Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
File: zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft (raw, json)
Hash identifier: SOdiAwSTiy2kQNxGb/aTVepVdfC6ELYZuQGYfjgIevY=
Subject key identifier: 06:F5:95:AC:B4:A0:FC:7D:07:7F:B2:29:C4:51:F5:4E:FA:71:A2:C1
Authority key identifier: CD:7E:E4:B0:32:79:96:30:4C:F1:8A:12:8E:26:55:78:0C:9D:6B:9B
Certificate issuer: /CN=cd7ee4b0327996304cf18a128e2655780c9d6b9b
Certificate serial: 019D26CCFC61E60E015F5E23EE782A4E7811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
Manifest number: 0E22
Signing time: Wed 25 Mar 2026 21:01:01 +0000
Manifest this update: Wed 25 Mar 2026 21:01:01 +0000
Manifest next update: Thu 26 Mar 2026 21:01:01 +0000
Files and hashes: 1: Q8ZJJ74q6bMVlfcvJJudps61QXo.roa (hash: 3ZMgLTga1etNt6/GjM7UgVlhZAFMLoY4B0xB96tmQlk=)
2: zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl (hash: gb1KfMyVE4fSqYIv/JkRZL9ygEWnaS6bOW2/vxbasD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:fc:61:e6:0e:01:5f:5e:23:ee:78:2a:4e:78:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7ee4b0327996304cf18a128e2655780c9d6b9b
Validity
Not Before: Mar 25 21:01:01 2026 GMT
Not After : Mar 26 21:01:01 2026 GMT
Subject: CN=06f595acb4a0fc7d077fb229c451f54efa71a2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:91:db:f0:bc:7d:4b:b4:2d:93:72:ec:a2:8f:
bb:4d:16:8c:94:63:94:f1:c4:4a:39:72:4b:6e:cd:
6e:cf:40:1a:d1:7b:98:16:38:ae:29:60:a6:4f:71:
23:c0:e3:aa:fe:50:10:61:78:7d:d7:09:c8:f2:2d:
ed:e7:09:7f:dd:69:8a:23:19:65:87:b2:18:00:8a:
4a:34:59:2b:3c:7a:9e:4e:5d:c1:cd:d4:fd:47:6b:
ff:da:fd:83:1c:ae:1b:02:e2:cb:7e:94:4b:b0:72:
8d:3f:ff:bf:2c:5a:bd:00:e4:c0:e7:89:b1:3c:db:
b5:c1:f2:98:a3:ba:30:6b:0f:01:63:ee:61:32:35:
24:12:bf:3d:54:72:35:7b:69:c1:ce:18:21:9d:bf:
0d:21:8a:71:a8:05:14:b9:3f:e5:fd:56:6b:9f:a8:
bb:31:63:a7:37:c5:dc:f3:98:f9:57:62:e0:b0:3e:
79:b5:fe:aa:ca:fa:c8:2b:28:2b:81:97:8d:03:fa:
90:a8:2d:68:db:97:c8:f7:69:2a:f1:a3:0e:30:d8:
ad:37:46:bb:af:7c:0f:d8:06:73:a5:19:c7:27:f1:
61:13:75:06:11:8c:e3:6a:12:aa:05:03:12:60:35:
b4:61:e9:1e:8c:ff:9a:09:e3:d0:5a:cd:d1:e3:46:
b8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F5:95:AC:B4:A0:FC:7D:07:7F:B2:29:C4:51:F5:4E:FA:71:A2:C1
X509v3 Authority Key Identifier:
keyid:CD:7E:E4:B0:32:79:96:30:4C:F1:8A:12:8E:26:55:78:0C:9D:6B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d6:0e:84:0d:c1:e0:86:72:8e:50:87:a2:f6:c1:83:82:e4:
03:b9:03:21:f7:90:1c:a7:0e:d7:21:25:4e:46:e1:16:1f:82:
88:23:c6:a5:35:44:62:b2:ea:c7:45:9d:7e:b1:fe:9d:6f:a5:
2b:be:3b:8f:62:d7:3c:62:36:9b:81:fd:af:41:e1:87:e9:2c:
e8:2f:d0:5d:8a:8b:34:2d:6f:ba:c4:d6:97:31:0d:e3:df:32:
cb:19:03:1e:86:2d:0d:7d:b2:e4:88:62:c3:77:2d:7f:be:0f:
1b:da:31:72:51:a9:ca:29:c2:ca:06:64:88:e5:60:a3:64:49:
9b:3f:0f:b1:46:07:57:8e:13:b2:98:3f:ea:c5:5d:fe:46:36:
a1:1c:6d:9b:8a:e3:d7:2a:25:86:64:24:68:97:8a:76:44:03:
d3:11:99:70:04:c8:d1:1f:95:94:68:7a:9a:37:61:a7:26:b7:
5e:4b:d9:b0:a0:09:6b:af:68:ae:00:52:cc:ce:0f:c7:d7:ce:
41:87:11:c8:7f:c6:7d:ab:a7:f8:7b:34:76:cf:98:b2:29:fd:
dc:e1:10:7b:84:64:f0:80:44:d9:7b:b3:9a:87:19:71:12:8f:
92:a4:9d:0a:cb:76:24:9c:15:67:6a:9f:bd:d1:8b:2f:c3:06:
df:43:a6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:27:27 2026 by rpki-client