Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
File: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft (raw, json)
Hash identifier: zFhoWjNWNCST0biYfsUtzoae8VWfme4DZifFeZ4V5hY=
Subject key identifier: 0E:68:AA:F6:82:7F:01:82:DA:59:C8:D9:F2:C9:4D:2A:4C:1E:64:79
Authority key identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
Certificate issuer: /CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Certificate serial: 019D2A3C21F553490E1A6B1E844A05CACF48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
Manifest number: 11F0
Signing time: Thu 26 Mar 2026 13:01:17 +0000
Manifest this update: Thu 26 Mar 2026 13:01:17 +0000
Manifest next update: Fri 27 Mar 2026 13:01:17 +0000
Files and hashes: 1: UAWfVKnuk8IYKAompixGCt2JD4o.roa (hash: 1/V3Gy+/S90DB5jCTWmbg0P9LSy46xSNLw3S2ZpV9dA=)
2: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl (hash: GxLfR86vX/ajWtpGqG5w0zv71eDKkgpJspEc3yBzAiY=)
3: pSa98oH-huWquSBFmrX0k5Ujlng.roa (hash: npS5cYOqhOIUYuKNtF1ja9QxSVDyjYQo/wMoA9bbK0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:21:f5:53:49:0e:1a:6b:1e:84:4a:05:ca:cf:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Validity
Not Before: Mar 26 13:01:17 2026 GMT
Not After : Mar 27 13:01:17 2026 GMT
Subject: CN=0e68aaf6827f0182da59c8d9f2c94d2a4c1e6479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:45:c7:0d:5a:fa:2c:e5:d3:5d:30:05:57:c3:
f5:b7:2d:e6:e6:fa:a8:6a:7a:a7:82:4a:17:e2:87:
f4:c7:a3:d8:0a:b7:43:d5:07:b3:4f:42:41:40:b9:
96:7d:59:67:ae:b2:26:fe:e6:7c:36:c9:63:5a:5c:
82:50:ca:54:83:9e:bf:f2:47:3b:07:97:c4:35:80:
4d:9c:4b:35:68:72:a3:f3:6c:18:67:33:a1:ea:d4:
04:f4:9b:88:26:d4:98:e4:01:26:41:4b:b8:31:73:
37:e4:0f:3d:31:da:0f:17:64:3e:04:35:28:a1:fa:
45:d9:dd:d8:de:6f:81:49:20:a5:3b:07:5a:cc:96:
21:40:8a:ee:05:7b:ea:cb:15:fe:7a:e0:0f:a4:05:
f1:19:3b:94:5c:f5:1a:a7:ea:d8:56:19:9b:b6:46:
82:3c:b7:0a:bd:85:b1:a1:51:45:d3:f8:ee:b1:5b:
5f:3a:fe:88:e4:9e:f1:32:45:bb:0d:59:ec:01:ee:
54:54:8d:fc:46:4c:21:fe:4f:c3:d2:24:d8:fc:fe:
3a:2e:b5:f7:92:75:5a:a0:fe:c0:ff:b0:91:d4:3b:
d8:c5:48:0c:78:e3:df:1f:0d:96:c6:d5:4c:1e:e7:
e1:d2:88:cc:81:e6:db:74:6d:18:47:0c:e2:f1:ca:
06:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:68:AA:F6:82:7F:01:82:DA:59:C8:D9:F2:C9:4D:2A:4C:1E:64:79
X509v3 Authority Key Identifier:
keyid:65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:42:9d:7a:3b:f6:87:c4:99:be:63:a2:61:fa:bc:fa:85:b5:
f1:1b:b7:99:83:3c:8a:b1:11:7a:00:e9:fa:a4:49:93:28:12:
a0:e4:a1:3d:6a:8d:7f:ab:7d:cd:80:04:9b:a4:ef:a3:4b:70:
e0:79:03:9e:2f:32:0b:25:6f:09:e8:64:37:76:fb:95:8b:80:
04:fb:cc:75:30:bc:b6:21:65:b6:7a:92:34:67:01:13:6e:11:
b8:f5:09:af:41:13:21:f2:db:b7:2c:c4:9d:78:b8:60:d9:79:
47:3c:c7:be:5f:b9:f2:3c:78:4b:22:2f:83:f2:85:94:8d:24:
89:30:7e:29:2f:d8:70:e0:a6:8d:dc:c9:61:30:19:40:69:8e:
87:e4:4c:53:78:b9:27:45:be:51:b4:1e:1b:79:c1:4c:21:67:
31:cb:42:bb:18:4e:07:5d:ff:a7:3b:fb:90:44:ae:12:42:a8:
46:90:44:cb:58:72:58:17:3a:3f:bb:e7:3e:1a:64:a2:a9:d8:
c6:b3:fa:2c:a1:5d:fa:2a:8d:0b:b6:a1:6c:ee:34:53:44:e9:
a0:ca:4b:33:ac:60:c6:69:3b:c3:92:08:b8:58:39:48:f6:05:
fe:a4:fb:fb:7d:59:05:74:b0:26:f0:44:e9:f3:f2:60:7f:a2:
8e:90:6d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:58:34 2026 by rpki-client