Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
File: ZCOaUQhPGytcaEZDysFGIXx5-NE.mft (raw, json)
Hash identifier: 6g328FD0/a0k/t74Eb1yhx0WUM1AQe9k+MtW1jlYYuY=
Subject key identifier: 3C:CA:6D:B5:86:9D:B4:50:41:64:48:51:2A:16:21:43:A8:90:7C:9B
Authority key identifier: 64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1
Certificate issuer: /CN=64239a51084f1b2b5c684643cac146217c79f8d1
Certificate serial: 019D2816DD1E258DA7DF832A6BCB74045A9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
Manifest number: 0BC2
Signing time: Thu 26 Mar 2026 03:01:20 +0000
Manifest this update: Thu 26 Mar 2026 03:01:20 +0000
Manifest next update: Fri 27 Mar 2026 03:01:20 +0000
Files and hashes: 1: 4ImyGgFKvZr9G9AC8qgE9m3Cntc.roa (hash: YciKFVkaY1et6p1gervIPcpyQE7yFFy/esyiuxYNcNY=)
2: ZCOaUQhPGytcaEZDysFGIXx5-NE.crl (hash: DmVkJxiMWks6E+LzLHMzTTaahAY5shO+zMyhFUz2dTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:dd:1e:25:8d:a7:df:83:2a:6b:cb:74:04:5a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64239a51084f1b2b5c684643cac146217c79f8d1
Validity
Not Before: Mar 26 03:01:20 2026 GMT
Not After : Mar 27 03:01:20 2026 GMT
Subject: CN=3cca6db5869db450416448512a162143a8907c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:b9:d9:52:cf:aa:3f:b4:bd:b0:eb:c2:08:
8a:08:c4:79:a1:a9:75:4a:e4:3b:8f:5f:36:69:f6:
4a:f1:35:a8:df:75:d7:e2:a0:7d:b0:6a:db:f9:65:
00:1f:65:bf:67:e2:22:e0:06:65:f7:08:5e:58:f5:
0a:f3:5a:0e:3f:73:3f:03:6a:65:43:b4:4c:63:f9:
ac:8e:43:81:b9:a0:a3:fa:4b:10:2f:0d:b7:bb:16:
4d:ff:e3:bf:9d:f5:31:30:64:46:64:24:43:e8:25:
2c:eb:dc:b8:e7:c9:2e:eb:f0:ea:d5:4c:7a:33:52:
5c:ce:76:09:6f:ed:0e:b5:bf:e5:8b:fa:93:45:70:
0c:14:55:b1:cc:c0:21:b2:57:8c:0e:e7:8c:24:c6:
5f:05:74:81:1a:eb:98:ba:45:21:37:21:91:4e:3a:
46:83:82:db:00:19:3d:a7:5e:51:c1:ac:61:ea:85:
cf:48:9b:6f:7a:a0:5c:62:c3:21:2a:e8:b3:da:9c:
d1:03:5c:33:0f:0a:34:8e:07:4b:94:a5:b4:6b:89:
aa:23:da:3b:7a:bc:1e:52:43:c2:51:af:c3:8e:94:
69:3b:4e:3e:1e:2b:ab:87:7e:8b:17:25:10:76:e2:
0b:f6:77:c5:d4:97:f1:54:18:31:9c:0e:fe:cd:10:
8a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CA:6D:B5:86:9D:B4:50:41:64:48:51:2A:16:21:43:A8:90:7C:9B
X509v3 Authority Key Identifier:
keyid:64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:56:66:27:e8:3c:7d:0e:f0:01:6c:d5:61:82:64:0c:b4:12:
97:1a:ee:a1:23:b6:78:25:61:07:04:2b:e0:ce:7f:69:1f:00:
d0:8a:7e:6a:3a:b5:95:4d:8c:74:38:a8:14:3d:32:43:ed:69:
6f:64:86:43:77:d8:58:81:2b:6e:0e:2a:61:b1:6c:9f:ac:46:
09:62:29:f9:d6:25:b1:84:04:99:de:7c:0e:ef:92:29:7c:00:
9b:57:90:18:1a:1e:fa:17:ed:8a:64:1c:a2:64:36:d8:d1:d0:
b5:30:2e:7c:42:3f:45:8f:db:a3:bb:1e:d5:22:a8:c5:51:b4:
c7:8b:e2:c1:e9:f2:1d:cd:c6:88:9d:7a:6f:00:33:7c:b6:bf:
1b:11:a5:58:e9:fc:8e:f1:b2:b0:f3:f3:5d:8c:0a:cd:51:1a:
56:11:5f:76:dc:72:d1:0e:99:fd:60:fa:d4:df:e5:8c:15:98:
2d:b5:83:20:3d:26:bd:c7:d9:98:1e:c7:80:a1:f6:d2:61:9b:
02:43:ea:99:51:38:95:c8:64:71:7e:b5:f3:33:a9:1f:79:d1:
79:6b:18:b7:c2:5d:b8:b5:e2:70:1c:8f:41:31:12:e4:7c:c8:
68:9a:e6:e5:a3:5a:66:ca:81:f8:88:86:44:ba:b2:a0:b0:22:
e9:52:c0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:21 2026 by rpki-client