Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
File: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft (raw, json)
Hash identifier: yq819sYKOmwUc3EDEwnwvdhImXTVrBEqsqZ4dV8xcDE=
Subject key identifier: 33:06:BF:21:B8:57:71:43:6F:8A:69:A7:24:E2:2D:2C:91:84:39:06
Authority key identifier: 66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F
Certificate issuer: /CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
Certificate serial: 019D34512C5EB11C7368A4EE473DBE2AF39A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
Manifest number: 0C89
Signing time: Sat 28 Mar 2026 12:00:28 +0000
Manifest this update: Sat 28 Mar 2026 12:00:28 +0000
Manifest next update: Sun 29 Mar 2026 12:00:28 +0000
Files and hashes: 1: 3FX3dROebXazZ9k_8-Lo5o1qkkI.roa (hash: iLVy4lChJ6R/aX19zh/vuVIS2qDiRo8xZfWhdwKLT/E=)
2: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl (hash: 3cVQG+mV5KrB/M44pG2zwYKl93qfo/OebKbH8y8YeFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:51:2c:5e:b1:1c:73:68:a4:ee:47:3d:be:2a:f3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
Validity
Not Before: Mar 28 12:00:28 2026 GMT
Not After : Mar 29 12:00:28 2026 GMT
Subject: CN=3306bf21b85771436f8a69a724e22d2c91843906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ab:7c:9f:50:ae:b5:ff:c6:3c:f2:c3:60:11:
fc:0b:2d:2f:1b:8d:9d:e3:b1:5d:5f:bd:d1:1a:e1:
9d:db:5e:8e:56:43:cf:94:b8:75:30:52:40:00:25:
b7:12:d2:88:93:61:7a:c7:60:91:41:b0:e4:ce:c5:
8f:6a:5b:ed:c3:77:4a:d2:6f:8d:e5:be:a8:fc:5f:
ba:1d:00:fb:71:0e:54:1c:d9:2e:fe:1c:84:fe:17:
83:11:5d:6c:b4:8f:a1:e0:73:f1:f1:bf:54:1f:50:
33:a4:8c:fc:de:d9:f9:31:79:97:d4:87:9f:ac:ed:
b2:99:7f:57:93:55:04:3d:ed:ad:15:1f:dc:b9:e8:
f9:1f:11:00:da:3a:3a:f0:71:ef:8b:b2:2d:85:4a:
e6:a2:48:56:61:1f:b2:b7:fa:70:a1:ef:37:45:2f:
b1:87:3a:96:34:c3:a7:57:34:ca:65:b4:6f:62:9e:
9c:74:d5:b2:3d:57:e3:ca:5a:ba:d9:00:f9:bc:97:
47:7c:28:2a:bd:b2:cc:ff:9a:9a:8c:c8:c5:97:81:
54:d2:39:29:17:15:68:05:9a:4d:36:a2:8b:8c:d9:
46:2f:12:35:d1:df:11:f2:d4:99:3b:ac:80:3d:8e:
7c:c9:7b:94:be:07:d5:c8:57:fb:47:5f:17:8d:b1:
56:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:06:BF:21:B8:57:71:43:6F:8A:69:A7:24:E2:2D:2C:91:84:39:06
X509v3 Authority Key Identifier:
keyid:66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:50:83:85:27:03:cc:2b:b3:db:00:74:09:cf:2a:23:51:31:
c4:77:15:42:d6:49:dc:86:85:73:a6:95:88:75:bb:57:30:8e:
38:1c:9a:d8:2e:7e:4c:da:27:7b:a4:c6:a9:17:29:34:33:db:
db:91:6b:f4:16:e9:b9:22:df:f4:fa:89:e5:c1:d0:25:73:e3:
7d:c5:58:11:3d:c9:bb:b8:13:f4:d2:f5:49:bf:7b:22:6c:a8:
d6:5b:65:7b:27:2f:3d:07:a6:4b:1b:eb:fd:1b:e5:4a:c7:17:
49:58:f8:b1:9c:86:2f:89:d1:a9:85:51:b0:a8:d3:a6:80:c1:
c1:c0:eb:87:24:97:b9:17:cb:8d:32:d8:76:13:32:7e:4e:54:
75:e3:9a:5b:dc:41:cb:4c:e6:65:a3:ea:07:6a:e2:67:7a:a7:
bd:ee:5f:b0:16:a9:8c:67:78:b3:82:7b:75:77:ef:9b:01:67:
40:e7:b2:0c:05:90:e0:1b:21:7e:f2:43:ad:df:dc:92:bd:ad:
27:89:33:93:1b:59:6b:aa:24:ee:a3:ee:49:cc:68:4d:45:a6:
32:a6:6e:60:6a:42:e5:be:6d:37:be:39:c3:d2:9c:51:7a:e3:
b9:a3:ef:04:6b:81:0a:37:e6:07:dd:1e:eb:75:58:c0:57:24:
4c:ee:98:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:30 2026 by rpki-client