Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
File: zsyfK4Jf2WfpeMQgknlZX88zLFo.mft (raw, json)
Hash identifier: D3eLGOzZJRhyaEo96evn5NLzLB/0F2Rg9A9/7/YzB94=
Subject key identifier: A1:77:1E:94:91:F0:50:3B:5B:F0:1E:BD:3F:42:6C:64:47:29:B6:C5
Authority key identifier: CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A
Certificate issuer: /CN=cecc9f2b825fd967e978c4209279595fcf332c5a
Certificate serial: 019D2960CF8722AA99B7D5D965A39786C257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
Manifest number: 181A
Signing time: Thu 26 Mar 2026 09:01:43 +0000
Manifest this update: Thu 26 Mar 2026 09:01:43 +0000
Manifest next update: Fri 27 Mar 2026 09:01:43 +0000
Files and hashes: 1: WH9MtYAjhnZexRfLWNZUYcRJcYU.roa (hash: KLzTItCMkuqh0f0qD5QoElv/ivKn4xdXzfd7Tf8Ak2s=)
2: zsyfK4Jf2WfpeMQgknlZX88zLFo.crl (hash: FxQC2oBZqs5GVnK+wXVfYhGafRP0dAK0QKSeA2a37nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:cf:87:22:aa:99:b7:d5:d9:65:a3:97:86:c2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecc9f2b825fd967e978c4209279595fcf332c5a
Validity
Not Before: Mar 26 09:01:43 2026 GMT
Not After : Mar 27 09:01:43 2026 GMT
Subject: CN=a1771e9491f0503b5bf01ebd3f426c644729b6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8e:0c:a0:b3:a9:3c:d3:ac:06:c2:c7:83:db:
65:af:1a:b1:95:66:d3:ea:08:2a:1e:00:50:bb:03:
c7:f2:20:07:2a:9c:b1:23:65:87:5d:3a:e0:fd:ad:
fb:ba:3e:84:98:ac:99:f9:63:d8:21:42:07:30:10:
93:5f:c9:31:2f:0e:17:29:a5:08:48:33:d9:44:00:
d2:a7:2c:e9:30:0d:63:7e:ca:c6:23:be:bc:22:3f:
7e:f8:7f:95:98:19:fc:b7:2e:1e:6d:e5:ed:f8:46:
7e:03:09:f8:3e:5e:31:9e:02:12:24:09:05:8a:e1:
54:bb:78:17:cf:42:4f:c6:e1:14:15:f9:32:1e:5a:
0f:8e:17:ec:e2:ea:a4:f1:f7:6e:9a:ec:22:45:52:
23:bd:52:3d:20:0c:07:7e:e1:90:0b:a3:7f:b4:6b:
cb:a2:5b:83:af:8b:a8:0c:f8:72:e5:dd:1a:35:72:
03:9c:ce:67:47:3a:f6:47:8f:97:c9:d0:16:0d:cd:
c5:c9:34:8b:e1:2d:ba:de:85:e9:94:23:61:68:62:
f4:51:6c:18:9e:d3:78:77:2c:22:e8:3e:7e:ec:2d:
aa:28:f1:84:26:3f:59:bd:04:33:da:62:f1:5a:76:
47:11:59:26:37:a4:e7:74:4c:f1:6d:22:ce:25:d2:
86:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:77:1E:94:91:F0:50:3B:5B:F0:1E:BD:3F:42:6C:64:47:29:B6:C5
X509v3 Authority Key Identifier:
keyid:CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ea:82:04:6d:1b:5d:6f:bc:c0:52:e2:8f:6c:c0:92:68:bd:
f5:57:ac:7a:a6:d9:7d:0c:79:96:dc:56:70:94:14:26:ac:2a:
a1:61:b1:38:79:8f:41:71:86:28:a8:c3:37:8d:53:34:94:41:
a7:e1:64:f3:7d:63:eb:2d:f7:a3:d5:87:7d:f2:9a:93:47:37:
e6:c1:6f:d5:46:f8:f9:48:1d:5e:12:a7:6d:d9:93:7c:90:60:
e9:ea:82:8a:2a:fb:27:26:b1:5a:fa:a1:1f:fc:61:0d:63:68:
ed:21:8d:af:ff:f3:17:ef:50:f2:8b:d9:08:b5:7f:b3:e5:97:
89:ca:f8:04:eb:06:2d:22:f0:0e:8d:d5:11:34:bd:a1:25:ca:
06:99:81:ca:24:95:26:9c:1b:e9:26:81:e6:16:4b:41:4e:d0:
86:e7:90:7c:f6:82:04:e9:d3:1b:9f:2e:b1:50:d7:75:9b:ce:
69:b3:80:a3:48:fb:bb:85:31:0b:8f:cc:a9:1d:4a:cf:f8:32:
1a:82:7b:8d:4b:79:d8:5e:78:0c:7a:21:9e:9e:ad:b1:ca:bc:
89:3d:7c:0c:9a:27:13:57:36:79:c3:90:b8:2d:48:8a:56:64:
50:9a:5e:93:f7:ba:cc:59:8d:ad:dd:ab:94:7f:ba:84:09:0a:
29:24:87:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:56 2026 by rpki-client