Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
File: ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft (raw, json)
Hash identifier: loGwE546PpLhQBZQK09EyMo/iRSOQdr3ddVD29QX2ww=
Subject key identifier: 23:81:59:1A:EE:4A:CE:ED:A0:81:DC:A6:B2:CC:7E:B9:E4:A1:D5:01
Authority key identifier: 66:95:33:61:FF:6C:00:83:FD:93:D5:28:65:03:33:19:86:3F:BC:46
Certificate issuer: /CN=66953361ff6c0083fd93d52865033319863fbc46
Certificate serial: 019D28F330622B066D84C8EEBA22100AAD61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
Manifest number: 0AC8
Signing time: Thu 26 Mar 2026 07:01:59 +0000
Manifest this update: Thu 26 Mar 2026 07:01:59 +0000
Manifest next update: Fri 27 Mar 2026 07:01:59 +0000
Files and hashes: 1: ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl (hash: uUghTuYPDiCR9Rdj66JilUSSCkgD01TwU21rcFcDgVM=)
2: sNdU_E9AeTRcV1tQUPKaysFTZxA.roa (hash: RsVC7/l8xCsWReH4ylGowvPT0B2fPTstrTBA1NPEml0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:30:62:2b:06:6d:84:c8:ee:ba:22:10:0a:ad:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66953361ff6c0083fd93d52865033319863fbc46
Validity
Not Before: Mar 26 07:01:59 2026 GMT
Not After : Mar 27 07:01:59 2026 GMT
Subject: CN=2381591aee4aceeda081dca6b2cc7eb9e4a1d501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1c:bd:6d:45:d3:8b:09:31:8a:49:fa:27:6b:
2d:71:1d:9b:b5:66:50:e2:83:19:16:c1:75:41:ad:
8f:c3:d9:01:89:c0:42:66:dc:6f:83:12:92:33:86:
11:2f:13:7f:16:5a:65:42:2e:92:ab:8c:69:6b:31:
20:61:52:79:cf:8c:5c:f9:2b:74:18:ca:f9:fa:a6:
b8:76:aa:16:85:0f:31:c4:45:6d:8c:ca:00:43:88:
16:44:56:8b:5e:6f:36:70:8a:1f:37:9e:1a:d0:0c:
7d:52:1b:65:58:8b:ae:b3:f0:8a:b1:43:49:32:01:
9d:99:41:b1:c2:00:27:6f:d9:fc:2f:62:ee:1e:81:
1c:fd:dc:45:5a:84:31:93:4e:a2:f2:38:07:9c:20:
82:84:4e:15:00:64:92:9e:98:05:6f:00:0d:f4:a2:
0c:1a:3e:e8:04:1f:9c:4d:80:15:4b:47:3d:16:9a:
8a:ee:40:97:a5:00:6f:5e:11:dc:51:3f:ba:94:90:
74:57:5f:ba:97:45:d6:c5:3e:b6:b6:39:24:05:e2:
7a:64:7a:c7:ed:fc:14:4a:02:06:2c:92:37:cc:93:
e5:4e:78:de:e4:ba:f1:43:4e:5e:77:e1:f0:42:a0:
d3:65:42:06:c9:d6:4d:ac:15:4d:f2:2e:f3:ae:b9:
7e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:81:59:1A:EE:4A:CE:ED:A0:81:DC:A6:B2:CC:7E:B9:E4:A1:D5:01
X509v3 Authority Key Identifier:
keyid:66:95:33:61:FF:6C:00:83:FD:93:D5:28:65:03:33:19:86:3F:BC:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:cc:90:a9:8b:22:1e:c7:ac:82:87:f4:55:0c:a9:c5:63:f8:
15:c9:6b:e6:45:f9:c9:7f:7c:96:91:5f:23:53:70:1b:c0:a7:
3e:e8:ab:58:79:86:46:51:f8:d0:a2:e1:1f:ac:d5:fb:e9:e0:
cb:25:3a:a6:d3:c6:81:c7:f8:2a:5b:c4:f5:5d:65:0b:bd:d0:
69:a4:69:22:7e:2e:b0:24:bf:f6:f3:ea:c3:de:51:70:83:25:
26:07:69:d0:3b:a9:66:0a:f4:27:f4:35:72:15:51:69:be:55:
02:94:05:84:fd:8b:10:4f:cc:4f:03:fd:69:8d:8a:37:94:4f:
0d:d2:ab:d9:63:af:4f:fa:03:2c:5e:f0:1f:38:75:f8:52:97:
44:33:ff:8b:d0:b1:40:c6:88:06:1f:ad:18:5d:2b:a0:ed:97:
2b:78:11:9b:a7:d9:ae:9a:0c:73:a0:45:ec:26:d1:f0:d9:20:
74:c4:74:55:1a:f0:e6:09:ef:5f:e3:bf:55:c4:c5:de:a4:84:
a8:dc:3e:e6:82:c1:db:b9:c4:a0:55:de:f9:51:6b:05:da:2c:
78:e2:34:2f:c0:4d:ab:cd:12:7c:75:06:0d:95:38:dc:75:11:
8d:e7:1f:29:4f:db:6f:bb:ce:36:1a:66:55:d3:43:de:e7:eb:
81:f8:7b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:35:00 2026 by rpki-client