Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
File: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft (raw, json)
Hash identifier: Sy2wfimk0puiboKqC9iqVtZTytZTGHhRHxwcKj0F93Y=
Subject key identifier: 21:7F:75:81:80:66:FC:64:AA:FF:5D:62:54:62:07:13:75:70:B9:85
Authority key identifier: 64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01
Certificate issuer: /CN=6454903ab485b16cca862d15e6d93fba0e4dde01
Certificate serial: 019D2627E6B9911967678583FB836F0FEA88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
Manifest number: 0425
Signing time: Wed 25 Mar 2026 18:00:42 +0000
Manifest this update: Wed 25 Mar 2026 18:00:42 +0000
Manifest next update: Thu 26 Mar 2026 18:00:42 +0000
Files and hashes: 1: HXygwNK2STzqNVll6HVDO_wB5r0.roa (hash: ZY5/8uKYBcUum4H1cHS3G78vJsO1xPm4UChz23v/ZS8=)
2: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl (hash: GD0gPpVJA4uiG7E1yEY0pX3IINQeRDB2vQb+5ift1D8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:e6:b9:91:19:67:67:85:83:fb:83:6f:0f:ea:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6454903ab485b16cca862d15e6d93fba0e4dde01
Validity
Not Before: Mar 25 18:00:42 2026 GMT
Not After : Mar 26 18:00:42 2026 GMT
Subject: CN=217f75818066fc64aaff5d62546207137570b985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d1:ea:e8:38:82:59:7f:0a:32:55:3a:e7:2b:
70:1e:e5:ae:83:f2:3c:17:50:73:29:30:19:c4:3a:
c9:1e:ab:a8:ce:75:d3:8b:38:a2:1c:cf:1e:af:22:
db:8a:3e:f9:6d:58:e7:d6:ed:ce:80:4a:bb:db:2d:
72:cc:72:5e:76:80:fb:a7:52:86:b7:a3:78:e4:42:
ee:b1:e4:cc:b6:93:bf:50:fd:8c:3c:2b:c3:f1:73:
e9:46:13:61:34:d9:8f:1d:72:bf:20:78:6a:20:ca:
f3:88:6e:16:42:8b:fa:39:62:db:a3:76:fe:e2:90:
d2:7f:93:49:41:de:38:bf:6c:1b:7b:6f:e6:f8:a3:
75:c5:5a:45:7e:1f:dc:72:5c:23:83:1f:23:ec:f4:
81:ad:bf:8b:48:9d:8a:0a:cc:af:6a:63:b0:8f:76:
02:a9:49:5a:12:72:c4:0d:53:e9:74:c1:93:be:ed:
40:fa:5a:b0:5d:ac:3a:38:3d:6d:7c:23:14:e8:1e:
30:33:c2:0b:20:f6:86:92:29:91:a5:81:1c:b3:a6:
73:22:c2:81:71:2f:3a:c5:ad:65:04:10:79:d1:4c:
f4:3d:c3:77:1e:0f:35:7d:b4:fe:c9:de:b2:b5:55:
84:ae:5c:69:a9:73:83:d0:65:7e:ce:81:13:62:e8:
c2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7F:75:81:80:66:FC:64:AA:FF:5D:62:54:62:07:13:75:70:B9:85
X509v3 Authority Key Identifier:
keyid:64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:37:00:d1:8f:92:bd:fe:d9:c8:60:cc:f8:e7:fe:00:62:96:
2e:42:79:7c:1d:8c:b2:c4:a2:7a:57:5b:52:8e:bd:48:f1:e0:
ad:88:93:b2:94:c5:99:99:6e:84:05:d8:80:de:4b:32:0b:a1:
27:ba:9e:9e:93:04:aa:86:1a:d6:8d:30:f9:22:85:f9:91:ad:
9d:52:bf:a4:74:41:41:14:f3:d3:e6:a8:8a:86:d7:d1:05:68:
55:ad:b6:15:d0:7f:4f:ae:ba:ea:0f:73:8c:00:df:73:22:94:
76:b3:1a:b5:0a:c2:b9:47:8f:eb:98:3d:30:33:e1:19:01:2c:
55:5f:71:54:2b:69:bb:ce:89:cc:b8:a1:9d:28:7b:e2:7f:6e:
9c:ac:11:65:b8:1c:66:e9:ec:9d:21:27:6f:2c:b4:dd:c1:6b:
21:4a:3b:d1:29:b4:49:6d:97:2c:67:93:fe:ab:81:f7:48:d5:
c6:7a:ae:93:61:cd:32:76:c3:23:89:bb:de:68:68:9a:88:a4:
4b:7e:b5:b0:c1:ef:79:78:d0:e8:08:0d:e3:a6:4c:26:c6:4c:
10:bb:76:42:24:d7:66:1b:cb:05:f9:b6:71:56:60:b0:b1:12:
ae:78:a7:03:f8:a4:a7:af:fe:d2:35:17:dd:2f:05:f8:65:7d:
20:84:58:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:39:27 2026 by rpki-client