Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
File: zr9l4AadvMdre1VujB1wWInfJ-k.mft (raw, json)
Hash identifier: stP+j50e+unsd6Id4HeDGOiltcSmX9kdRM+zmq7Lhbk=
Subject key identifier: 21:AA:F9:3F:33:7E:13:63:65:EC:5A:B1:DD:39:D8:09:24:52:52:04
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 019D29616AD1CB2AE2E78632B063248F0971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
Manifest number: 1896
Signing time: Thu 26 Mar 2026 09:02:23 +0000
Manifest this update: Thu 26 Mar 2026 09:02:23 +0000
Manifest next update: Fri 27 Mar 2026 09:02:23 +0000
Files and hashes: 1: fpYgYHcSe1IMtLQuQ8ZHZS6M188.roa (hash: lFEjpgx0+Rqia9Wt28o4eVjHYzMi3xg620xweR16lkU=)
2: zr9l4AadvMdre1VujB1wWInfJ-k.crl (hash: YQnsr/HgesJ168pdW+dy0g723QwxyUeZfebQ5DY5Jaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:6a:d1:cb:2a:e2:e7:86:32:b0:63:24:8f:09:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Mar 26 09:02:23 2026 GMT
Not After : Mar 27 09:02:23 2026 GMT
Subject: CN=21aaf93f337e136365ec5ab1dd39d80924525204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:92:01:a1:09:e6:10:f0:9c:11:de:ae:10:f3:
f8:57:15:f3:c7:cd:94:f1:f5:c3:b1:83:c7:bc:c4:
fe:c2:a2:06:d2:ed:80:b1:58:9e:c4:71:55:9a:6b:
82:b2:2b:b0:c8:ce:d0:76:06:7a:9f:e1:f9:f6:4a:
80:7d:ca:11:3b:01:ba:4d:bb:a6:3b:6b:db:3e:7e:
51:37:78:5e:f3:03:8b:23:fe:9a:c5:d5:4b:99:5b:
ed:04:77:36:82:15:32:d8:fb:c7:9f:37:6e:77:5d:
66:ac:69:49:0d:eb:5a:3c:75:a3:6c:6c:d5:c9:44:
0a:07:16:33:0f:54:65:0b:69:7d:94:fc:1f:e2:00:
ff:94:8a:f3:c0:a2:a7:3d:77:c0:e9:1f:e1:c6:3d:
a1:cc:53:4a:ae:87:03:12:e8:95:e2:d9:05:33:a1:
b9:f2:9a:85:66:87:9a:ad:e0:d1:85:f2:80:d1:52:
6a:2c:81:b3:1c:df:d7:cd:ad:eb:00:06:1f:35:41:
dc:a2:64:ec:f6:b3:a0:f0:a0:88:8e:fb:cd:38:92:
8a:9e:09:d2:e0:6f:ab:5e:64:71:ad:de:06:cf:b2:
71:10:40:82:f4:ac:a1:f5:0c:6a:4c:58:4c:8e:d7:
7d:f4:a5:58:32:4f:d6:2c:c6:28:38:31:fe:5d:6f:
8d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AA:F9:3F:33:7E:13:63:65:EC:5A:B1:DD:39:D8:09:24:52:52:04
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:3c:a7:f4:c6:53:11:a2:ca:ea:12:4e:94:2f:78:3e:b2:41:
5c:bf:d4:1b:ad:59:57:66:06:c5:f6:b1:a1:45:cd:d8:ec:f6:
0e:5d:91:7c:f0:ba:5d:83:7f:d5:ed:2d:a7:73:3e:de:d6:b5:
b4:a0:bd:fd:8e:ab:ee:6f:8b:fa:92:ee:4b:df:e2:d9:a0:f3:
11:50:e4:de:7b:03:86:74:cc:61:b3:31:b3:49:a7:22:13:e2:
7a:e6:2c:88:5a:35:ab:08:7a:bb:79:3c:56:f4:21:bd:bd:ce:
58:7b:6b:42:50:d9:c2:60:97:4d:93:71:58:65:41:39:92:91:
c2:9d:6b:f3:23:33:c3:a0:79:e8:1d:9b:5e:1a:a8:8d:10:37:
75:c1:bd:f2:50:ce:7c:32:b7:90:93:61:03:24:1d:7f:42:42:
da:02:9d:99:68:f2:d5:ef:72:95:6f:cf:f6:5d:36:0f:26:31:
3d:ab:b5:34:69:6a:59:f1:0d:56:d4:ff:f1:c7:d0:79:e9:2f:
49:4d:0c:4f:ff:e9:c0:d9:8c:a3:a6:61:f0:4c:af:46:5b:df:
c2:b4:8a:68:6e:5e:41:ea:7f:a3:99:15:ed:84:c7:17:00:0e:
28:37:96:ae:e4:f7:6c:5b:95:8c:e0:16:bb:9b:fb:b1:8a:5e:
80:bb:ac:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:14 2026 by rpki-client