Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
File: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft (raw, json)
Hash identifier: 9EIWuylVAImA8cxw+X91E7rhBwl8ACgZbWFTEVGQXLw=
Subject key identifier: 08:16:22:EE:5A:51:78:E6:CB:68:DE:09:1C:98:FB:47:39:06:75:40
Authority key identifier: CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
Certificate issuer: /CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Certificate serial: 019D2772BFCE235396AD45AD00AA01927808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
Manifest number: 154E
Signing time: Thu 26 Mar 2026 00:02:04 +0000
Manifest this update: Thu 26 Mar 2026 00:02:04 +0000
Manifest next update: Fri 27 Mar 2026 00:02:04 +0000
Files and hashes: 1: CuEyheF-29dttpD6VLLaExCFGAA.roa (hash: R6vjhi7yIbFl0joD76O7Kh49JYPbEdB6dMSlf59XV7s=)
2: tSwu_rs-_T3OD9Pp5HQg9a8f-F0.roa (hash: OkFsnGmy75UDy40lQIElr+ClgPv+0wuI2ecBN6Kx84o=)
3: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl (hash: l5M7YyboUNOLgHFO2ZEqIkCZox0nIt9OIAqTv+yM9ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:bf:ce:23:53:96:ad:45:ad:00:aa:01:92:78:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Validity
Not Before: Mar 26 00:02:04 2026 GMT
Not After : Mar 27 00:02:04 2026 GMT
Subject: CN=081622ee5a5178e6cb68de091c98fb4739067540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ad:d5:a4:53:46:55:94:ab:a9:0c:5b:67:ed:
46:5c:e7:6e:f8:d1:49:ea:0a:ab:7b:25:6f:06:63:
47:9d:52:2d:83:2d:98:5b:3d:9e:95:d2:d5:5a:18:
58:49:8a:1a:3b:69:e1:95:1c:62:6a:07:f7:37:66:
43:ae:18:dd:80:b2:c1:c7:df:eb:a6:9e:ec:1e:f2:
78:2b:a8:70:d9:82:36:31:6e:ec:f6:51:80:79:e3:
52:e5:1c:67:9b:20:73:ea:08:bf:01:11:aa:ea:b6:
d0:8e:2c:d1:39:dd:12:13:94:ad:f3:c2:2d:4d:e0:
4a:b7:6c:9d:a4:c2:26:42:0b:0c:9a:dc:7f:18:fd:
3d:ef:a7:cf:91:4b:a4:3d:df:80:79:61:45:6a:c2:
b9:aa:0d:0f:ad:c9:aa:1f:7b:0c:b4:35:db:0c:32:
e2:00:fc:02:48:f0:90:c2:da:92:37:03:cd:66:df:
e4:ae:05:92:e6:89:6a:25:f7:78:b1:46:4d:f7:83:
14:5b:d0:b6:42:98:0c:e3:86:7f:f9:50:a9:68:e0:
b8:8e:df:f1:f0:32:73:4c:9f:c0:c3:b2:c2:8d:a7:
c7:c5:20:75:e3:27:4b:83:e3:75:d9:72:0e:b2:b4:
6e:c2:a1:66:2f:62:11:d3:e3:c1:42:1c:a9:a8:2e:
bf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:16:22:EE:5A:51:78:E6:CB:68:DE:09:1C:98:FB:47:39:06:75:40
X509v3 Authority Key Identifier:
keyid:CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e2:a9:25:0f:ef:9d:9d:97:c0:7c:e4:53:bd:29:b8:a8:ed:
f9:1c:4c:ab:87:5e:ec:29:bc:0b:5b:b4:94:70:5a:d7:65:40:
9f:6c:0f:18:43:5f:01:34:f6:50:cc:bc:68:45:d1:23:2b:fe:
d2:1b:d1:7d:26:d1:8c:5f:f2:dc:65:d8:cd:41:af:40:d5:4f:
be:bc:7a:76:eb:9d:c5:0c:ee:ae:63:ba:e0:98:82:5b:da:67:
35:57:22:57:e8:6d:7f:2d:c1:23:f1:34:e4:0a:66:24:24:f7:
1a:10:36:f5:5f:7f:ab:a6:d5:9f:11:1a:41:b7:11:fd:7e:9e:
be:7c:7d:c0:b6:ca:bd:81:d3:b6:4c:d3:ba:7a:96:27:8e:d4:
49:84:33:a1:81:43:1f:b8:25:f2:69:b8:9d:7b:68:63:b1:05:
65:e1:b1:46:9f:94:b6:d2:e3:59:2a:c7:44:a9:86:dc:c6:53:
12:ac:8d:cd:f1:c1:9b:1d:a9:ba:8e:18:47:3a:b3:ae:f5:d1:
98:5e:19:52:ab:61:ee:30:c2:9c:07:73:8b:35:c2:48:d9:65:
54:65:dc:b3:bf:83:b2:bd:5a:fa:96:4b:ed:b4:77:f1:a3:4b:
fc:5c:91:9f:e1:51:f0:00:6d:8f:de:95:f0:09:4f:e1:84:33:
0e:4b:42:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:06:05 2026 by rpki-client