Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
File: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft (raw, json)
Hash identifier: pZNVi/Zuj9uknVP3ZFx1KG8/A4qBQ2VLinwHeIBUgNY=
Subject key identifier: 5E:B5:84:A9:AA:6C:99:0E:4C:73:B6:DB:B4:F9:B0:71:3F:EA:D0:F9
Authority key identifier: CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
Certificate issuer: /CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Certificate serial: 019D296138857279C6FDA68DDA863411EF68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
Manifest number: 181A
Signing time: Thu 26 Mar 2026 09:02:10 +0000
Manifest this update: Thu 26 Mar 2026 09:02:10 +0000
Manifest next update: Fri 27 Mar 2026 09:02:10 +0000
Files and hashes: 1: dZjxO1t1y7iTrJ-KRqPRE_p1jMA.roa (hash: B1GSi5keg2Ocppx2D4kG/XL7mz409lb5KLKl79R0HCE=)
2: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl (hash: OqCtOPP4PnUKircWy0yw5J5+DcGE5/rYVIfXNRLUp6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:38:85:72:79:c6:fd:a6:8d:da:86:34:11:ef:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Validity
Not Before: Mar 26 09:02:10 2026 GMT
Not After : Mar 27 09:02:10 2026 GMT
Subject: CN=5eb584a9aa6c990e4c73b6dbb4f9b0713fead0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7c:93:c2:5c:88:ad:c6:40:d1:0a:16:31:c5:
d7:ca:24:99:d8:d1:83:a2:40:cf:ba:10:c6:c7:44:
d5:b0:e9:12:dd:eb:40:d0:92:90:1b:77:a3:64:ff:
97:f3:c4:e3:c8:68:b9:85:c6:1b:8f:45:a6:11:f5:
17:dd:ae:f4:c5:56:e8:c0:c3:ab:eb:a7:88:c8:a0:
55:4e:ed:5e:58:83:20:8d:57:59:7d:47:e1:7d:ff:
39:95:db:73:ea:52:71:cb:0b:b0:db:d7:5d:06:e9:
d4:70:ed:10:80:a4:0a:3e:8a:9f:4c:79:3b:4e:64:
9b:58:63:4d:6e:f0:a9:df:e7:9b:38:a6:b1:ee:2b:
ee:a5:2e:ed:ef:85:89:c0:26:0a:31:8e:fa:f9:f0:
0b:74:f6:9a:41:77:2f:41:b0:76:d6:b0:ee:d5:e2:
9f:c9:f0:27:d9:e5:e1:bb:da:a8:29:4d:93:3d:a1:
78:c7:43:30:00:e6:84:81:78:f5:d4:a1:1b:68:f2:
f9:f2:4a:ba:3e:76:05:c5:ee:8a:91:45:6b:97:47:
24:21:40:cc:1c:fb:d5:17:62:b6:f0:c9:5d:49:85:
6b:00:dd:37:b2:ae:13:c4:90:fc:10:81:55:24:a2:
1d:ba:1d:57:37:ec:8c:e7:60:60:2e:64:ae:fc:28:
4b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B5:84:A9:AA:6C:99:0E:4C:73:B6:DB:B4:F9:B0:71:3F:EA:D0:F9
X509v3 Authority Key Identifier:
keyid:CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:76:a4:68:9e:2c:fe:f5:1c:6f:ac:01:cd:69:bd:07:92:43:
60:3d:4c:0e:0a:1a:c5:8a:39:0b:94:97:c8:08:0d:64:73:c2:
34:92:15:2b:43:1d:6e:7b:47:c3:f1:f1:9a:b4:23:f1:cd:02:
2f:10:92:11:4c:1f:b8:92:e2:7d:64:e7:c5:ae:c4:02:c6:f0:
ef:d8:85:af:02:71:a1:75:37:e7:52:b1:e9:eb:eb:e8:8c:d2:
1f:a0:0b:bf:7f:c5:d2:3f:5f:14:ef:2e:f3:0e:dc:2e:46:9d:
50:15:c7:df:96:22:4a:bf:81:23:f0:1c:e0:4a:69:fb:d5:dc:
8b:02:e9:da:28:40:b2:cd:62:95:f6:fe:42:bb:4f:ae:e4:96:
41:4e:ea:0e:8f:75:50:ae:c9:f3:7b:b5:c3:e2:fa:21:74:48:
60:ca:e0:12:a8:b1:b3:1b:0f:0d:86:b3:cd:29:41:db:72:f8:
08:87:98:48:60:25:5b:0a:d2:1f:e3:93:61:0d:80:f3:07:76:
1b:37:cc:26:56:3c:05:f1:28:12:b3:b5:b1:3e:f2:10:38:0a:
45:c5:57:6a:c0:f4:88:87:a7:47:62:03:c6:24:82:18:9d:e7:
34:62:24:24:fd:88:4c:01:67:50:67:2b:06:3e:f8:e7:8f:e5:
69:e4:d1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:10:01 2026 by rpki-client