Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
File: zVW0Jf7PefCeB0stbzphbHtoVwA.mft (raw, json)
Hash identifier: cjnZao/x4jlXZxwnwIFWfPEDVRxQtJrPcJJbGPEHsSk=
Subject key identifier: 26:79:DD:D9:D3:E2:CA:06:5B:53:9C:9A:9F:96:FB:8A:D0:5F:93:9A
Authority key identifier: CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00
Certificate issuer: /CN=cd55b425fecf79f09e074b2d6f3a616c7b685700
Certificate serial: 019D2960B38BF0526CF0D734C5DC067FB711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
Manifest number: 15C5
Signing time: Thu 26 Mar 2026 09:01:36 +0000
Manifest this update: Thu 26 Mar 2026 09:01:36 +0000
Manifest next update: Fri 27 Mar 2026 09:01:36 +0000
Files and hashes: 1: 7BLFrUv-21NPi5YU_QcyTQXK6sE.roa (hash: eZF7mM5D7X3yGSrbx54ZgMvJ5nO57jhcGZL0Higsrxw=)
2: zVW0Jf7PefCeB0stbzphbHtoVwA.crl (hash: Tb7oxTNSObrIPotye1mYMo37gQCKYeq4jwcrXJPkYDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:b3:8b:f0:52:6c:f0:d7:34:c5:dc:06:7f:b7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd55b425fecf79f09e074b2d6f3a616c7b685700
Validity
Not Before: Mar 26 09:01:36 2026 GMT
Not After : Mar 27 09:01:36 2026 GMT
Subject: CN=2679ddd9d3e2ca065b539c9a9f96fb8ad05f939a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:72:dc:1d:a1:91:61:5c:0f:15:f3:fa:16:5c:
98:39:3a:ec:6c:fd:31:bc:83:93:b6:ea:ea:8d:aa:
18:30:5e:4a:e0:04:13:98:bd:e2:f1:ac:c5:cf:0c:
40:2e:81:dc:78:ce:e5:c0:e6:a5:07:27:9a:db:48:
60:35:0a:b5:94:16:85:0e:2f:7f:d8:8f:9e:20:ea:
d6:4b:be:c2:96:97:af:f0:b2:1a:d1:44:cf:9d:9f:
fe:09:41:49:d7:48:ac:e6:85:7d:a5:cd:86:8a:da:
58:86:c8:e9:31:f7:42:ab:66:4c:89:4d:c0:d5:c9:
05:ac:e2:6b:b2:3b:16:5a:c5:5e:06:4a:f2:4e:22:
f4:fc:25:69:5e:b4:d9:97:0a:5e:25:8e:33:f1:1d:
7f:9f:09:60:49:21:c0:76:66:49:ae:ef:cd:21:9b:
cc:77:c6:c6:72:91:0a:ed:a8:5b:50:92:61:15:ff:
ca:f9:24:c4:cd:13:a5:3a:63:95:2b:1d:4e:82:38:
f3:8c:b0:85:ed:9d:a5:1a:f8:bd:3d:c7:fb:68:71:
b7:95:eb:d2:0b:a3:f3:86:b4:0f:03:7a:10:80:92:
97:98:23:f9:94:79:94:9e:a2:e7:65:9e:3f:b6:7c:
88:49:ad:a2:0a:bb:09:b1:c1:c9:d5:cc:75:15:08:
90:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:79:DD:D9:D3:E2:CA:06:5B:53:9C:9A:9F:96:FB:8A:D0:5F:93:9A
X509v3 Authority Key Identifier:
keyid:CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:26:16:4f:3b:2e:b9:27:23:49:28:ca:64:3b:7f:52:1e:87:
c4:2d:e5:27:8f:58:a3:11:84:cf:b6:31:0d:91:3d:b6:34:68:
9b:d7:6a:4e:1f:b0:46:47:f7:ff:06:c7:e1:eb:5a:64:e6:03:
52:4f:71:2e:d8:41:ec:ff:f1:ca:9b:9a:62:78:94:a9:d2:b3:
07:12:16:6e:a7:fa:81:90:e6:bc:18:84:ed:9f:77:58:26:9e:
f1:c9:7e:61:a4:18:b4:66:a2:76:cc:fa:ed:2f:2d:02:ef:0d:
d8:56:f8:a8:1b:35:71:35:a1:23:cf:4a:f9:fe:c4:90:d8:15:
13:26:73:76:c3:74:11:bf:04:54:5f:d5:cc:16:0d:35:82:b0:
bf:84:81:b7:82:e5:c7:51:cf:8c:fb:72:0f:71:37:7b:c7:43:
e9:d6:1e:84:36:50:d2:57:50:5f:b9:06:88:d2:08:aa:48:df:
0a:e7:5b:e2:60:9d:d0:23:50:ef:25:18:46:37:e3:2b:08:c3:
8c:e6:91:d1:c7:74:4c:b2:9c:ac:f7:71:1b:a5:e0:c0:a2:88:
fd:ea:d9:0b:13:d2:f1:6e:5b:7b:f8:e8:af:1b:c9:00:9b:19:
21:9d:eb:a3:3c:e2:18:ff:19:fd:97:3e:b6:e2:e3:8e:61:8f:
a7:7a:c1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:54:32 2026 by rpki-client