Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
File: Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft (raw, json)
Hash identifier: Voxtxhx4frfvLG49RPw0g1nPTPpAAkgX1SRAobalMUU=
Subject key identifier: D4:3D:9B:F1:50:F7:81:75:24:1F:D2:8A:77:70:F8:92:17:DE:52:A2
Authority key identifier: 67:0E:C5:30:68:39:3D:90:DB:60:1E:C2:95:E4:29:08:52:5E:10:C2
Certificate issuer: /CN=670ec53068393d90db601ec295e42908525e10c2
Certificate serial: 019D284D90916E6B0DC0D07C8A516163A4CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
Manifest number: 0F71
Signing time: Thu 26 Mar 2026 04:01:05 +0000
Manifest this update: Thu 26 Mar 2026 04:01:05 +0000
Manifest next update: Fri 27 Mar 2026 04:01:05 +0000
Files and hashes: 1: Nh6TGiZWo0EOxhMqHLoTd_RYjgw.roa (hash: jvTmWCCcSLAGtI/9GquGJ7vRIPsivGfTGeyKsvphVGk=)
2: Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl (hash: t0rk7wnYrowct322fs3KmlpuXgy7lJ39Wm9tUhBXtBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:90:91:6e:6b:0d:c0:d0:7c:8a:51:61:63:a4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670ec53068393d90db601ec295e42908525e10c2
Validity
Not Before: Mar 26 04:01:05 2026 GMT
Not After : Mar 27 04:01:05 2026 GMT
Subject: CN=d43d9bf150f78175241fd28a7770f89217de52a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:7b:e2:a6:18:c2:c2:5c:f9:88:d0:29:17:
ea:49:a7:5d:58:4b:df:58:f2:f9:99:77:48:5e:f0:
58:00:e3:1b:2e:d7:d7:c6:c3:c2:c5:01:e0:b9:e2:
bd:45:ea:4f:bd:89:17:c5:d5:5d:b0:58:d7:e6:19:
e0:bf:ba:65:31:53:69:5f:91:b0:06:2f:8f:9c:1e:
0c:13:08:f8:09:26:13:e7:4c:3a:1c:5d:2a:66:ca:
29:25:f4:c5:e8:ea:5a:b3:bb:5a:5b:74:28:b1:60:
64:33:e7:d7:c5:26:70:af:66:a5:98:41:13:35:19:
a5:e0:24:d5:b9:d7:7b:32:5a:24:a9:4c:7b:4a:93:
c9:57:0d:ad:cb:cd:78:5b:4e:2b:c8:fd:b8:66:85:
17:03:c3:97:1f:73:a1:6a:0c:5b:50:16:53:a5:f9:
42:49:13:ef:de:a8:77:da:30:fb:64:2e:a8:25:03:
14:0e:56:e1:4c:8b:82:1a:34:d7:ec:d3:ef:40:34:
59:ff:a0:ce:5d:a7:c6:6a:7c:7a:0b:6c:f9:2f:7d:
24:dc:fc:e6:84:ff:d7:d7:81:6a:c5:a2:ee:3c:c0:
5d:06:f7:9d:a8:c2:db:22:ad:84:f2:42:7c:fd:d8:
40:e2:b0:12:64:ad:27:0f:22:00:4e:b5:48:6f:7e:
f9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3D:9B:F1:50:F7:81:75:24:1F:D2:8A:77:70:F8:92:17:DE:52:A2
X509v3 Authority Key Identifier:
keyid:67:0E:C5:30:68:39:3D:90:DB:60:1E:C2:95:E4:29:08:52:5E:10:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:97:71:60:2a:ab:d2:cc:d5:1d:eb:c0:63:c2:73:71:2f:44:
a6:7b:bd:08:d8:44:86:51:25:1d:0f:2f:99:e4:3d:cf:e6:f4:
69:8c:b9:09:f4:7e:9a:68:b1:74:ae:a9:e2:34:b1:e1:93:19:
3d:dd:23:d0:22:03:4a:56:42:ed:bd:6f:1d:7e:6e:c9:a4:43:
88:41:b3:ba:a0:d4:92:4e:a6:d0:52:2c:33:97:b0:87:2a:68:
e9:d5:68:81:dd:31:79:73:ad:41:38:53:50:05:d8:e1:a4:2c:
bf:3c:ee:4a:7a:53:a6:70:f0:c9:7b:bd:4d:34:67:d7:c9:68:
10:31:7f:6a:d2:54:5e:4e:c7:f7:4e:92:c2:fc:c2:bd:c7:1f:
9b:7f:f3:a7:0d:a6:e0:19:53:f7:42:55:de:36:99:d7:84:2f:
f8:6a:88:08:e4:fa:80:46:a9:f5:2d:63:05:31:4a:2a:0d:32:
c5:2e:76:af:e2:7f:2d:ef:51:be:73:b1:4a:33:42:f0:40:43:
34:22:7f:bd:b9:e2:f8:51:52:a8:51:1c:fe:9d:6a:55:ae:f7:
1a:0d:be:f8:e9:34:e8:2a:92:b5:7f:21:dc:9b:26:a3:d1:8f:
c0:7e:d0:ff:b3:90:f9:a5:93:25:67:79:b0:38:6b:5f:95:65:
1e:3a:4e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:26:46 2026 by rpki-client