Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
File: zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft (raw, json)
Hash identifier: I3z7DBKWyqFv4sCCao2CdMx5KuRB2MMcMQvCtUYtPog=
Subject key identifier: 25:95:87:E5:EA:6B:3D:37:64:59:28:36:88:F7:39:01:C6:D9:8B:F2
Authority key identifier: CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3
Certificate issuer: /CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3
Certificate serial: 019D2A04819E28C601C001FBB907C0947193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
Manifest number: 1548
Signing time: Thu 26 Mar 2026 12:00:31 +0000
Manifest this update: Thu 26 Mar 2026 12:00:31 +0000
Manifest next update: Fri 27 Mar 2026 12:00:31 +0000
Files and hashes: 1: zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl (hash: Jd/e9pgC2CgXR/mbcQXqR4Wb8vA8t68uzm4ToCs2xZw=)
2: zsJeYAbKofBpijDlV1JN21oSRPc.roa (hash: i7qvLARvFAbwyr2d6HJClZJICp4QULfuGH4ozBybTr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:81:9e:28:c6:01:c0:01:fb:b9:07:c0:94:71:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3
Validity
Not Before: Mar 26 12:00:31 2026 GMT
Not After : Mar 27 12:00:31 2026 GMT
Subject: CN=259587e5ea6b3d376459283688f73901c6d98bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c5:00:99:f0:eb:e5:1a:98:46:31:30:5a:a9:
a5:49:5b:fe:03:f9:92:74:60:fd:21:6c:af:fd:33:
50:75:32:c2:3a:00:9c:75:8e:88:63:73:45:be:d0:
04:6e:34:f8:49:0f:33:10:9d:d1:88:95:3d:9d:c1:
f2:69:aa:e2:d1:1a:c1:b1:45:45:1b:2f:d9:92:15:
b1:01:53:8c:41:1b:7f:28:50:f6:9d:ed:01:42:0c:
5d:56:04:51:68:6d:5a:ec:0e:ad:a5:55:81:ee:ae:
79:66:6e:ae:1c:7a:cb:ad:bc:bb:71:49:e9:71:9c:
9e:23:4a:3b:ac:ab:9a:c9:54:2e:88:84:1d:6c:11:
68:93:84:c5:54:a3:4a:e2:84:2c:55:e1:dd:76:c7:
51:a3:5c:df:d8:70:33:0e:20:45:47:93:fe:06:91:
b8:73:96:be:e3:18:f2:c2:5d:bb:f3:43:aa:85:18:
58:dd:64:8d:35:e4:69:8c:ba:94:e8:7d:8c:66:4b:
6b:34:00:08:c8:c6:2f:40:cc:4a:d5:12:9b:94:72:
7d:51:77:0f:8e:47:1f:4a:3c:09:6d:d8:74:17:ff:
00:23:52:43:09:09:ef:5a:ae:ef:3c:10:40:6e:6d:
29:48:24:eb:3f:57:96:63:05:f6:d3:25:66:ea:3d:
ab:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:95:87:E5:EA:6B:3D:37:64:59:28:36:88:F7:39:01:C6:D9:8B:F2
X509v3 Authority Key Identifier:
keyid:CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:eb:b4:6c:46:2d:7a:47:a8:00:ef:27:d7:a2:7f:d5:e7:08:
c7:ec:c2:b2:80:75:7d:5b:ce:0d:38:dc:3c:2d:c3:83:31:10:
ab:ba:a4:35:f2:e5:bc:24:56:21:77:18:78:1e:63:dd:f0:68:
11:83:3d:3d:55:7a:1d:7d:48:ca:3d:2c:f3:07:fb:70:ae:42:
67:7f:29:66:df:f0:bc:ec:28:7c:8f:c2:94:6c:35:31:5e:f4:
27:bf:ed:88:30:b3:f8:35:c8:10:c3:a2:56:2d:6b:03:40:ce:
46:94:62:34:57:79:6b:93:9e:45:17:6b:5b:a3:14:11:1e:b6:
c7:07:2f:d1:1d:cc:c5:97:cd:d4:16:bb:a7:2c:7b:24:51:47:
09:82:2e:32:b1:0f:60:51:49:ab:70:76:f3:2e:98:e7:15:ba:
78:1f:24:3c:4b:a7:c5:92:f2:2c:ef:00:79:cc:22:6e:68:96:
de:26:de:1f:4e:0e:f0:e7:76:44:de:f8:0a:15:63:0d:37:37:
43:b1:15:95:cf:d0:64:5c:83:4e:81:b8:d6:10:2e:56:e0:15:
af:d3:a5:ef:9b:75:fd:1f:5f:10:21:71:5e:dd:5f:97:b6:b2:
9a:d9:c7:c9:e3:20:a5:80:af:45:77:0a:a1:df:39:da:0e:37:
e6:cc:69:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:26:23 2026 by rpki-client