Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
File: ZZb7iaiiPL5PKtsWXInybeireHY.mft (raw, json)
Hash identifier: wJ1zffXH5o0uy+kTdTplbG8dQvxzxJtn+Agvot7B27c=
Subject key identifier: 2D:8E:D8:EB:0F:D7:A1:E7:7D:E1:31:46:5C:51:13:78:22:9B:35:0F
Authority key identifier: 65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
Certificate issuer: /CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Certificate serial: 019D27DFF1F836BD73E134194C4736787ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 02:01:21 +0000
Manifest this update: Thu 26 Mar 2026 02:01:21 +0000
Manifest next update: Fri 27 Mar 2026 02:01:21 +0000
Files and hashes: 1: TskBRorPbivXUk_iUbLUxu34o40.roa (hash: SSq2isSE8Y0yEi7EArCYQ3vmU4quGSz5WkWK232VWsU=)
2: ZZb7iaiiPL5PKtsWXInybeireHY.crl (hash: gJm5MNOEaWZhpJtWBD+5WdKPxQZ78iLjtrs/3zpC9L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:f1:f8:36:bd:73:e1:34:19:4c:47:36:78:7e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Validity
Not Before: Mar 26 02:01:21 2026 GMT
Not After : Mar 27 02:01:21 2026 GMT
Subject: CN=2d8ed8eb0fd7a1e77de131465c511378229b350f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3a:b7:48:82:ca:d5:76:ee:23:83:cc:3a:a6:
84:4b:4d:60:9e:3c:db:b2:05:25:39:98:fb:25:5c:
5a:2a:67:cb:b6:fd:4b:a9:4d:57:28:d3:48:ed:e5:
9b:6b:bc:5e:fb:7c:33:29:04:1c:ac:8c:ff:7f:56:
5d:62:fd:48:3c:c8:12:7f:05:4a:0b:c3:20:48:b3:
83:95:29:1f:d6:bc:97:42:fc:bd:c5:a9:15:aa:9b:
1f:c4:cf:ef:2c:ad:71:56:e2:02:bd:0c:cc:c3:0c:
62:8d:4f:4f:87:03:32:59:f5:38:d9:d9:b0:c7:6b:
eb:9f:89:db:06:d0:78:bd:2e:d9:d4:bb:d0:6f:78:
57:4e:26:de:c3:42:e6:60:03:29:d7:1f:a2:da:de:
58:31:e5:e2:81:83:45:e1:3c:dd:c5:7b:b8:71:2f:
fe:3f:89:db:24:14:83:93:ff:f7:4a:79:0a:5b:79:
60:1f:ea:52:94:08:83:8e:72:f1:9d:ab:d6:c2:d7:
10:70:99:85:af:bb:34:c3:c2:f5:f6:e8:7c:f3:ff:
1e:4c:3a:a3:ed:25:39:7f:cb:ac:da:2b:27:89:55:
99:42:76:97:a0:e6:b8:7c:39:82:42:ec:e5:b5:7d:
11:5c:f0:d9:10:85:83:42:b0:8d:60:c8:4f:4a:18:
92:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8E:D8:EB:0F:D7:A1:E7:7D:E1:31:46:5C:51:13:78:22:9B:35:0F
X509v3 Authority Key Identifier:
keyid:65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:62:2a:6f:0d:75:c4:ce:e6:b6:1d:b6:f7:3c:e2:43:c5:1f:
03:0d:be:36:10:01:f4:79:9b:e9:49:5a:5c:ea:f4:75:24:dd:
5a:0d:4c:c8:8b:b9:fa:f2:e7:26:c9:bd:cc:0a:62:8c:2f:ec:
d3:0b:b3:3b:f2:ec:02:ed:e6:a7:4f:74:19:67:40:6e:ae:39:
06:1d:f3:64:74:c3:a3:15:19:a8:52:ae:fb:c6:27:1c:2c:2b:
6b:2f:58:94:49:8e:a6:0a:d6:ed:5d:8b:d3:20:b8:04:16:d3:
22:5a:19:d2:fe:79:77:b2:13:52:a9:0d:3c:2c:b5:14:10:76:
23:e8:11:04:b3:1b:4e:21:30:e0:32:b9:f0:c3:59:d1:1e:e6:
5d:fe:5d:65:a8:35:15:4a:d8:01:7e:9c:92:4b:cd:11:fb:1d:
0f:a3:5c:51:23:fe:1b:dc:ea:88:26:44:ca:c5:56:67:4e:bc:
7a:e8:d5:a3:4b:9b:d8:89:0b:c6:31:ad:1f:17:e9:73:23:2c:
f3:9a:d5:9c:3f:42:c5:86:c6:5c:1b:74:97:b4:00:35:00:3e:
a1:c4:c1:5b:82:d0:cc:38:46:43:aa:86:ca:d6:ce:f9:5d:39:
90:24:45:8f:eb:21:c0:c1:68:7a:81:aa:46:31:6d:dd:c3:7f:
54:5c:ec:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:41:11 2026 by rpki-client