Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
File: zpeYqNqZmd31OjyNOPNvF-zUVDI.mft (raw, json)
Hash identifier: A7BDEAXeDp9XGkBUTH0dsjvWkpMasOOA55JETMZFDeU=
Subject key identifier: F4:D1:36:71:57:74:8A:B4:54:D2:13:CC:9A:32:E6:F4:25:C5:AB:E2
Authority key identifier: CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32
Certificate issuer: /CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432
Certificate serial: 019D2A3C1BB64A726617C462ECBCD112E619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
Manifest number: 0EF1
Signing time: Thu 26 Mar 2026 13:01:15 +0000
Manifest this update: Thu 26 Mar 2026 13:01:15 +0000
Manifest next update: Fri 27 Mar 2026 13:01:15 +0000
Files and hashes: 1: XFrg3fq27QCVqHQz_3WZ4-RTRVc.roa (hash: 8n6vVNKWwTijSBhZMmEVHz4L7ynm8ZDo8eSSws5BDgg=)
2: zpeYqNqZmd31OjyNOPNvF-zUVDI.crl (hash: b+RO3jMNQrNV/zhSL2iargjnSEaNgff0AmDHV69y6Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:1b:b6:4a:72:66:17:c4:62:ec:bc:d1:12:e6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432
Validity
Not Before: Mar 26 13:01:15 2026 GMT
Not After : Mar 27 13:01:15 2026 GMT
Subject: CN=f4d1367157748ab454d213cc9a32e6f425c5abe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:79:c6:4d:1d:21:1e:eb:f8:ea:18:07:93:ec:
c3:8b:05:62:01:cf:aa:e7:1d:8d:fa:2f:80:07:65:
86:d2:b3:43:cb:e2:c9:e8:ca:43:90:66:34:46:68:
c4:ba:32:46:d7:b1:68:ab:19:42:68:05:a9:d0:43:
02:17:1c:c6:52:71:51:6e:d1:69:79:ce:02:45:15:
b5:d6:fe:33:85:f4:59:0a:57:c5:cf:66:1f:56:6c:
47:4d:1b:c1:7f:61:40:42:10:d5:b9:21:a2:96:9d:
5d:f3:43:14:18:3c:ee:35:26:30:fe:7b:5d:46:f9:
a3:10:7f:85:54:06:9b:85:98:38:9b:09:69:00:ce:
21:8a:54:2d:7d:23:69:0c:69:22:51:bc:37:16:69:
3f:d3:f9:90:53:f8:6f:e3:49:e4:be:82:21:41:25:
c9:85:be:55:ee:eb:a2:a6:29:07:f3:79:2c:1f:77:
cd:3d:b8:49:95:1e:e6:df:fa:5f:c5:82:ef:c7:26:
6d:f6:d4:92:5e:f5:5c:a9:f2:c5:34:a1:0a:56:7e:
93:3e:5a:71:e6:a9:6e:d1:67:56:a9:e8:77:4b:85:
56:7f:61:46:78:36:63:a6:9d:f4:3f:46:1e:da:4d:
8d:e1:98:45:b6:21:5a:4f:e5:6e:11:d6:9a:7f:69:
fc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D1:36:71:57:74:8A:B4:54:D2:13:CC:9A:32:E6:F4:25:C5:AB:E2
X509v3 Authority Key Identifier:
keyid:CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c4:b2:1b:56:54:60:04:1d:43:6d:89:ea:d3:26:8c:af:bd:
4d:d1:04:f0:a8:87:d0:fb:42:40:9c:b3:54:a2:63:0d:d0:50:
5a:e8:66:8d:b8:8a:80:f3:41:4c:52:a2:4b:0e:0f:ea:b9:09:
4e:b7:d5:92:42:4d:eb:c5:6e:42:be:b2:90:a7:5e:e2:68:0b:
0f:d4:14:2e:bc:98:12:bd:ee:88:21:04:7b:6e:c1:50:41:4c:
aa:37:2d:f2:73:63:f3:79:a1:ea:82:c1:01:49:59:41:e2:65:
cd:d1:a2:ff:ca:54:4e:68:ac:80:64:a5:45:ed:c8:5f:af:2b:
16:a4:40:08:30:14:d4:cb:58:0a:e5:67:98:ab:9d:a8:3a:10:
db:53:40:4e:36:ef:2e:eb:a7:74:8d:86:3b:72:fb:6c:29:07:
f5:e1:10:c4:67:13:96:40:ff:90:65:4f:e8:8b:72:01:49:a5:
4f:9d:d2:63:a7:e3:eb:65:a0:55:71:b2:7e:cd:6b:51:88:59:
da:4c:2d:51:1c:c7:cd:d8:20:3a:5c:31:12:d1:59:e1:f1:1f:
24:a9:e2:1b:16:2f:75:ad:67:63:19:d0:ac:36:79:79:a7:e1:
76:5b:2a:47:27:fe:ea:35:73:c8:87:14:84:75:86:5d:f8:cf:
d7:37:46:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:48:26 2026 by rpki-client