Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
File: Zs01lGjIuqmPw8ou8tkFg6aeABY.mft (raw, json)
Hash identifier: cfClk+VjY+KpB438VrGnM1ne7ZukOB60gwQUZSesf9k=
Subject key identifier: B3:CB:62:B5:B8:A7:41:58:BA:DE:BD:FC:25:AD:E4:97:E6:17:CB:3C
Authority key identifier: 66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16
Certificate issuer: /CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016
Certificate serial: 019D2695F0025124661A83B464A46470AA13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
Manifest number: 0109
Signing time: Wed 25 Mar 2026 20:00:53 +0000
Manifest this update: Wed 25 Mar 2026 20:00:53 +0000
Manifest next update: Thu 26 Mar 2026 20:00:53 +0000
Files and hashes: 1: Zs01lGjIuqmPw8ou8tkFg6aeABY.crl (hash: cm+rIEwfW92X5uq3mJfU1MOq76Y1RZ4p5E5+bOdA4UQ=)
2: rqJldLN-S-H8DV7_BXB9c6fFRDg.roa (hash: 8ct3OMMYCUQEAyF1g7DbkXYuvpJT+cTHy+wjPP6qYuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:f0:02:51:24:66:1a:83:b4:64:a4:64:70:aa:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016
Validity
Not Before: Mar 25 20:00:53 2026 GMT
Not After : Mar 26 20:00:53 2026 GMT
Subject: CN=b3cb62b5b8a74158badebdfc25ade497e617cb3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a0:89:5c:f9:5a:3e:24:35:ab:24:ff:ec:e6:
cb:4c:87:1e:c4:51:15:72:90:5b:47:ac:12:85:ce:
ab:4b:b9:86:76:85:fd:2c:8f:b2:87:d5:c7:a1:90:
77:4b:6d:b8:1f:c8:13:87:c8:dd:5b:cd:58:1b:82:
01:80:da:a3:c7:3b:0d:5b:cb:a5:d7:f4:19:30:af:
bc:f1:3c:03:15:7f:73:d9:4d:7a:75:c9:2d:38:4e:
2c:30:99:f6:3b:e1:f0:bb:76:6d:4e:28:bd:37:f4:
2d:ca:72:19:29:bb:5b:ba:c2:11:f9:41:fe:fe:49:
c6:77:74:f2:86:1f:fe:f0:c5:68:0c:cb:1c:06:86:
e2:98:ee:74:a8:b6:e1:da:e8:9b:eb:33:bb:e3:27:
f8:7f:07:09:9a:b3:7f:db:4f:d6:9c:2e:a1:1b:72:
b9:1a:f1:22:eb:5b:89:39:6e:f0:77:ec:99:13:f7:
d7:aa:1a:e5:d5:7d:ff:d4:2b:d1:24:70:47:ad:1b:
a1:26:b1:3e:08:30:7d:bd:45:8e:04:09:16:0c:0e:
6d:3b:08:e6:49:71:02:75:a2:8c:40:a7:78:87:f2:
b2:c6:61:29:72:8e:d7:c4:bd:3a:4a:f4:db:f8:d9:
26:51:96:df:61:fe:e1:91:1d:02:6e:0c:77:34:50:
2a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CB:62:B5:B8:A7:41:58:BA:DE:BD:FC:25:AD:E4:97:E6:17:CB:3C
X509v3 Authority Key Identifier:
keyid:66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:21:00:28:4b:d8:2b:70:f6:8f:f0:32:1d:72:80:3a:47:42:
3e:71:a6:5f:e3:8e:a3:07:e8:fb:a0:dc:e4:26:24:a5:3d:bd:
64:9a:71:08:43:6c:c2:a8:0e:92:88:dd:da:71:2d:91:45:3f:
96:8f:9c:20:5d:e8:63:73:c6:f8:16:3e:65:1b:8f:c5:0c:7b:
f6:d5:5b:6c:8e:3e:4a:8a:ed:cb:f6:56:c2:76:fe:58:db:97:
e2:bf:92:08:27:1b:b8:4d:ba:0c:09:a0:f4:73:0f:b8:1a:32:
4a:4d:b9:82:10:38:08:b2:b8:79:2d:f8:e6:0c:c6:7f:55:c6:
d3:eb:f6:6f:0c:45:d5:43:38:39:ec:e0:c1:ab:2c:e4:e5:48:
0e:61:9e:e3:61:13:97:c2:c2:56:8b:68:e9:3b:3f:74:2c:55:
99:74:c6:ca:25:9c:7d:51:d1:b2:29:8b:40:c5:7c:c4:98:c0:
10:29:fb:51:a8:37:62:e4:8e:5b:7b:68:ca:fa:52:5c:41:7a:
ac:76:f8:cc:86:65:27:e5:ac:de:ba:d2:6c:dd:3c:64:64:1b:
fd:3d:24:e0:2f:54:8c:92:5a:91:33:17:51:28:4b:ff:8b:fb:
63:ee:f7:2e:f1:a7:1d:0d:89:f0:f7:4e:8d:37:cc:42:e9:10:
84:99:a4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:55:12 2026 by rpki-client