Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
File: zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft (raw, json)
Hash identifier: 5VeHsDeL3M26vYLBnGy3NR19ilMMt5yPqfmMkp1xGNY=
Subject key identifier: 64:9A:B6:7D:6D:71:8F:69:F8:A2:13:C7:38:62:4F:8E:42:30:5B:1C
Authority key identifier: CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F
Certificate issuer: /CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f
Certificate serial: 019D2628852813959F7812AD5C4116962DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
Manifest number: 188F
Signing time: Wed 25 Mar 2026 18:01:22 +0000
Manifest this update: Wed 25 Mar 2026 18:01:22 +0000
Manifest next update: Thu 26 Mar 2026 18:01:22 +0000
Files and hashes: 1: ro9Q9RFKhgezIN_wav4dR-eXoZw.roa (hash: bgN32+4ndLdWd2BsCVHxOm8hcnK6B9MsF19ZhVaVHsY=)
2: zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl (hash: 5yMsBI0HV6UQLua+T1w/XMBVo7N/SP+xY2Qpq7fZENI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:85:28:13:95:9f:78:12:ad:5c:41:16:96:2d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f
Validity
Not Before: Mar 25 18:01:22 2026 GMT
Not After : Mar 26 18:01:22 2026 GMT
Subject: CN=649ab67d6d718f69f8a213c738624f8e42305b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:f4:35:11:90:bb:a1:a8:5d:ec:b3:23:d4:
8c:b2:d9:27:29:bb:4d:54:67:7d:b9:2f:82:b6:23:
dd:b8:7d:c6:08:fc:95:c2:25:41:f8:fd:17:8c:5f:
5f:71:b3:b7:67:bb:2a:1a:ca:c1:03:39:cb:ea:e1:
cf:cc:d1:08:a1:97:ea:ae:5a:e7:bf:3e:e5:6b:b7:
b7:e9:0a:e5:e0:78:5d:c2:8c:c9:47:2e:c2:02:32:
a9:a9:17:52:8e:5b:cc:b0:b2:24:92:66:f6:c3:3b:
5d:58:7a:2c:db:5f:23:b4:95:28:49:27:33:3a:c7:
a1:49:c2:4f:9d:39:50:72:2c:e6:4e:d0:25:7e:39:
15:c7:1a:24:d0:e6:f9:74:20:41:15:7f:a1:31:8f:
93:ae:2c:c4:92:16:7a:91:17:dd:86:e1:7b:11:1d:
eb:61:98:87:75:76:84:cf:af:a1:8a:a3:20:15:20:
7c:54:98:17:c1:a6:e3:0a:80:fb:0a:a1:fa:93:d4:
97:c8:4b:24:af:c3:47:be:10:e5:bb:7c:89:d6:08:
ef:68:84:91:9f:84:5d:75:45:5d:3d:41:00:02:96:
d3:67:71:1b:02:4a:67:fc:ac:71:6d:aa:28:01:b3:
46:70:bd:10:c8:a7:bb:ce:1b:b2:c4:ce:d6:e1:bf:
4b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9A:B6:7D:6D:71:8F:69:F8:A2:13:C7:38:62:4F:8E:42:30:5B:1C
X509v3 Authority Key Identifier:
keyid:CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:01:f9:bc:b0:bc:ef:f4:bb:c0:ea:7e:c6:31:a4:a0:48:14:
d3:08:10:f8:67:23:0b:cf:1e:2b:74:e8:05:28:3d:79:c0:3b:
ac:64:12:5a:96:65:10:14:80:1d:15:e2:07:90:62:ef:9e:f5:
73:43:b8:b6:8e:49:f3:5c:33:47:85:2f:a7:16:04:a4:0f:32:
92:8a:a4:e8:73:a7:44:bb:f3:0f:f8:87:96:55:bc:f4:2d:fa:
08:80:e0:f9:a8:f6:62:01:c0:3b:b6:ea:dd:d8:ec:ef:9e:00:
1d:13:ae:99:86:21:1c:78:15:d3:2f:d5:33:f9:fc:69:41:71:
23:1d:b4:7c:2d:35:dd:6c:e5:6d:70:7b:39:a5:a8:a2:2f:48:
b8:12:03:7e:45:e9:6f:a3:32:bf:a6:a7:d6:c4:2d:f7:80:57:
f9:a5:f8:a3:90:ae:42:24:93:47:2d:e5:10:0a:d7:65:d6:e1:
80:ea:f6:b2:24:93:99:c8:ad:08:c8:82:4d:98:f0:ef:85:4c:
fe:f1:5e:cc:68:a6:72:a0:2d:fa:f9:9b:8a:4f:a6:cc:28:b3:
55:95:15:2a:cf:46:40:72:d9:fe:8c:9f:ff:f6:55:89:77:65:
34:32:f1:99:5e:9a:2d:9b:ad:44:44:ab:01:df:84:c9:bf:46:
97:5c:5b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:54 2026 by rpki-client