Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
File: Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft (raw, json)
Hash identifier: ZQe1RRUrDHAMxuCjvhNgKzQBZU8R492bFjVzf818DQg=
Subject key identifier: F4:65:81:59:E5:2C:5F:DE:B5:47:AF:FC:50:BC:82:EB:E6:AA:D8:5E
Authority key identifier: 66:6D:97:CE:B8:4E:9C:61:6B:FE:6D:93:57:6C:C3:3B:BF:4B:63:EF
Certificate issuer: /CN=666d97ceb84e9c616bfe6d93576cc33bbf4b63ef
Certificate serial: 019D277244C4C4E10B4750C4B2C8DCB8F798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
Manifest number: 17FB
Signing time: Thu 26 Mar 2026 00:01:33 +0000
Manifest this update: Thu 26 Mar 2026 00:01:33 +0000
Manifest next update: Fri 27 Mar 2026 00:01:33 +0000
Files and hashes: 1: 6athwBrtylH9PrTB1To_GHuyoLk.roa (hash: KvX3mkFuSj/fSyt2Atm7Fel+40as+0+gYyexQT4CePY=)
2: Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl (hash: sE2/9KBTdToGWJsUH8FECks29FbyZ95yiY9/PsSJaBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:44:c4:c4:e1:0b:47:50:c4:b2:c8:dc:b8:f7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666d97ceb84e9c616bfe6d93576cc33bbf4b63ef
Validity
Not Before: Mar 26 00:01:33 2026 GMT
Not After : Mar 27 00:01:33 2026 GMT
Subject: CN=f4658159e52c5fdeb547affc50bc82ebe6aad85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1d:d6:ee:08:4a:9c:00:5f:03:c8:0f:e7:0b:
ba:d2:35:9c:d0:b7:16:8f:b3:fe:d5:02:c9:a6:72:
e3:74:81:96:19:88:1c:3b:ad:e8:ea:ff:36:56:b5:
d3:60:cd:78:4e:5f:53:43:cd:cf:b8:b2:74:4c:7a:
35:e6:92:bf:92:5d:77:4f:81:ca:ed:04:be:7b:67:
1f:04:3c:82:ae:d8:74:01:c5:5c:3d:51:c3:3d:cb:
d1:cd:e8:05:0c:bd:af:35:65:01:9a:63:f7:6a:b3:
87:5e:b2:98:8a:68:88:0d:6c:74:df:cb:b8:df:b2:
e9:8b:a4:b2:62:9e:e7:e6:66:c8:ee:68:6e:66:b1:
f9:f4:d7:fa:58:05:93:05:02:68:00:6d:d1:1b:b7:
94:75:2d:3f:e3:85:33:51:1b:a1:b2:17:af:a8:a0:
6e:fc:9c:39:d4:ad:16:1d:1c:03:90:7e:02:e2:ba:
04:36:9e:e7:b3:f2:19:f2:a1:cf:e8:4a:54:7c:27:
2f:85:0a:08:5e:2d:a2:34:b7:07:aa:c2:c0:4e:1a:
b5:ff:80:95:34:b6:52:ee:a2:fe:f6:75:6f:a1:e5:
c0:35:07:a8:27:c1:a5:4b:62:64:a7:da:42:57:33:
47:30:95:db:ab:6c:60:b3:59:65:da:13:d9:25:ad:
75:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:65:81:59:E5:2C:5F:DE:B5:47:AF:FC:50:BC:82:EB:E6:AA:D8:5E
X509v3 Authority Key Identifier:
keyid:66:6D:97:CE:B8:4E:9C:61:6B:FE:6D:93:57:6C:C3:3B:BF:4B:63:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:cd:91:72:36:87:72:a0:58:7e:fb:a3:a4:e4:00:64:3f:3c:
30:e4:03:fb:47:3b:66:47:b4:b6:59:b9:bf:a4:d1:0d:6e:ba:
a1:e2:51:81:71:cd:d5:a8:76:66:9a:d3:d6:96:e1:80:65:ee:
ba:f3:c6:4b:f2:da:45:aa:19:75:37:a6:4d:02:f2:90:6e:6e:
f0:db:3d:12:0d:11:bf:3e:c1:ff:45:ba:26:eb:fe:91:d1:47:
b8:2b:a3:44:01:57:0a:c1:2e:14:1f:d2:75:07:07:d3:61:60:
da:5b:00:7a:a8:b9:78:ed:9c:88:cb:64:97:55:e2:bc:97:bb:
ce:42:95:d8:0e:fb:68:68:91:ce:5f:90:6f:f4:55:da:7e:bd:
37:6a:96:7c:41:5f:ac:cd:e2:e1:28:36:19:71:d2:b5:8d:33:
ff:b9:88:27:a2:89:4f:ac:93:b5:4f:29:6a:ea:56:b8:f1:81:
c8:7c:47:08:e8:e8:84:03:99:4b:92:14:86:ff:df:94:ca:fb:
3b:e2:64:2a:8a:98:e4:39:f2:26:90:9a:00:41:78:ba:81:75:
b2:c7:db:1b:e2:44:28:c3:aa:58:4d:9a:9b:88:b5:cc:ea:2c:
7e:4d:b7:6f:79:94:8c:a1:1f:bf:4a:b3:52:13:55:4f:d6:4f:
d1:22:39:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:48:52 2026 by rpki-client