Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
File: ZN7YXZoFsd9omotsMT-BKMegC2c.mft (raw, json)
Hash identifier: lbXwxjNi3MNh5IFcHwR2I4Yz3Ny0BDWVzFKxB2ZwG8Q=
Subject key identifier: F3:32:0A:05:C9:0A:CF:D0:F5:89:E8:04:8D:64:9C:EC:6B:04:87:31
Authority key identifier: 64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67
Certificate issuer: /CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67
Certificate serial: 019D269633749219C45191F817E2A47C3349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
Manifest number: 188C
Signing time: Wed 25 Mar 2026 20:01:10 +0000
Manifest this update: Wed 25 Mar 2026 20:01:10 +0000
Manifest next update: Thu 26 Mar 2026 20:01:10 +0000
Files and hashes: 1: ZN7YXZoFsd9omotsMT-BKMegC2c.crl (hash: oz0Eq0jn5muPvqIUJPEv4E5xzmTyGb89GKB9DNMTnzo=)
2: kcYFoWMu5QoSNf9ceG2n-kODfhI.roa (hash: gkTfw6NqMW7Am2gTmxLPtlhTW10NUd3lUtw+Ko4m44k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:33:74:92:19:c4:51:91:f8:17:e2:a4:7c:33:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67
Validity
Not Before: Mar 25 20:01:10 2026 GMT
Not After : Mar 26 20:01:10 2026 GMT
Subject: CN=f3320a05c90acfd0f589e8048d649cec6b048731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:10:bd:fd:8e:3a:05:49:bc:35:1c:68:56:
69:a5:25:7b:c6:65:59:85:c0:c6:f4:c6:6f:bc:c4:
0e:19:61:59:ad:fe:2b:0a:7b:1e:a9:90:e8:a9:98:
7c:26:40:31:be:8f:16:9c:e7:02:c2:74:11:d2:b5:
36:73:db:2a:f0:4e:78:96:49:8f:ee:48:a7:2c:94:
33:b8:0c:2b:48:e2:d2:fd:b9:95:07:0a:84:90:35:
72:05:00:51:57:44:15:25:d2:a6:c9:76:ee:13:e0:
2e:a9:65:47:b8:25:45:68:7d:81:ce:8a:ce:82:33:
cb:08:e4:05:4e:8f:cf:1a:bc:63:87:8d:16:9d:7b:
57:cd:2a:42:83:39:3d:85:52:93:49:81:14:0a:4c:
df:29:92:26:ed:ca:2a:a0:c0:ba:b9:16:26:7d:df:
ba:fc:e9:83:e1:2f:f0:26:65:ca:24:b2:05:b9:66:
7c:40:d8:6f:1c:46:58:37:65:2a:f4:9e:7d:ff:ee:
89:e5:4d:28:ee:ac:64:c5:74:63:73:7f:c9:ce:99:
23:4d:ec:c5:f9:ed:04:42:e1:f7:12:4f:c6:4e:9b:
1d:e3:33:8d:9a:f3:01:40:5d:d2:bd:1b:21:b2:13:
0b:4e:21:57:5e:99:bc:99:6e:71:f7:33:73:c7:39:
75:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:32:0A:05:C9:0A:CF:D0:F5:89:E8:04:8D:64:9C:EC:6B:04:87:31
X509v3 Authority Key Identifier:
keyid:64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:94:39:fa:a4:de:ef:35:ff:24:d7:7a:aa:4b:5f:22:7a:48:
a4:41:0b:c1:ca:34:5c:a0:8b:61:19:aa:e5:6e:76:c5:3b:1b:
8f:25:1e:c7:f5:d3:de:bf:c6:c1:35:3d:e0:27:22:4c:96:a4:
27:78:d4:17:18:51:ee:6b:b5:83:48:c2:88:7e:5a:83:ce:04:
39:2d:8b:01:05:9c:42:64:51:5f:40:ae:60:2a:b0:e5:bf:69:
71:96:b1:e4:94:f8:25:f3:b5:10:42:49:7a:ee:e2:f5:d6:b5:
69:67:09:d4:68:ed:f6:98:01:4c:61:d8:a9:db:0c:59:d9:bd:
06:32:4a:5a:87:c0:bf:58:c9:08:a4:bd:a2:99:89:eb:8d:d8:
24:f2:c1:f9:4a:0c:76:b4:2d:36:29:ef:28:6c:ea:3e:2c:81:
f8:fd:90:88:f8:a3:66:af:eb:aa:53:7a:fe:86:40:c5:6e:f4:
e1:8d:c3:65:55:42:a4:ed:d2:03:7e:ee:44:ba:c7:2e:ec:52:
e8:ae:88:bf:61:1e:d1:49:81:11:42:db:49:2d:e6:0d:e5:e6:
99:f0:47:62:3a:99:23:12:48:8e:7d:8c:11:40:01:cc:12:a3:
ae:39:69:ad:c3:ca:f9:2b:dc:4f:d2:5a:7d:9e:5b:6c:32:08:
78:29:06:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:26 2026 by rpki-client