Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
File: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft (raw, json)
Hash identifier: 0o7r2FmGKgApXKwtM51uGhAyhXnMY+S8xutIRWd1buI=
Subject key identifier: A6:6B:C2:AF:53:A4:7D:9D:5A:E6:1F:B6:19:6A:5D:EE:51:DD:8C:11
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Certificate issuer: /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial: 019D27DFAD1B676043CC217E855CBFB9F485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
Manifest number: 047F
Signing time: Thu 26 Mar 2026 02:01:03 +0000
Manifest this update: Thu 26 Mar 2026 02:01:03 +0000
Manifest next update: Fri 27 Mar 2026 02:01:03 +0000
Files and hashes: 1: PFi8UqEs0Ce2jyKlXcQsmaVNy0Q.roa (hash: EuK+aiouSE9l8DmSMYUXvpay7owoB5D7UbVEhjSaVSk=)
2: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl (hash: eTjlWDuEoLvvqInrnW4YUQYKYiEmlrzRi5Xndf8BpI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ad:1b:67:60:43:cc:21:7e:85:5c:bf:b9:f4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
Validity
Not Before: Mar 26 02:01:03 2026 GMT
Not After : Mar 27 02:01:03 2026 GMT
Subject: CN=a66bc2af53a47d9d5ae61fb6196a5dee51dd8c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:b8:8d:ad:36:2e:69:a1:63:67:f2:50:00:
aa:f3:3b:c0:a0:f8:7b:4e:39:6b:16:fd:ce:d7:df:
42:7d:be:97:5f:eb:38:c1:d3:60:63:72:a3:1b:c9:
ee:fc:aa:77:a0:ad:33:cb:f1:1c:d7:8a:fa:9e:4d:
80:5b:e2:3c:c2:77:24:86:ef:c3:a5:8c:5b:01:89:
0e:25:79:54:6d:80:8a:e5:12:92:db:4d:d8:74:13:
d1:6b:b0:a2:55:5c:fb:83:aa:18:b2:88:cd:f2:47:
ea:60:cc:53:6a:55:d5:88:6a:ab:ce:d6:e7:ea:56:
93:1c:57:aa:a5:d3:29:83:ff:a4:10:ff:16:8e:99:
e8:60:4b:11:45:5e:43:2b:16:f9:01:ad:c8:b1:60:
b4:19:89:82:77:bb:9b:68:27:53:0e:44:29:61:28:
3a:f4:ef:87:cc:b1:2d:fe:43:03:d9:02:0a:d7:ea:
84:85:2e:c8:0b:81:0b:22:51:88:47:30:63:3c:3e:
cb:be:ee:ac:3f:04:9a:39:1f:4e:56:bc:80:32:79:
7e:95:03:19:0c:2a:5a:22:cc:b7:56:dd:2a:0e:0c:
f5:0f:2f:42:25:31:da:bb:54:80:46:bd:70:b7:83:
eb:84:76:3e:75:fa:c7:1a:c6:95:e5:da:c6:1b:b0:
bd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6B:C2:AF:53:A4:7D:9D:5A:E6:1F:B6:19:6A:5D:EE:51:DD:8C:11
X509v3 Authority Key Identifier:
keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4a:aa:46:00:f5:65:28:e3:77:f8:3d:58:9c:77:de:b4:7d:
5e:a5:a9:77:0a:bd:ef:44:50:af:1b:3a:f3:83:f2:fd:cb:7e:
63:d1:e8:33:6f:bc:9b:80:82:31:ef:c1:99:91:f5:58:7a:dc:
2e:00:f4:c2:89:e6:28:dc:2a:8f:aa:38:d4:7e:b9:fe:cc:79:
43:fe:dc:19:30:4e:2c:98:bc:e9:96:59:8d:c0:bc:eb:c3:29:
13:85:6d:da:58:5c:79:fb:02:33:36:56:cb:2e:7c:3e:e6:c0:
d5:6d:c6:72:7d:be:2f:3f:6b:b6:f0:3c:e8:84:8c:94:2d:1b:
fa:59:08:27:44:13:0d:f3:47:12:5e:07:73:2f:37:25:66:72:
7e:63:1a:b3:cd:d8:c1:41:e4:38:4e:8f:be:6b:bf:cc:66:02:
e2:52:a4:5b:b7:62:20:62:0d:b2:9d:f3:2d:0a:a7:f1:cd:60:
8e:a6:40:f7:b4:2b:e7:38:96:4f:33:00:05:9f:1b:9f:a5:15:
26:56:11:93:35:cd:ac:e0:92:4f:a4:5c:ce:4c:9d:a7:4e:87:
a6:c0:ad:e1:b2:9a:78:06:99:fb:1c:75:e0:f4:cf:c8:77:5e:
82:01:14:dd:09:c7:cd:4e:7b:80:12:ab:cd:21:fa:ec:d8:77:
3b:5f:ea:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:34:55 2026 by rpki-client