Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
File: Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft (raw, json)
Hash identifier: DHYTbOA4UyyLRTBdOtAsND2fuqaCvAlrUokaQuMmgjE=
Subject key identifier: 3A:B6:F1:8C:F8:60:83:0C:99:97:19:88:49:87:FC:89:A4:91:DB:0A
Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
Certificate issuer: /CN=668e9b2eefb205342382b6072a903f9d9837071a
Certificate serial: 019D2703A49904FCDC43F0928ABDE9D6DC73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
Manifest number: 0D3D
Signing time: Wed 25 Mar 2026 22:00:43 +0000
Manifest this update: Wed 25 Mar 2026 22:00:43 +0000
Manifest next update: Thu 26 Mar 2026 22:00:43 +0000
Files and hashes: 1: RkG3qch8pEJIDv3JOGIWd52X2iU.roa (hash: M5MoWtPVqA3Ex0e6k8hDbIXhQvvVk+rf1YW1Yh7X0/M=)
2: Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl (hash: 6HmQ/kMeuU8cRgR7wEfZdlmqzcEt7bl/pmv37hqj+CU=)
3: dc9xd7P00DdFJQf-A3nQhrQ5AFw.roa (hash: L1i0JRO7qbrA6QVK9ZBM3Dv/eB/asOSRW10wtAZmW+Q=)
4: koMekijqP-w-hV1xkItLMIte5TI.roa (hash: qrmsUlbTAaKkSWTEyxYUk3wrBnnPPwrk02ct3U7Q8vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:a4:99:04:fc:dc:43:f0:92:8a:bd:e9:d6:dc:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a
Validity
Not Before: Mar 25 22:00:43 2026 GMT
Not After : Mar 26 22:00:43 2026 GMT
Subject: CN=3ab6f18cf860830c999719884987fc89a491db0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5f:ed:9c:fc:a5:d8:8f:c6:03:cc:6b:6f:ac:
dd:80:86:e4:67:5c:09:ae:e2:2d:1a:15:ba:ae:eb:
fd:78:29:fc:45:b1:6a:b2:66:a8:e1:c0:14:db:48:
59:c0:34:61:fd:8f:6c:8c:02:80:1d:f6:e5:60:41:
08:e8:f4:26:5f:f9:fd:31:ae:20:68:04:21:6c:e5:
9b:fa:2d:8c:11:48:c2:2a:de:5d:65:42:72:e0:0f:
60:07:99:b0:0b:0d:36:2a:f7:d6:70:8e:d4:e0:81:
2f:71:0e:49:8f:06:5f:fe:44:12:04:3c:94:00:97:
c9:73:e3:74:c7:cc:36:d4:3a:5b:87:d1:21:c1:f7:
71:41:fd:2f:aa:45:23:ac:2a:fe:73:d6:6e:9d:bf:
6c:27:b3:56:03:3e:f4:77:73:6a:5b:38:6f:18:9b:
1f:76:3f:0a:45:3b:1c:78:cc:94:72:b9:cc:a4:dc:
51:e0:b0:7c:d0:05:4c:ce:97:0d:0e:d4:1f:c7:22:
ab:a5:16:cb:8e:ad:b9:73:cc:e3:62:b2:c6:86:85:
1b:02:bc:71:f8:8d:04:fa:6a:6b:22:14:65:7b:ab:
53:16:5b:6d:99:b5:db:a9:02:cb:f9:08:00:3a:1d:
27:84:df:4b:88:3c:20:f9:ff:4c:25:64:47:12:fe:
52:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B6:F1:8C:F8:60:83:0C:99:97:19:88:49:87:FC:89:A4:91:DB:0A
X509v3 Authority Key Identifier:
keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:76:e0:b0:d5:54:ca:62:db:72:a5:33:5e:db:f7:2c:27:f2:
99:8a:cb:26:57:34:48:9e:bf:7e:27:cf:b6:be:d6:8c:f7:64:
09:0a:6b:7f:c7:b1:93:20:83:4d:4b:17:e4:ff:fe:c6:25:4e:
3b:01:e2:6e:23:47:6e:a0:48:6a:69:7b:43:11:d2:d5:c6:c7:
60:aa:23:2d:98:33:32:95:63:11:27:a3:ca:32:d6:bb:95:2e:
7d:39:38:3e:a8:83:41:6e:00:4a:9d:e3:08:5f:0e:b1:64:ba:
0b:ba:1b:b0:63:c2:70:92:fc:af:b2:8f:17:76:a7:0e:e2:d9:
96:a3:b4:1d:53:2c:c4:80:b3:5e:f3:a9:69:a5:76:92:23:0c:
8f:63:c3:1b:98:e5:60:f0:e7:bc:c9:23:13:60:79:d6:6f:55:
35:f9:ad:ac:a4:0d:13:4c:95:0c:ad:9b:cc:4f:e7:59:da:68:
3a:14:16:4e:78:7b:85:9e:2a:ab:42:d6:ee:cd:ce:a0:58:32:
52:a9:e7:89:d8:57:80:6a:55:69:4d:42:eb:f9:a9:59:49:57:
46:72:c2:1e:b8:5d:8d:57:0c:6b:0c:be:17:77:9c:9f:b9:b3:
e4:41:42:70:d0:30:ea:9c:b8:26:5d:5d:8a:00:72:63:c3:5d:
d1:6a:6a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:49:39 2026 by rpki-client