Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
File: zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft (raw, json)
Hash identifier: 8cj4lSFqJTunzl/qSZ6wcsjhL4L1AK4WeMHwLL8VESM=
Subject key identifier: BB:F7:5C:81:24:92:7F:70:84:B1:8A:03:80:8E:12:D6:D1:61:2D:42
Authority key identifier: CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84
Certificate issuer: /CN=cc8df88054060df685bba9739123e8342d479e84
Certificate serial: 019D27A8AAAD15B2D8447E2978C951198AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
Manifest number: 1820
Signing time: Thu 26 Mar 2026 01:00:58 +0000
Manifest this update: Thu 26 Mar 2026 01:00:58 +0000
Manifest next update: Fri 27 Mar 2026 01:00:58 +0000
Files and hashes: 1: nWemIk_PUFibWyxsMCHuSPNqyxE.roa (hash: LfDaK0qO1xTJjSEUv9R58HxO4b8gyazqBrXpwSZbnWE=)
2: zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl (hash: GVu3GH8c6768fn2/gJNW9/pd3g4SAWBdzdZEGuhqjsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:aa:ad:15:b2:d8:44:7e:29:78:c9:51:19:8a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc8df88054060df685bba9739123e8342d479e84
Validity
Not Before: Mar 26 01:00:58 2026 GMT
Not After : Mar 27 01:00:58 2026 GMT
Subject: CN=bbf75c8124927f7084b18a03808e12d6d1612d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:04:22:b6:d7:c7:70:32:6b:e1:04:61:f5:09:
32:b9:37:9c:48:3c:23:d2:ea:80:d9:cb:69:3f:1b:
03:ec:49:10:5b:8d:db:22:dc:ed:01:ad:98:13:53:
05:0f:ff:a7:15:7f:63:6c:4f:62:91:45:e7:2e:62:
81:7b:81:f2:59:5c:ad:ba:eb:56:b4:5f:aa:2a:b8:
24:09:ed:36:f4:79:ae:dd:d5:98:a3:b0:ac:81:fa:
09:34:73:1f:0d:39:ef:cb:1f:54:8a:06:6b:25:47:
95:32:52:c4:08:3a:32:42:3b:e7:ad:41:ec:de:29:
52:e0:65:76:04:14:6c:46:32:89:86:fa:c6:8a:07:
c0:8c:f3:26:5a:61:dd:f1:82:60:66:8f:82:f5:06:
97:6f:35:8f:82:ba:67:b1:9e:74:9b:4a:94:55:6b:
1e:c8:db:0f:b9:99:ab:42:91:f5:17:9f:c5:d3:eb:
bb:b8:fc:16:42:f9:dd:06:d4:8a:56:77:a9:b2:bb:
f6:6a:c9:15:67:fb:67:f3:3b:87:bd:b4:a3:31:12:
f8:67:bf:9c:7c:de:5b:dd:40:22:7e:93:78:3b:81:
a4:50:37:63:ef:bf:59:eb:9a:91:1c:7f:73:58:0e:
27:8d:77:a8:3a:e9:27:c8:e2:2e:f2:b5:fb:9b:14:
31:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F7:5C:81:24:92:7F:70:84:B1:8A:03:80:8E:12:D6:D1:61:2D:42
X509v3 Authority Key Identifier:
keyid:CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:81:80:f2:50:f9:f3:5e:9d:d5:80:a0:4c:d0:0b:c4:53:66:
c5:e8:d0:8f:45:1e:ba:3c:9d:d7:0f:cc:d8:e0:49:c2:3c:a1:
ab:5d:52:fc:a7:da:ba:15:2b:b8:94:65:e0:28:d2:6c:18:e9:
50:6d:65:9f:9c:a7:2f:c0:9c:e6:9c:b5:10:2f:6e:2c:59:5b:
16:11:f0:79:67:87:b5:ed:f8:74:d2:fc:1f:63:55:3a:df:37:
56:80:33:d6:0b:a8:03:95:dd:8d:ca:5d:99:23:80:42:6f:a1:
b1:1e:5f:37:45:31:f8:4a:28:f8:74:9a:92:bb:c7:c4:98:e8:
c3:27:52:0d:0f:d5:a3:7f:14:55:61:db:22:a4:08:93:7e:76:
a7:d3:05:36:4d:27:ec:66:4b:6f:8f:c7:15:1c:d0:48:2a:84:
9b:c5:55:b5:9a:42:a4:72:0f:1a:a7:cd:05:59:24:02:f8:3d:
a5:e6:6b:49:fa:19:89:60:2f:93:fa:ee:9d:1a:99:36:90:32:
46:69:48:19:12:b4:0b:c9:61:8f:b0:c3:76:50:a5:22:1d:cc:
c6:23:0a:21:fc:16:89:b0:f4:5b:e2:64:95:57:84:ab:bf:09:
07:9a:56:21:a5:78:69:6a:99:f2:62:e2:6e:81:0f:a1:02:1f:
97:cc:e9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:18 2026 by rpki-client