Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft
File: ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft (raw, json)
Hash identifier: DNXXMR5dhbT0ddxGjWhttp83IPxW62DEy+ChKlCRoLI=
Subject key identifier: 37:18:34:0B:D1:AA:50:40:4F:0A:43:1C:7C:3D:6D:6F:C0:0C:5A:26
Authority key identifier: 64:D4:05:4D:1B:62:15:8B:83:35:A2:01:9F:05:48:B3:87:2A:34:43
Certificate issuer: /CN=64d4054d1b62158b8335a2019f0548b3872a3443
Certificate serial: 019D2632D60FA79A6DD67D56EF337757A824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft
Manifest number: A7
Signing time: Wed 25 Mar 2026 18:12:38 +0000
Manifest this update: Wed 25 Mar 2026 18:12:38 +0000
Manifest next update: Thu 26 Mar 2026 18:12:38 +0000
Files and hashes: 1: T7kOnECCHhXaKkkHKCvdyMncTyg.asa (hash: OxvLTxdGV0opdARXIVi3FFKGspBrVw8KchfSlANuVA0=)
2: TVkiRXXbiNeek8u54GLPamoS8ts.asa (hash: 4K43HTfZssyXoWOZbLXPc82k9xpp+VV2pw66WoB3LbU=)
3: ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl (hash: n/NBj3OtG0ZQOFddcPSQO8HtPHk0zrNBfViPzyi44QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:32:d6:0f:a7:9a:6d:d6:7d:56:ef:33:77:57:a8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d4054d1b62158b8335a2019f0548b3872a3443
Validity
Not Before: Mar 25 18:12:38 2026 GMT
Not After : Mar 26 18:12:38 2026 GMT
Subject: CN=3718340bd1aa50404f0a431c7c3d6d6fc00c5a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b9:a9:66:7e:3f:8a:34:e8:87:17:b7:94:6f:
6d:68:cb:f2:ff:44:c8:5d:cd:1a:e8:f1:9c:83:2a:
e4:aa:08:a5:48:d6:41:4c:9c:de:40:4b:41:91:0a:
4c:70:86:05:f7:d1:86:17:48:83:c6:77:f4:22:42:
52:09:40:29:fa:ef:ba:43:29:c3:0c:87:84:17:dc:
1f:3b:c3:2e:16:3e:7d:39:e7:15:a7:c9:b5:c1:da:
c6:a7:e5:9c:24:e3:9f:a2:2f:45:52:03:45:83:5b:
a3:5f:f9:25:7b:0a:4f:7a:b6:41:86:89:10:96:c7:
3f:74:b2:68:0f:b0:9e:b5:bd:9d:c5:62:e7:6b:83:
71:88:ac:9f:96:21:8e:65:2c:cd:34:ec:81:69:8f:
8a:c5:76:a6:80:e1:d9:00:01:b2:55:ce:25:2d:fc:
6c:42:79:f0:93:33:7a:e1:40:7f:9a:80:c7:8b:3e:
37:61:0a:c8:1d:5a:70:34:84:59:cc:e3:99:d2:c0:
47:c7:b6:9e:11:03:45:48:4c:cd:48:f8:7c:97:c2:
9d:12:d0:2e:15:73:30:ba:25:9e:e9:15:9b:40:e2:
78:8e:f1:73:ae:d2:e3:a8:49:1f:65:a7:80:2b:7f:
53:ea:2e:51:2e:da:d8:02:39:80:90:51:0b:fe:b9:
21:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:18:34:0B:D1:AA:50:40:4F:0A:43:1C:7C:3D:6D:6F:C0:0C:5A:26
X509v3 Authority Key Identifier:
keyid:64:D4:05:4D:1B:62:15:8B:83:35:A2:01:9F:05:48:B3:87:2A:34:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ff:7e:ad:9e:77:c3:a8:d9:2f:6e:28:77:36:e8:af:cf:87:
fa:8f:96:eb:08:25:f9:b5:4c:64:53:02:e7:92:45:58:31:d3:
5d:8b:4f:45:cc:4a:66:24:db:3f:92:62:b0:48:85:a2:52:74:
26:24:3a:af:ce:1a:e2:3e:04:68:47:50:fd:8c:58:ef:c3:99:
3e:4e:07:6d:d5:71:0c:69:18:ce:cf:d4:c8:0e:5c:d0:18:17:
aa:ce:64:72:d2:3c:85:6a:61:06:76:0e:db:d7:d9:32:f9:13:
3a:4c:a6:8a:84:40:9b:fb:17:d4:3b:46:97:12:b5:fc:b0:d9:
2c:f2:01:6c:f4:5d:93:d7:65:ac:32:09:16:06:8c:2b:35:3e:
89:c5:1f:82:85:e2:d4:4d:64:7c:cd:d0:20:5e:cf:97:a9:26:
a8:10:b3:15:b2:20:3a:0c:b1:8f:d1:4f:25:2e:60:88:8e:65:
c9:c3:70:e2:8a:da:e0:6e:5e:78:b2:70:46:dc:37:a5:f5:e4:
7c:11:62:29:c8:a4:57:db:eb:ac:4d:6d:5a:d0:90:2a:ac:11:
9b:a3:e6:a8:ec:21:4b:77:74:f8:45:40:e0:d0:cc:0a:3f:44:
f7:5b:d9:3d:9d:fa:8a:e6:fa:db:06:30:0c:50:b8:b1:1d:0c:
a0:db:c5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:53:52 2026 by rpki-client