Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
File: zjfKOryl4UrBG8fzwVYqZNY5HSI.mft (raw, json)
Hash identifier: GaE34ufsLbNVc8WaDSszfaS4ezU8I4eZkQfCJMQVZvk=
Subject key identifier: DA:99:A8:DE:99:B8:E9:0A:64:C9:DA:BE:BC:25:DD:EE:E9:77:94:0B
Authority key identifier: CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
Certificate issuer: /CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Certificate serial: 019D2696615C4360819C5DCD9B56D8221330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
Manifest number: 17C6
Signing time: Wed 25 Mar 2026 20:01:22 +0000
Manifest this update: Wed 25 Mar 2026 20:01:22 +0000
Manifest next update: Thu 26 Mar 2026 20:01:22 +0000
Files and hashes: 1: 1p6N-kK_4V3GFKcMeMBC634qt2Q.roa (hash: TSyzIZ76W8e8kErWqZwdXl64ZiwUdxKLNAqgp6ToAQQ=)
2: 4WvNG4qNCW2EFlj86dJTOuveJH8.roa (hash: oJyVY5B1qiE0XMrui4EotkBx3jXoI+Z2a2bCSywanP8=)
3: zjfKOryl4UrBG8fzwVYqZNY5HSI.crl (hash: ahR+jbR1fUREgLeheHHS3Hh1/MInlZAqMlObbggDD3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:61:5c:43:60:81:9c:5d:cd:9b:56:d8:22:13:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Validity
Not Before: Mar 25 20:01:22 2026 GMT
Not After : Mar 26 20:01:22 2026 GMT
Subject: CN=da99a8de99b8e90a64c9dabebc25ddeee977940b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:09:d0:c1:66:25:1d:83:78:8b:86:c0:33:
4c:c6:45:b7:72:b9:7a:91:92:3f:e0:36:4d:26:0d:
4d:4d:53:bf:df:b3:bf:0c:ac:79:ef:7f:98:d3:34:
e1:24:21:6f:a5:d2:a1:88:bc:1f:1a:7f:24:4d:f1:
3e:40:ed:d0:33:6b:69:6b:b3:4a:9b:b6:2e:a0:b6:
e2:6b:25:6f:84:f3:ab:39:c5:a5:23:86:08:c0:94:
43:fb:b2:47:1b:ee:28:97:85:7f:3b:d2:f0:8a:25:
2b:77:69:10:82:b2:72:9a:63:e0:f5:bb:86:33:d9:
88:ef:48:ac:68:20:1c:2a:ef:ba:af:db:3d:08:70:
db:29:5c:fd:34:a7:75:f9:cf:ae:0b:f9:6c:65:17:
78:d3:32:71:7d:dd:eb:fc:64:81:db:e6:b2:f1:13:
c7:8c:ec:ff:30:f7:17:0c:49:5d:e7:25:e5:aa:d9:
4d:e9:f3:c5:94:0a:b7:db:ac:84:c0:30:5c:2e:b0:
56:fa:c1:cb:fe:c9:1b:0b:20:af:cc:42:cc:46:a1:
43:51:20:f4:13:f1:fc:1f:3b:5c:e3:39:33:58:b7:
97:54:9d:5a:91:86:46:d4:e3:34:b0:29:be:c2:5a:
7e:85:70:24:71:ab:b7:b9:d6:8c:52:74:eb:4e:5a:
53:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:99:A8:DE:99:B8:E9:0A:64:C9:DA:BE:BC:25:DD:EE:E9:77:94:0B
X509v3 Authority Key Identifier:
keyid:CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:be:3e:06:55:9f:1b:c3:4f:ee:fe:22:73:fd:4d:f1:04:e3:
d5:fa:e9:fe:a4:7f:17:35:da:5d:45:0d:1e:02:d2:dc:93:c0:
87:6f:b7:c8:aa:ae:e8:46:2f:01:11:64:53:a0:5e:c1:ca:39:
01:79:89:44:09:c0:5c:7c:37:cb:9a:ab:b2:f9:e2:ab:1e:e2:
fe:db:ef:5a:8d:26:e7:90:f6:42:65:85:83:9a:49:63:8c:1c:
0a:ee:f4:c6:4f:0c:76:eb:00:57:94:c1:e9:0f:1f:b6:4b:4d:
9f:c1:94:67:3f:be:e2:39:71:9e:14:bb:29:2a:e2:c2:c5:57:
95:44:8b:2f:8b:d1:9a:5f:e9:bb:f4:dc:0e:37:0b:0b:91:d6:
6e:86:7d:87:43:23:0e:a7:ac:d8:13:27:40:33:22:e1:9d:25:
aa:e9:c8:5b:6d:a0:43:7c:e4:57:16:89:cf:ee:23:e4:13:19:
e8:67:ce:c1:f5:38:38:bc:7f:51:71:bc:91:16:af:43:22:9c:
0f:9b:2c:82:ba:36:7d:4f:69:42:1e:0e:c3:f6:d7:96:51:d5:
59:b1:43:f6:c0:6e:3a:96:6f:67:b7:c9:82:e8:07:ca:69:c7:
a5:2c:9e:e1:e5:7c:5d:0b:95:40:86:a7:83:dd:8a:71:bf:7b:
28:b0:24:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:00:01 2026 by rpki-client