba:
ce:51:3a:0c:a1:bd:79:59:26:5d:f2:03:0b:80:ed:
01:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:74:F7:54:6D:3E:2C:41:90:17:6D:73:01:11:D5:14:77:C8:29:33
X509v3 Authority Key Identifier:
keyid:CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:09:af:5b:0a:d9:eb:3e:e8:6f:3c:25:bf:2c:74:27:d9:3f:
b0:ed:53:be:93:91:80:d3:c1:ae:02:d2:b4:09:a7:a5:15:ca:
c4:60:5b:45:d4:00:5f:84:a3:ec:25:61:db:a7:e8:ad:b5:79:
41:34:2d:80:c7:db:50:1f:7e:d6:08:68:04:59:fe:5f:b8:e0:
40:f2:d9:4d:45:1c:0b:c4:e5:de:34:3c:f4:f5:e9:cf:c5:d2:
a5:2d:a6:91:8d:3a:22:ba:5d:d6:8f:9a:d8:b4:41:08:46:33:
ce:1e:1c:4e:da:cc:53:2e:5e:8d:a9:62:15:17:74:41:f5:11:
0a:9b:7b:94:b4:c3:18:55:89:da:97:c1:ba:9e:ac:8e:37:3b:
b7:80:73:ca:c2:14:f2:fc:bc:b5:80:37:82:a4:ea:3b:29:e9:
9c:a3:8c:a4:b9:43:32:67:15:ee:25:34:28:47:55:6c:03:6c:
1b:c9:db:42:9b:b3:47:22:50:ec:91:47:90:8c:55:a1:23:38:
22:46:65:0e:f3:ad:aa:2e:0c:5f:8b:d0:0c:f2:5b:88:01:2b:
d6:3e:d0:ea:ca:93:57:52:e0:c7:cc:f7:b1:73:23:ca:84:24:
0b:72:7d:d1:21:5c:ef:f2:a2:29:b3:94:a5:97:79:07:91:01:
5b:24:6b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:17 2026 by rpki-client