Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e54104-00c3-495e-a86c-07f3fbf4d13c/1/zmSRf8O1HbiuDlu806YJTANB6S0.mft
File: zmSRf8O1HbiuDlu806YJTANB6S0.mft (raw, json)
Hash identifier: IUTqgBqRCI3P2bd4U4NTn9e7hGUA2Yf8ThD0ClrC08A=
Subject key identifier: 37:DD:F3:A2:1C:D7:3E:07:DC:20:3F:3C:F4:09:69:1F:84:D5:B6:ED
Authority key identifier: CE:64:91:7F:C3:B5:1D:B8:AE:0E:5B:BC:D3:A6:09:4C:03:41:E9:2D
Certificate issuer: /CN=ce64917fc3b51db8ae0e5bbcd3a6094c0341e92d
Certificate serial: 019D26CCD97EB472ACEDD49341CDC5683665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmSRf8O1HbiuDlu806YJTANB6S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e54104-00c3-495e-a86c-07f3fbf4d13c/1/zmSRf8O1HbiuDlu806YJTANB6S0.mft
Manifest number: C5
Signing time: Wed 25 Mar 2026 21:00:52 +0000
Manifest this update: Wed 25 Mar 2026 21:00:52 +0000
Manifest next update: Thu 26 Mar 2026 21:00:52 +0000
Files and hashes: 1: OEf2lBJ_RBqJMmsQzdnnofJeh48.roa (hash: abuHlrBHXQkdM8/st+VwX7SzQ7cIYRuXZP6BjEevqBs=)
2: zmSRf8O1HbiuDlu806YJTANB6S0.crl (hash: 3zD1pVQmALJYkmNaJ1pDQ79r3lAZEmfaQvUYh/GQY3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e54104-00c3-495e-a86c-07f3fbf4d13c/1/zmSRf8O1HbiuDlu806YJTANB6S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e54104-00c3-495e-a86c-07f3fbf4d13c/1/zmSRf8O1HbiuDlu806YJTANB6S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmSRf8O1HbiuDlu806YJTANB6S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:d9:7e:b4:72:ac:ed:d4:93:41:cd:c5:68:36:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce64917fc3b51db8ae0e5bbcd3a6094c0341e92d
Validity
Not Before: Mar 25 21:00:52 2026 GMT
Not After : Mar 26 21:00:52 2026 GMT
Subject: CN=37ddf3a21cd73e07dc203f3cf409691f84d5b6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a4:b2:5c:6d:38:bd:70:8c:c0:1c:3d:c6:0f:
d9:4b:45:5c:34:5c:11:81:8b:99:c4:aa:64:f6:e7:
a7:09:66:a2:05:81:a3:d4:20:db:a8:35:c4:76:80:
cf:19:6a:cc:74:71:09:06:62:0c:e4:b0:50:fd:f7:
c9:8e:2b:06:fa:04:55:35:22:0c:ae:bc:98:47:4d:
2e:d3:f3:b2:50:4c:40:db:01:25:3f:14:7b:04:42:
c1:24:56:ef:4a:2f:1f:12:fc:3a:72:f7:37:32:aa:
13:9e:09:c0:73:18:66:be:07:c6:08:8b:fa:b7:6e:
e3:a3:eb:67:cf:df:51:7d:18:51:02:94:e3:24:bc:
30:7d:d2:ee:3f:3e:99:1b:2a:ba:13:cf:cb:c0:55:
17:ca:24:a2:9e:1f:97:1c:40:3d:85:d2:51:f4:6f:
4d:cc:ba:f5:09:33:aa:21:66:00:fd:b6:f1:e4:0b:
2b:74:27:51:ee:28:ab:60:64:e8:0a:38:40:6c:62:
60:9e:55:06:09:1c:d0:99:0d:c8:c3:39:07:a8:3e:
ca:ea:d8:65:a2:27:5f:01:76:a1:02:87:81:b6:a3:
30:4b:05:4d:cc:4a:09:58:dc:f2:7a:fc:f8:d4:ba:
da:0a:dd:16:4b:82:cf:e6:0d:7b:1d:71:47:60:04:
0b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DD:F3:A2:1C:D7:3E:07:DC:20:3F:3C:F4:09:69:1F:84:D5:B6:ED
X509v3 Authority Key Identifier:
keyid:CE:64:91:7F:C3:B5:1D:B8:AE:0E:5B:BC:D3:A6:09:4C:03:41:E9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmSRf8O1HbiuDlu806YJTANB6S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e54104-00c3-495e-a86c-07f3fbf4d13c/1/zmSRf8O1HbiuDlu806YJTANB6S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e54104-00c3-495e-a86c-07f3fbf4d13c/1/zmSRf8O1HbiuDlu806YJTANB6S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:aa:da:d2:39:28:b1:d0:78:46:24:d5:ed:6a:48:f9:7f:98:
7c:d3:ec:6f:08:56:7c:ba:a2:32:ba:e1:03:ec:58:b2:1b:ee:
9b:1d:42:91:25:d4:56:5a:bb:ed:f6:9e:f8:c4:4e:21:4c:d4:
5d:24:10:7a:98:1d:7a:72:06:e1:89:96:15:bb:22:1c:13:8f:
17:5e:84:f0:9a:34:e6:c3:28:d0:62:4a:b7:f5:43:39:4b:96:
68:a1:9f:de:ee:75:55:ba:22:1e:2f:ce:f9:bd:f4:e0:62:40:
7b:03:b3:fd:23:26:21:43:f1:dc:68:5e:f6:d7:7a:c8:c9:93:
28:3b:95:ec:72:07:d1:b1:20:31:95:b9:5e:0e:b0:4f:17:9f:
f0:46:b7:50:c2:0d:17:9d:d0:9a:b6:3e:11:39:ad:06:fe:44:
df:5e:e4:35:2a:70:fd:29:74:91:72:83:58:cb:6e:20:89:74:
f3:28:dc:85:30:69:ba:67:93:81:1e:33:08:8c:d5:1f:c3:98:
14:42:ec:d3:40:4c:e2:99:09:2a:c0:b1:aa:0c:57:fd:bf:3d:
ef:8d:17:92:a0:ab:76:3a:21:8a:a4:63:71:ae:43:38:1b:f5:
ab:67:22:9c:09:39:64:15:27:9b:45:21:fc:be:b8:1e:28:10:
3a:d2:41:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:40:02 2026 by rpki-client