Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft
File: ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft (raw, json)
Hash identifier: C5p0STMGjAlXvXfsLcvgzghkZDjYVO4B38uQEGy6GFE=
Subject key identifier: D2:70:6F:43:8E:5B:A3:79:6A:78:0D:98:57:E0:13:9A:0A:2C:7D:44
Authority key identifier: 64:E6:7F:7E:BC:0A:81:0B:88:C0:AA:D3:40:C2:6E:DC:B4:5D:E6:5F
Certificate issuer: /CN=64e67f7ebc0a810b88c0aad340c26edcb45de65f
Certificate serial: 019D2AA91E7C17D98AD337290536FAD5484A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft
Manifest number: 12B5
Signing time: Thu 26 Mar 2026 15:00:19 +0000
Manifest this update: Thu 26 Mar 2026 15:00:19 +0000
Manifest next update: Fri 27 Mar 2026 15:00:19 +0000
Files and hashes: 1: Jxh1vyeGRVZubYdlgBTDXZW-uWo.roa (hash: 71XpHjlTdPY1qywc9le+VCgiZcIMSS2xeHJ0XkAm/ow=)
2: ZOZ_frwKgQuIwKrTQMJu3LRd5l8.crl (hash: Nnz1g5cE3WYLz454/DST+gJTFjB6+F7mpQncbrJWZRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:1e:7c:17:d9:8a:d3:37:29:05:36:fa:d5:48:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e67f7ebc0a810b88c0aad340c26edcb45de65f
Validity
Not Before: Mar 26 15:00:19 2026 GMT
Not After : Mar 27 15:00:19 2026 GMT
Subject: CN=d2706f438e5ba3796a780d9857e0139a0a2c7d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:04:42:ff:d1:ae:75:5d:d9:65:d9:29:be:
a3:4f:90:5d:64:d1:bf:f3:9c:8f:e4:dc:11:fd:eb:
14:52:bb:82:78:04:73:46:33:70:47:68:09:8b:b2:
6a:bf:91:bd:1b:d3:f0:8c:f0:32:80:03:93:7d:1f:
db:c7:49:a5:bd:65:5a:16:a2:6d:bc:92:22:88:fc:
5f:9b:cb:e0:ef:8e:c9:66:79:54:e0:89:81:93:6c:
1e:31:79:15:d0:ab:35:a6:ed:74:2d:f3:2f:d0:b7:
ff:fa:04:58:27:7a:9a:be:b6:84:94:f8:74:22:2f:
ee:11:1c:76:65:68:35:99:4d:f2:9f:2d:57:3b:2d:
84:0b:ba:3f:66:7c:d7:a4:8d:1c:98:dd:fc:3e:a7:
22:c6:be:4d:6f:9a:c4:29:cf:97:df:8c:7c:84:da:
5a:68:95:9a:05:86:be:9c:b5:aa:76:cb:7b:f2:c1:
5c:f8:b7:73:30:ce:bd:6f:0e:e7:0b:4e:9f:e6:40:
ad:e0:d3:56:02:2f:ec:34:9e:1e:db:90:84:45:d9:
33:5b:fa:12:42:75:46:84:3a:07:39:17:2a:ef:78:
67:68:bf:d0:80:10:bd:9c:c1:33:d3:8c:7c:ab:7c:
90:0b:85:42:65:88:36:44:67:83:9f:34:b9:79:6f:
b2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:70:6F:43:8E:5B:A3:79:6A:78:0D:98:57:E0:13:9A:0A:2C:7D:44
X509v3 Authority Key Identifier:
keyid:64:E6:7F:7E:BC:0A:81:0B:88:C0:AA:D3:40:C2:6E:DC:B4:5D:E6:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:cb:a1:d2:5e:35:87:95:a4:c5:49:00:be:27:45:7e:68:57:
1e:d5:5f:0d:d9:b8:db:9e:5c:d3:e8:6f:47:c5:65:70:da:51:
0e:8d:b2:df:ab:f0:96:5b:21:8d:c6:ea:3a:aa:45:4d:dd:07:
62:05:2b:54:73:a2:be:e1:a7:4d:00:3a:6e:dd:fd:5c:f6:6e:
1b:06:f4:ce:63:26:25:11:ca:68:e6:c9:3a:4e:8a:21:aa:66:
fb:16:54:52:9a:bd:dc:e2:ba:4c:14:42:11:3d:8f:c0:d2:ef:
a6:09:24:fa:1d:c1:f4:d3:68:ed:07:ac:d8:95:9a:89:8a:73:
ac:c1:3a:7e:93:73:18:6e:6c:1f:ce:b3:75:8e:40:2f:11:5e:
9c:fd:f3:5c:aa:65:b4:ae:b7:a0:5a:cd:68:fc:e0:b9:27:86:
61:15:8c:38:b4:96:c5:f2:56:f7:22:70:44:9a:b1:24:39:14:
55:80:63:fa:34:42:0f:3e:4e:27:a6:52:91:ff:6c:de:ac:ea:
38:aa:15:69:9c:d8:65:16:c3:da:5d:a0:b1:b0:bd:f6:64:22:
ec:2f:a1:a1:0e:a4:36:1c:f6:37:a5:71:4f:cb:5f:3e:4a:4e:
53:ef:03:e6:4c:29:60:f1:7f:1d:b2:9e:c9:21:da:ac:97:f7:
02:3b:52:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:43 2026 by rpki-client