Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
File: znGAxLrTz0JaUGcuHLep0qx44gw.mft (raw, json)
Hash identifier: 5gN/C/T1+KxF2qD5aCJFp/sJK0yy6THXz9MFwRGaCoM=
Subject key identifier: 6B:3F:A4:FC:D2:CB:79:62:E9:79:88:2C:69:16:34:3B:C2:64:B6:69
Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Certificate serial: 019D33AD331B7C539D5C84BE5B59E281DD06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
Manifest number: 1534
Signing time: Sat 28 Mar 2026 09:01:21 +0000
Manifest this update: Sat 28 Mar 2026 09:01:21 +0000
Manifest next update: Sun 29 Mar 2026 09:01:21 +0000
Files and hashes: 1: CmEbUhenhDmMKvHKSkFpe9LG8X0.roa (hash: Jsb+hfYBWXp4dm2lj3dTAoFqYAK6O+6kl4dBC77ANZE=)
2: GtNJ0lmoQ9ZuqCpl3-J4Re7um1k.roa (hash: OD5qNfz5l9josRO/cRdoZZIkXHpha2NNc9udJTgh6/s=)
3: SQ9ZxRxAMd1xoAu9tA2c2yS9YUQ.roa (hash: MYiap9ADnfYQb/YwxbWyM4PVhhzPTbhg8edINlxn310=)
4: znGAxLrTz0JaUGcuHLep0qx44gw.crl (hash: Bps+VMhdkBraMfo3aERc/a5aDZV4l26T80qoniIbpPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ad:33:1b:7c:53:9d:5c:84:be:5b:59:e2:81:dd:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Validity
Not Before: Mar 28 09:01:21 2026 GMT
Not After : Mar 29 09:01:21 2026 GMT
Subject: CN=6b3fa4fcd2cb7962e979882c6916343bc264b669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:19:e5:13:a5:20:fa:98:8d:21:db:aa:61:a2:
ef:ab:5d:ea:d4:7e:4b:3f:77:76:4b:6c:8c:df:df:
73:16:0f:55:01:04:23:ee:83:01:e0:b9:10:fb:0e:
1b:9c:f8:3a:73:80:fc:44:ca:4c:73:0a:08:94:28:
03:28:99:81:af:93:5b:8a:d9:89:21:7b:f2:7c:ac:
fa:fe:c6:44:79:4d:f9:c9:05:d9:2f:76:61:c4:30:
fa:48:f0:cc:ff:10:44:90:dc:9a:d8:35:19:4e:9d:
67:dc:e9:ab:02:27:b2:b4:43:c8:cf:30:e7:08:d1:
02:44:31:79:0a:1a:3a:75:d4:3e:b4:d5:4c:97:94:
0c:a0:92:3c:24:a6:ed:d9:23:ee:de:09:a9:27:65:
ea:6f:bf:b7:38:63:8e:38:5a:ae:d6:fd:45:43:7f:
1a:e6:85:0d:f8:88:0a:7a:b0:7e:d3:a6:da:66:0d:
64:1a:6d:52:65:88:24:0e:d3:0b:14:f0:e5:d7:44:
44:31:18:ae:40:f2:4a:3a:6b:6f:b9:94:df:6b:db:
5d:95:cd:d3:d7:0b:a2:85:48:d0:e3:fb:2b:4a:dd:
33:a3:6e:f7:ec:5e:4a:98:cd:5a:a0:22:08:46:86:
ea:ed:2c:a6:37:86:e9:45:5f:72:bd:ec:89:cc:d9:
a6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3F:A4:FC:D2:CB:79:62:E9:79:88:2C:69:16:34:3B:C2:64:B6:69
X509v3 Authority Key Identifier:
keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:bf:bb:af:ee:37:2c:da:89:11:fe:54:8e:85:10:e6:f3:81:
2d:c7:dd:ca:90:0a:56:b6:05:0d:3b:66:3a:a4:09:a8:93:ed:
ae:fa:3c:a4:ac:e1:43:e3:e8:7c:1a:69:ba:5e:db:f6:41:9b:
a9:5f:b5:60:93:8c:b8:38:a2:e8:18:ef:df:df:25:5f:67:2b:
d8:22:06:01:10:17:fb:90:fd:86:23:e2:3e:33:37:bd:36:de:
99:55:eb:b5:b2:78:65:91:97:ef:e0:92:3e:42:b2:1b:1a:fd:
48:54:66:89:c8:30:b6:d9:c7:ce:82:54:9d:90:fa:ac:44:56:
30:e0:31:b1:93:fa:5a:d7:38:fb:70:46:23:61:72:c7:07:ab:
10:54:0f:55:bf:77:aa:8d:fc:d1:bd:7a:59:5c:20:01:68:61:
43:6a:35:a8:a5:27:3c:aa:fd:53:a0:f3:3e:1d:1f:4f:91:27:
b1:c5:ea:e4:f5:de:54:4c:43:c4:38:49:22:ff:31:04:e9:b1:
55:7e:e8:96:8a:c6:27:2d:1a:25:a2:79:b2:0c:2d:6e:cc:18:
86:26:be:bf:28:f7:22:e6:ce:2c:47:a8:d4:6e:7e:b7:29:ca:
4f:0e:bf:3f:dc:db:a4:3b:fb:79:2a:73:cf:22:34:31:49:69:
7c:a4:2a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:13:20 2026 by rpki-client