Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
File: zJxBoSN2TPfcDy25hB9zKjuWE0M.mft (raw, json)
Hash identifier: r2HfeSoN0u0FMWx7wqYlw5V8l7zdLezHHeX0snrWJzU=
Subject key identifier: F8:13:AC:9E:7F:99:B7:93:35:14:B0:CC:4E:E6:5A:5B:77:65:BA:A0
Authority key identifier: CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
Certificate issuer: /CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Certificate serial: 019D273B06B64DA7FEFA269883F2522E4504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 23:01:12 +0000
Manifest this update: Wed 25 Mar 2026 23:01:12 +0000
Manifest next update: Thu 26 Mar 2026 23:01:12 +0000
Files and hashes: 1: RKsWQywf7E1-7yxnFVRThg94oQI.roa (hash: rZsYO4uq9KEbyvr1gPhju0XO3T5ePDaOKISlE/78+R4=)
2: zJxBoSN2TPfcDy25hB9zKjuWE0M.crl (hash: g4xMwHF/Xl6lR0+heYZZWQc4byoFrC2LqzOJ6EXqeG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:06:b6:4d:a7:fe:fa:26:98:83:f2:52:2e:45:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Validity
Not Before: Mar 25 23:01:12 2026 GMT
Not After : Mar 26 23:01:12 2026 GMT
Subject: CN=f813ac9e7f99b7933514b0cc4ee65a5b7765baa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:41:fd:1f:d3:d5:33:3b:01:fc:13:97:b4:
0c:6e:dd:ff:84:94:f7:26:22:d4:25:1d:86:42:e9:
7b:4b:0d:d8:7b:27:4b:75:fb:0c:d5:e1:e1:6d:5e:
b1:6f:6f:77:69:7b:ef:dc:d6:26:8a:a7:ce:a0:04:
da:33:af:66:87:70:99:8c:1e:1b:a5:1d:c9:a8:53:
c7:2b:43:12:92:b4:43:61:95:7f:a1:98:9d:ac:b3:
e6:a2:79:fc:12:df:b5:7e:27:14:7b:2c:c7:a5:aa:
d6:87:43:15:0a:c0:f4:91:26:31:a7:57:b6:f9:41:
a8:06:bf:d0:f1:a6:c8:8b:86:1b:70:81:f6:8e:b4:
25:85:f4:1d:62:d7:8f:41:e5:83:a8:ba:4e:bd:d6:
88:94:a5:09:6c:22:be:ce:d5:5c:77:96:71:99:31:
db:a6:58:7f:22:0b:a8:79:5a:2a:25:3b:48:21:40:
2b:7d:46:f1:ed:4e:c8:fb:db:70:f7:98:5b:d8:12:
16:7f:18:19:56:8a:53:b5:86:c3:f7:75:4c:39:8b:
d0:65:77:92:02:f4:34:a8:c9:67:14:e5:c4:82:ac:
99:ef:12:c4:3f:ee:d7:d8:9c:01:92:c8:30:4f:e0:
8c:19:bf:dd:94:45:c3:a4:91:ba:42:59:07:bf:9f:
6b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:13:AC:9E:7F:99:B7:93:35:14:B0:CC:4E:E6:5A:5B:77:65:BA:A0
X509v3 Authority Key Identifier:
keyid:CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:43:b1:19:2d:2e:0d:b1:be:a6:e5:e2:42:fa:d7:60:a3:2a:
91:73:dd:11:5c:da:25:6c:72:83:63:66:b9:e9:1a:9c:d6:c0:
3e:cc:1b:5b:dd:81:6d:8f:7a:b3:fd:fe:54:da:49:db:74:80:
22:e1:41:0b:f7:63:6e:c1:c5:31:03:98:1d:61:7a:69:a2:f6:
f5:a8:0a:d4:ee:7e:68:67:54:11:e8:fb:54:06:40:e4:b4:21:
05:f5:90:24:39:7f:eb:eb:82:d0:4a:5c:c4:ec:84:05:35:f7:
26:46:64:f0:5a:92:91:5e:90:65:c5:77:ae:be:7b:ba:8c:a4:
a6:64:cd:c8:6c:72:77:65:16:c0:fa:46:50:f2:1a:7b:ab:18:
04:64:1b:cc:36:b5:bd:bf:53:a7:fb:f1:9a:14:9a:45:d5:de:
ed:90:c0:6f:06:e6:ba:a3:c7:46:8a:df:f9:5d:53:80:cd:0b:
dd:1b:a2:98:64:37:00:f0:0c:96:2b:78:c3:ce:19:bf:5d:49:
21:9f:1d:00:5e:40:59:ac:06:7f:61:0a:54:26:ef:ea:2d:cb:
c3:1e:c3:e5:03:15:94:83:18:6b:b6:57:aa:bb:b0:d3:22:0d:
6d:2b:ce:7b:94:f3:5f:97:e2:8c:8d:94:6c:c3:41:0d:67:46:
3c:7e:81:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:27 2026 by rpki-client