Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
File: ZxzQcdyWC9yCmwvn40trYc-LCx4.mft (raw, json)
Hash identifier: 05m/2qF0vtotsOtKEjJWLsWhCkpVn9GK9fkHyJTdFlo=
Subject key identifier: 10:8B:5A:BD:DC:42:13:FC:50:37:30:78:C9:C7:AB:1E:82:DE:BC:92
Authority key identifier: 67:1C:D0:71:DC:96:0B:DC:82:9B:0B:E7:E3:4B:6B:61:CF:8B:0B:1E
Certificate issuer: /CN=671cd071dc960bdc829b0be7e34b6b61cf8b0b1e
Certificate serial: 019D28F2FBFF8B659B5173064D06387B4898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
Manifest number: 0262
Signing time: Thu 26 Mar 2026 07:01:45 +0000
Manifest this update: Thu 26 Mar 2026 07:01:45 +0000
Manifest next update: Fri 27 Mar 2026 07:01:45 +0000
Files and hashes: 1: B0kj7SdwSZWmEU9GKPX-vqJAVao.roa (hash: UN4l73RmEx8CBEkdPrS/+GtzsuSkIQeGfMIfQBPpbKI=)
2: Mdx0wPKImju2r6Wn-sTkPv2XXCk.roa (hash: KkcVte1gTb6znaz/vnrVSs9UtNLYEStRQ8bGw7/kCho=)
3: ZxzQcdyWC9yCmwvn40trYc-LCx4.crl (hash: vrdU/ugmxF2lc7YrMkZFzvhqpiOeClOTeq0gREVAVsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:fb:ff:8b:65:9b:51:73:06:4d:06:38:7b:48:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=671cd071dc960bdc829b0be7e34b6b61cf8b0b1e
Validity
Not Before: Mar 26 07:01:45 2026 GMT
Not After : Mar 27 07:01:45 2026 GMT
Subject: CN=108b5abddc4213fc50373078c9c7ab1e82debc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e2:61:ac:f5:29:35:4a:e9:79:b2:9f:0d:24:
64:0d:64:d0:db:2c:df:52:cb:4a:1d:a6:1c:a1:fe:
27:51:d4:62:24:7f:67:16:a9:3b:3a:5e:54:f3:41:
1c:37:0f:e7:2a:10:79:73:d5:cf:2f:85:0a:f9:da:
f8:c1:78:55:33:c1:84:ed:e4:2d:4f:63:69:1d:9e:
28:94:97:42:b7:0d:a6:6e:da:0f:76:9f:62:09:3e:
5c:5c:ef:44:87:df:86:d8:18:cc:c8:6f:33:68:51:
12:e2:3e:2a:2b:c0:c5:63:47:9e:95:6f:aa:53:e0:
80:b2:7a:37:df:40:65:1a:51:c5:03:8f:71:f5:62:
95:5e:81:95:17:fc:50:c8:bb:20:5e:d7:2f:3b:bd:
0d:1d:1d:b0:ff:48:fa:24:d9:58:1c:82:98:a3:42:
22:70:51:a5:ee:de:3a:2f:dd:5e:66:c3:70:0e:69:
1f:cd:0a:3e:0e:5b:79:d6:c8:de:44:2b:b6:0a:cd:
a3:51:83:48:5a:43:ac:a6:84:90:ca:b9:f0:40:1a:
63:ed:ab:df:90:77:25:2f:09:f2:22:37:1d:cd:b5:
6e:72:17:9f:51:7d:46:01:a5:15:cc:80:32:69:b1:
fd:ab:aa:19:0a:5a:bd:70:de:fe:f4:ff:2b:68:92:
10:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8B:5A:BD:DC:42:13:FC:50:37:30:78:C9:C7:AB:1E:82:DE:BC:92
X509v3 Authority Key Identifier:
keyid:67:1C:D0:71:DC:96:0B:DC:82:9B:0B:E7:E3:4B:6B:61:CF:8B:0B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:9a:54:6e:60:a0:26:62:ab:8c:c5:b8:1d:8b:5d:b4:45:da:
77:92:46:d4:2b:0e:3d:bf:17:d8:7c:fd:c8:18:82:53:c8:35:
fe:43:12:9c:f2:1b:fb:75:6d:65:01:05:fc:97:48:d3:0c:0e:
76:ed:8e:10:9f:19:a1:9a:70:b5:62:1b:31:c4:39:e1:99:26:
30:fc:73:e4:d2:8d:4a:4e:eb:79:dc:b1:62:41:e1:5e:8b:9c:
d9:43:4d:2d:44:2c:b7:8a:53:87:4c:41:e5:8f:64:0d:f9:cd:
e6:ae:07:4f:6f:6d:af:6a:8a:66:59:ff:17:81:36:f4:ce:a0:
81:20:66:98:cb:11:54:0e:c9:ec:4a:7f:a8:06:c4:7a:61:5c:
e5:84:ed:24:78:22:cb:f8:64:22:05:8b:f3:2b:91:cc:fe:31:
43:2c:46:75:eb:7c:8f:44:e7:a6:db:fd:10:1e:a5:dd:6e:63:
cc:66:5a:53:72:a0:ea:fe:09:02:13:e6:a0:81:55:b8:b2:3d:
17:7f:b4:3c:2e:ec:1f:17:33:52:24:b5:2e:a2:18:43:6d:93:
ce:2b:7c:65:bd:21:49:3a:d0:b4:76:81:63:61:e4:21:7a:43:
fe:66:fc:c7:95:41:95:a0:bb:38:58:97:95:f0:d7:51:43:90:
c2:11:a1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:58:07 2026 by rpki-client