Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
File: 0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft (raw, json)
Hash identifier: m5VPMLXhJxIXDr54ngFRZMJHoc+9yyWKLmuHfW2vmnM=
Subject key identifier: D3:57:A5:E7:EB:BB:FD:B7:15:C2:59:1E:BB:AB:3C:07:35:0E:37:D0
Authority key identifier: D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76
Certificate issuer: /CN=d1911510a09979e54e7a14918c0b828b8237f876
Certificate serial: 019D28BBDFB7F274865C2E9A5E4BA5BA53EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
Manifest number: 0E83
Signing time: Thu 26 Mar 2026 06:01:34 +0000
Manifest this update: Thu 26 Mar 2026 06:01:34 +0000
Manifest next update: Fri 27 Mar 2026 06:01:34 +0000
Files and hashes: 1: 0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl (hash: Mf8bqgnoDABCd7Vu3xpQh/ZvHRDGMd4UL6saAJwZiD0=)
2: lnfrhHR0jynfR2q7TVFHy_A4Fqo.roa (hash: WwqXm5S9kqC02dQFsZ5mFoZfT2ZEKlRHGYMQ2u0hdl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:df:b7:f2:74:86:5c:2e:9a:5e:4b:a5:ba:53:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1911510a09979e54e7a14918c0b828b8237f876
Validity
Not Before: Mar 26 06:01:34 2026 GMT
Not After : Mar 27 06:01:34 2026 GMT
Subject: CN=d357a5e7ebbbfdb715c2591ebbab3c07350e37d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7a:06:09:3e:3b:6d:c3:c8:72:50:f7:a0:67:
80:1a:d4:9b:cf:da:31:35:33:2b:54:54:11:f5:14:
f5:56:57:13:86:87:8a:2a:fb:7a:36:1a:5c:86:51:
1c:24:39:c9:97:ec:63:08:77:e2:f7:bd:25:ff:9a:
ec:37:6b:22:97:fa:17:34:99:c7:19:bb:98:6a:c6:
82:6c:c7:e1:df:66:ab:3c:41:41:09:3d:58:11:6b:
52:d4:38:05:c0:1c:18:4b:55:01:f1:dc:7b:f0:23:
d0:1a:00:f4:d4:86:0d:df:2e:fd:42:1f:0c:d0:84:
96:e1:d3:b2:38:1a:b6:3b:8e:ac:0d:7e:9e:24:e7:
1c:a7:f3:23:16:94:3c:d0:9c:51:ba:83:4e:cf:1c:
d4:54:3b:91:81:a4:7a:29:6f:76:5d:ae:55:56:0e:
00:7f:6b:8a:86:73:54:bc:e8:b6:20:b1:8f:fe:20:
a2:09:76:ac:d6:db:59:97:71:3c:0c:a0:4b:69:cb:
6a:b8:98:10:e4:5b:9b:ee:fe:87:08:e0:45:5d:a5:
7d:61:68:f9:ec:b9:25:bb:3a:7d:cb:ad:8f:7d:ab:
d7:bd:6b:ce:6b:b0:39:1a:77:98:d6:84:5e:7a:48:
4a:5a:cf:32:76:00:36:2b:21:9b:5a:71:54:b3:25:
dd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:57:A5:E7:EB:BB:FD:B7:15:C2:59:1E:BB:AB:3C:07:35:0E:37:D0
X509v3 Authority Key Identifier:
keyid:D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e6:0c:98:fe:6d:bf:91:6a:00:5b:88:16:9e:ef:11:06:70:
b5:5d:64:37:64:03:4c:38:02:c8:ad:b8:ab:ea:b9:63:2d:96:
01:a6:de:04:03:b6:ea:71:69:74:ae:d4:a4:08:9a:4b:80:f6:
8f:19:51:88:3c:63:e2:bc:2a:46:6e:f0:3d:29:02:2a:5c:bb:
93:80:15:1e:d9:59:b6:49:63:de:e1:8b:4f:d1:f2:28:18:d6:
ef:88:d6:b8:43:be:89:b5:af:c8:9d:62:88:82:e2:7e:29:22:
7f:03:4e:28:48:e2:1f:cc:40:a2:ee:13:65:a8:45:77:17:17:
84:28:d3:ca:8d:15:3b:b1:94:66:90:d0:ac:97:3e:cc:68:07:
21:66:f8:9b:71:0b:b6:a5:9e:d3:4f:04:26:7c:85:3b:f2:7a:
7e:50:bb:d3:9f:2a:27:d5:00:9a:ec:46:a7:51:cf:91:13:fa:
16:17:e3:ce:6a:a9:19:e1:74:4d:a9:a8:76:b5:10:29:b7:36:
6b:48:05:e1:80:1c:fe:93:8a:4c:34:46:0a:d2:7f:8a:70:35:
b2:ed:cd:2c:14:9e:c7:00:2b:f2:ff:40:0b:03:ff:3c:23:43:
56:fc:69:24:ac:1f:39:98:08:15:13:1f:f1:2e:03:05:8c:d3:
9c:93:cd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:11 2026 by rpki-client