Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
File: Zs01lGjIuqmPw8ou8tkFg6aeABY.mft (raw, json)
Hash identifier: E0yv9luO2tsHjgX/njWjP6rRZMbD0maqVvjD8jY4+vg=
Subject key identifier: 10:17:F4:F1:D0:74:40:BA:F6:52:4D:01:4A:41:3C:45:23:15:C2:A7
Authority key identifier: 66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16
Certificate issuer: /CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016
Certificate serial: 019D28846078BB5EE4A17F76B02B34A99355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
Manifest number: 010A
Signing time: Thu 26 Mar 2026 05:00:57 +0000
Manifest this update: Thu 26 Mar 2026 05:00:57 +0000
Manifest next update: Fri 27 Mar 2026 05:00:57 +0000
Files and hashes: 1: Zs01lGjIuqmPw8ou8tkFg6aeABY.crl (hash: of3WaPrpYZJSG48uZWUuYao9TU2q0pa2PtUpTxDjTRI=)
2: rqJldLN-S-H8DV7_BXB9c6fFRDg.roa (hash: 8ct3OMMYCUQEAyF1g7DbkXYuvpJT+cTHy+wjPP6qYuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:60:78:bb:5e:e4:a1:7f:76:b0:2b:34:a9:93:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016
Validity
Not Before: Mar 26 05:00:57 2026 GMT
Not After : Mar 27 05:00:57 2026 GMT
Subject: CN=1017f4f1d07440baf6524d014a413c452315c2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:16:50:7f:6b:25:53:ad:6f:91:76:ce:62:6c:
15:da:8d:45:f1:95:8a:66:68:e4:9d:8f:1a:27:35:
a5:a6:26:60:41:a7:c2:6e:9e:02:af:1c:c2:a2:c6:
60:c7:b5:61:c0:93:96:6e:57:ff:b0:a6:42:f2:49:
ea:a4:5e:31:ba:fc:2d:ee:3c:69:01:21:b9:07:06:
c6:fc:ee:c5:a1:02:07:23:6e:5a:9f:e1:75:d6:4b:
dd:0c:56:77:80:0e:c9:3c:a4:e5:09:c9:61:a6:b8:
00:fd:95:1a:91:7f:eb:26:f6:6f:f1:36:f5:f4:b0:
cb:36:9c:13:f1:2f:27:05:69:00:fb:e8:9b:76:eb:
52:25:f0:31:cd:7b:42:4e:20:2b:72:5a:32:fe:30:
6e:4a:cd:96:73:68:63:45:94:7d:5e:d0:de:67:c0:
d0:25:c8:5d:f7:b6:49:8d:05:80:19:a1:c2:3f:22:
d3:fd:06:df:0e:e7:65:93:72:17:a1:47:be:87:b5:
5f:9f:eb:ad:8e:49:62:60:09:2e:0e:cf:db:78:d6:
0d:85:ff:be:0f:ab:d9:20:f3:99:59:18:d9:62:8c:
89:25:eb:5a:79:fa:6c:ce:5c:c8:39:c0:e7:95:9d:
4a:ae:69:5e:32:bc:3c:8e:2b:9e:d2:52:62:b7:fb:
71:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:17:F4:F1:D0:74:40:BA:F6:52:4D:01:4A:41:3C:45:23:15:C2:A7
X509v3 Authority Key Identifier:
keyid:66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:70:fc:52:2a:5a:28:7b:9c:58:f0:6c:53:de:7f:7d:ac:d5:
2b:7e:98:7b:7f:9c:33:53:9c:77:bd:56:3d:c6:43:85:84:33:
ab:15:b9:84:1e:af:b0:ac:5a:c5:64:26:6f:6f:38:8e:9c:40:
14:f8:e8:b4:a5:3c:f8:b3:ea:34:9d:06:e1:45:2d:e3:5d:2f:
2c:04:d2:de:04:bb:2b:f0:19:e5:68:13:f7:1b:2e:4a:f0:bf:
66:9d:8b:d8:eb:ff:f5:a1:47:6f:c4:5c:74:10:cb:a2:79:9a:
4d:ac:5b:ba:24:5c:ab:6b:e9:bc:6f:79:e2:41:6b:b0:b3:f0:
b2:e1:65:a0:a0:55:c1:e7:6c:f1:c4:d7:98:18:50:f9:a4:30:
7c:da:65:6a:88:16:96:b1:32:63:7b:db:93:b5:cc:e6:e2:e3:
08:62:32:27:8e:86:8d:a7:02:f8:3b:46:7e:c2:e0:95:01:4a:
2c:d4:73:f6:9a:08:32:be:cf:3e:80:37:82:37:ce:83:a0:da:
4e:81:20:6a:46:a5:88:ec:c0:77:00:5b:67:36:60:f2:89:fe:
91:1a:c3:7b:fa:2b:72:5e:ad:f9:6b:1f:4d:cf:0d:56:db:a8:
20:9e:13:64:8d:4e:11:6a:c6:1a:1e:f2:a4:6c:cf:2b:58:a1:
e4:7a:bf:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:21:09 2026 by rpki-client