Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
File: zmVHG5SjJgwtn2WNztL4f0C1Qks.mft (raw, json)
Hash identifier: Ah4Pay3MNNMEU4XBgRRZcOnCsfkwuMqennCnEYcAfRQ=
Subject key identifier: 91:2D:82:FC:A3:F1:62:F1:D3:33:8E:7F:11:F2:15:8B:ED:96:CC:F8
Authority key identifier: CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
Certificate issuer: /CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Certificate serial: 019D2A3B943EB10EAB355B9746CB02FFB671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 13:00:40 +0000
Manifest this update: Thu 26 Mar 2026 13:00:40 +0000
Manifest next update: Fri 27 Mar 2026 13:00:40 +0000
Files and hashes: 1: CXkKc_BGGlQDVJndPZpJEIKApLM.roa (hash: lB6WL5NHR05zZ3JJcK7U/WiKpx7SIVQpEQDB/XRsPv0=)
2: zmVHG5SjJgwtn2WNztL4f0C1Qks.crl (hash: 6sT8zmlG+/un+sjI9MR9+Id8ZPo7ArbN/CoJO6Y0M6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:94:3e:b1:0e:ab:35:5b:97:46:cb:02:ff:b6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Validity
Not Before: Mar 26 13:00:40 2026 GMT
Not After : Mar 27 13:00:40 2026 GMT
Subject: CN=912d82fca3f162f1d3338e7f11f2158bed96ccf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:49:1f:9e:2a:a3:8f:ef:8b:39:e4:59:bd:82:
bd:ba:02:7c:be:3f:14:93:aa:4f:0e:52:0d:75:e4:
5f:eb:5d:28:92:58:60:3b:f6:06:cf:e8:b9:f9:f5:
2f:3d:90:b7:e6:f2:f7:12:4e:17:3d:47:2c:b8:c7:
42:31:89:4c:cc:1c:f1:53:dd:f4:0d:af:60:92:ed:
a1:83:91:fc:64:84:82:a5:5a:84:b0:c6:58:b1:27:
36:55:00:93:16:5a:f5:69:dd:47:e8:33:f8:05:7f:
a9:f8:5d:b5:6c:fc:6f:c0:87:e3:bd:f7:8b:a8:66:
44:82:bc:44:c1:40:fd:5b:ef:34:de:0b:a5:6f:55:
36:fd:44:35:4b:f5:8c:a7:9e:f4:45:38:a0:ff:f7:
39:a9:61:db:1d:a5:98:c3:1a:40:22:c7:49:94:17:
6b:e3:76:45:73:ea:10:73:e9:bb:ab:84:d7:5b:de:
14:12:ed:1f:cc:c7:2d:a4:d3:f8:92:1f:e9:69:64:
39:87:6c:86:ac:f8:03:c1:9f:84:11:5b:53:99:5c:
8e:12:f2:d3:10:46:fe:31:00:38:7a:5a:4d:22:b3:
91:eb:f3:92:f6:dd:32:3e:96:79:c0:47:71:e4:fb:
37:ec:ce:a0:77:14:75:be:81:3e:66:e1:12:2b:fa:
03:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2D:82:FC:A3:F1:62:F1:D3:33:8E:7F:11:F2:15:8B:ED:96:CC:F8
X509v3 Authority Key Identifier:
keyid:CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d1:f2:50:ee:35:eb:bc:bd:fd:6a:53:af:0a:59:ec:e6:4e:
eb:35:68:b0:33:b9:99:87:7c:e7:6c:63:4d:01:fc:a8:95:ad:
86:c1:6b:1c:05:84:65:95:e0:e3:f5:f0:46:a5:6f:23:61:07:
12:d9:ab:d1:c8:51:7f:f4:02:39:b2:66:64:a7:42:9d:50:72:
fb:ef:dc:9c:bc:5e:14:69:52:3e:b3:da:9d:0b:a5:6d:5a:ba:
37:21:b5:14:9c:7e:31:63:69:04:3e:87:f0:3f:a3:fe:4e:3a:
66:74:5e:3b:32:0c:97:81:3d:1d:8b:e9:9e:08:56:ec:6c:9d:
a2:b4:d5:7d:9b:64:53:28:26:a7:12:02:f9:31:03:eb:4c:9b:
79:ed:88:c7:ff:7b:af:7e:9b:37:d4:98:4b:48:25:c7:ee:b1:
38:f9:ad:77:b1:9f:d5:41:e7:14:65:ea:75:9d:58:89:a2:81:
af:3a:d5:9e:2b:11:58:d6:0f:e9:40:ff:51:5e:70:42:a0:68:
f8:c9:fe:52:d1:5b:66:86:21:f1:03:be:16:c6:ba:00:f7:80:
58:94:00:a9:25:3d:e4:73:de:83:3b:15:37:09:d6:91:07:7b:
02:7c:1e:29:a9:72:73:1e:3f:f1:a5:7d:ce:be:88:ce:c0:c6:
70:6e:6f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:14 2026 by rpki-client