Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
File: zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft (raw, json)
Hash identifier: Z2638Lonebi0F11fu6U0cW7zziSsvWDk9VwybD/Aiz8=
Subject key identifier: 2B:C1:E5:37:A1:50:FE:20:5F:D3:B3:54:0C:47:72:78:9E:D8:68:C4
Authority key identifier: CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B
Certificate issuer: /CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
Certificate serial: 019D25842968DBCC135AC04ED321730A0CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
Manifest number: 1018
Signing time: Wed 25 Mar 2026 15:01:51 +0000
Manifest this update: Wed 25 Mar 2026 15:01:51 +0000
Manifest next update: Thu 26 Mar 2026 15:01:51 +0000
Files and hashes: 1: fYjLJ_S4xQF5EQ8dCDUqnVyl_8A.asa (hash: 705A5S9P8d7FMvDAtpubZo7+psLytS4YtJCLo8gRXkE=)
2: zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl (hash: Smhw/X69ZEf2GZ9+f+AT5VABbDZyIRb7vA1JM4vOJXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:29:68:db:cc:13:5a:c0:4e:d3:21:73:0a:0c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
Validity
Not Before: Mar 25 15:01:51 2026 GMT
Not After : Mar 26 15:01:51 2026 GMT
Subject: CN=2bc1e537a150fe205fd3b3540c4772789ed868c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:68:7a:0a:ea:ff:a9:c5:0c:97:64:49:cc:
84:d5:e7:e8:6b:56:f6:af:d6:fc:d6:3e:4c:43:7e:
83:b8:35:86:1c:72:8a:be:10:9b:fd:ae:50:d0:85:
9c:bc:15:1d:6e:e8:61:b8:a4:9a:8b:69:37:ea:67:
99:e1:a5:f2:8d:d7:91:da:d2:c6:d1:7d:c5:5c:6a:
af:45:de:d3:49:98:d3:91:df:fe:37:bd:6c:23:7c:
ff:6f:74:53:f0:dc:06:9f:8e:41:28:e5:0e:aa:d0:
6e:c9:4e:c7:a7:a9:ec:8f:8b:6b:41:80:c1:7b:d6:
30:17:42:8d:83:9d:c0:0b:2b:e1:b4:89:dd:e9:24:
29:cc:f1:83:9a:2a:8a:88:c2:9a:3d:13:cb:bc:bb:
ad:d2:a0:38:d0:65:e2:05:85:7d:f3:e2:17:c7:97:
aa:78:40:1e:c9:bc:46:3e:57:b8:76:7f:00:87:e7:
b8:93:67:b3:8e:f9:27:1a:34:08:f9:47:52:32:b2:
62:87:bd:3d:c7:26:c5:c4:8c:96:b0:28:37:ff:17:
e0:05:cb:05:80:4b:c5:6c:c9:46:64:5c:70:b9:7e:
15:e7:08:43:ff:6e:a5:b1:ca:80:56:e4:72:3b:45:
92:0e:c0:b7:18:03:d8:b3:5a:9f:88:22:46:c8:27:
cd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C1:E5:37:A1:50:FE:20:5F:D3:B3:54:0C:47:72:78:9E:D8:68:C4
X509v3 Authority Key Identifier:
keyid:CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:98:de:e7:a8:39:78:1c:6a:4c:78:64:0f:c8:5c:bd:cd:b9:
4f:a0:6c:f2:31:de:a8:09:9f:59:01:72:f3:0e:43:ca:f7:b2:
b4:6d:28:4a:51:58:ca:12:2e:14:de:56:7d:c5:ec:60:06:93:
91:2d:2d:be:2b:78:14:ff:aa:d4:1d:0a:55:4a:16:aa:b6:9b:
65:4f:ea:e9:5d:44:22:c4:73:67:ca:5c:e6:70:e0:71:88:77:
fb:08:ad:ec:10:25:c4:3f:b9:f9:4b:99:87:99:cf:23:d2:13:
30:59:98:35:e4:5c:b5:f7:8a:bf:b2:cc:48:28:66:0a:45:73:
08:03:0b:fe:a3:d5:c2:01:1c:d4:94:d7:1c:22:26:f4:b4:fa:
15:49:2f:52:3c:57:33:89:c0:88:25:d1:5d:17:86:53:b6:c8:
ac:99:a6:1a:c2:01:ec:e0:10:fb:ab:7f:e5:17:54:d9:e5:2c:
38:01:be:70:38:d6:a8:65:a8:47:fe:f9:66:8c:cb:9e:7c:22:
36:22:cf:57:ba:92:ac:2b:52:7a:c7:7c:db:43:3e:dc:b1:db:
43:5d:d3:4a:f2:43:58:21:dc:d7:d4:e1:07:ff:f2:f7:81:9c:
6b:81:72:44:31:9c:c3:80:1c:e8:82:7f:9d:28:7d:58:22:d9:
7a:44:a7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:39:25 2026 by rpki-client