Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
File: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft (raw, json)
Hash identifier: CurB1iMPdg2YRB+9/qK2+M1QKB9t0DOQv3adxP/AGxg=
Subject key identifier: 9B:2E:59:B9:E0:42:F6:CF:2A:46:F7:ED:71:24:0F:00:8D:B5:DC:BE
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial: 019D25F13718125D26E20D9080E42E78C626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
Manifest number: 07D4
Signing time: Wed 25 Mar 2026 17:00:58 +0000
Manifest this update: Wed 25 Mar 2026 17:00:58 +0000
Manifest next update: Thu 26 Mar 2026 17:00:58 +0000
Files and hashes: 1: 5Vvt0AbvSxWyjAd-ALv69QCsNsk.roa (hash: 5/TeIgyVfAlprXjl0P+4FxuBA+lZL0C59tR8RwJwnQM=)
2: Cr-_Jks4-Nf_6cTAfqEm2bEkrqY.roa (hash: Lfoyt36d2xlYMQKhlmP8HR47UA8DZd6j01qEp/DuwGg=)
3: GElj9icCt-w2mx3YliBHFVCYPPg.roa (hash: PirS1DKcgnSFMhly0KbVf5RAZaqtFd0hZcWS32fEx7s=)
4: RGRGMmzLxpqCQOW-phn3KT39D9s.roa (hash: ZUPL8DNkteQ3PG2vzMcT8okE7rH1FO2YVjvr69odfCY=)
5: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl (hash: R61JPRG6yCRC6OGU/saB04RogW8LRhAQVIHxcUiGhyA=)
6: _LFVw1RdLCWt-By3DgXS7TEwY-g.asa (hash: 7sp68pc4lJoudoB6GmnBQDPxVv/dJsT1KjSRKMkEvH8=)
7: gTAiJcqXUVhZkR4ZXv2cVDvzjVw.roa (hash: H8wggrXDtCuk8Xa7cBwaDqzCfoO3HXFepBg70R4642M=)
8: m1QjC3UV2Ny4UxXqYlT4s7dYaFg.roa (hash: 6V+rFBPB+VWm7if/CwhSgG0t42lVGrHbuCda8HK7Mzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:37:18:12:5d:26:e2:0d:90:80:e4:2e:78:c6:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a665b90069bd71850602e7400c529793269e39
Validity
Not Before: Mar 25 17:00:58 2026 GMT
Not After : Mar 26 17:00:58 2026 GMT
Subject: CN=9b2e59b9e042f6cf2a46f7ed71240f008db5dcbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:68:85:28:c2:f8:be:82:dc:80:71:c9:6b:ae:
f1:7a:66:23:21:84:cc:ea:c8:25:19:56:2b:44:01:
d1:88:64:5c:6a:f0:61:80:5c:fb:c3:02:83:0b:6c:
18:47:ce:af:24:13:85:f8:24:5e:a3:b0:33:86:6e:
0a:96:fc:14:8c:48:a4:8e:fd:80:ac:16:04:e1:e7:
4b:76:34:cb:f0:a2:a6:13:77:2c:3c:5d:e7:52:1b:
16:91:d9:ba:03:24:3c:4e:f0:c5:1b:7d:32:e4:71:
ba:f1:76:36:b0:41:4d:7f:ab:07:e1:50:d4:8a:25:
7b:ed:f4:96:07:05:30:44:02:7f:78:21:94:41:9b:
10:81:bc:c2:6a:36:49:bb:e6:5b:83:5c:8a:d7:04:
88:f6:56:42:09:3c:3c:02:a6:7b:c0:42:a4:84:16:
19:53:64:56:bf:45:7a:a4:c8:40:0a:7f:ca:59:97:
f1:73:4c:1b:28:8b:e3:cb:9c:cf:7a:12:e1:bf:4b:
0d:2c:bd:1f:58:c4:0e:ad:f3:c3:3f:a4:b3:bb:e1:
e5:26:07:ef:25:fc:a6:8e:de:60:a7:e4:47:6b:a8:
22:fc:a8:4b:5f:f0:1f:fb:d1:9a:db:cb:4d:ee:d5:
87:9d:ce:82:47:1d:88:5e:51:81:ff:45:8d:3a:09:
99:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2E:59:B9:E0:42:F6:CF:2A:46:F7:ED:71:24:0F:00:8D:B5:DC:BE
X509v3 Authority Key Identifier:
keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:4a:e1:92:7b:26:a5:38:2b:a7:98:28:44:08:dc:dc:25:31:
37:68:00:cd:d8:d4:dd:e6:bf:0b:c5:77:ed:df:d1:6b:cc:58:
c5:04:62:91:85:e1:10:12:3a:8b:0b:56:cd:3c:ed:22:3e:d0:
09:23:59:fe:b8:d4:68:a6:4f:94:41:ad:a5:5e:74:a1:63:34:
05:d7:ce:fe:90:94:ba:33:ac:6f:d7:45:d5:41:bf:d4:f1:86:
e5:b9:45:33:3e:e9:33:e8:4f:fa:9c:54:5f:fd:09:6b:c1:7a:
12:8a:f5:4a:d7:38:90:db:94:7d:9c:fd:7a:3c:f2:b8:88:7a:
07:ea:df:19:b2:88:b1:3b:52:4f:72:35:17:fa:01:18:9f:82:
03:c6:05:71:f8:bd:7e:89:66:e9:97:b1:4a:90:04:8f:7b:09:
9b:16:09:f1:5d:fa:0c:c8:5f:7a:2b:5d:83:fc:ea:77:52:96:
42:48:fb:dd:6b:0a:09:7f:40:d6:b3:9b:b6:50:0b:fc:ef:4d:
72:83:ad:0b:28:4b:55:0b:98:95:dd:64:23:d2:93:ec:06:89:
ae:12:1c:4e:c4:1f:cd:52:8d:34:de:c6:60:ff:b1:b5:df:b6:
ed:bf:61:6d:eb:e8:cc:e8:58:fa:03:71:53:36:9b:8e:bb:6b:
28:32:c1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:24:40 2026 by rpki-client