Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
File: ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft (raw, json)
Hash identifier: P6IDSMR/2UpE8ekC8wB8IVrLO+4avd+1MgWe1vfADjM=
Subject key identifier: 9A:A7:8C:02:1C:70:39:C5:E7:FB:29:21:6E:24:C0:2C:55:32:F1:D4
Authority key identifier: 66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3
Certificate issuer: /CN=66ba8d64e901b39b501ed3693ec27430713886e3
Certificate serial: 019D284DC430D65D50A1C28E5EC4C82365F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
Manifest number: 11F5
Signing time: Thu 26 Mar 2026 04:01:18 +0000
Manifest this update: Thu 26 Mar 2026 04:01:18 +0000
Manifest next update: Fri 27 Mar 2026 04:01:18 +0000
Files and hashes: 1: L2qJI7yRbblQboJ_mw8-jepGvkU.roa (hash: QrheslDEw6JQRvz6jkCSMc1vh9NuFBMIWo/PVUBPvp4=)
2: ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl (hash: Q0Bk6JCiGI1hHSf9g0aX0Nr6rz8voGTn8Scfg2lfw4s=)
3: z7Q7Uc4sfRearIOg2fguIub7LO8.asa (hash: 8s++qk0Ww4g7wtu1bl1zax9iy1ShimKiVPRsQryJkyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:c4:30:d6:5d:50:a1:c2:8e:5e:c4:c8:23:65:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ba8d64e901b39b501ed3693ec27430713886e3
Validity
Not Before: Mar 26 04:01:18 2026 GMT
Not After : Mar 27 04:01:18 2026 GMT
Subject: CN=9aa78c021c7039c5e7fb29216e24c02c5532f1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:b3:19:0b:a9:7d:3b:e6:54:40:91:5a:27:
7d:67:b5:54:76:20:fb:19:a9:93:60:e7:16:f3:df:
1a:81:0b:ed:b4:4d:2e:99:cf:99:c9:50:a8:0d:f7:
cf:9b:8b:bc:c9:50:c5:ae:af:09:17:09:ba:b8:70:
21:89:92:26:d6:e4:05:73:cb:08:fd:bc:0c:9c:f4:
2a:88:2f:49:39:5a:64:07:dd:6f:a5:6f:1b:40:2f:
6e:d3:34:cc:c8:24:bc:9c:90:0f:95:68:89:b1:bb:
1d:c5:a5:4f:70:8a:c7:cb:d2:3a:19:d6:64:3e:ed:
63:24:17:8c:90:5c:5a:41:87:28:0f:3c:2c:38:54:
63:07:5d:d7:51:d3:e5:0f:9b:ca:bc:73:1f:0b:6c:
de:57:96:86:2b:67:e9:21:8a:66:7c:10:6a:60:f2:
61:69:bc:6b:d0:38:7d:84:e4:3f:50:9e:a2:7b:83:
07:89:4f:ad:35:c5:cb:11:d7:e0:01:15:89:94:de:
a5:5a:bd:05:a3:eb:d2:2b:7d:c8:d9:75:02:d7:2f:
1c:96:fc:c6:38:a8:3c:9e:a5:c0:e9:92:1f:bb:06:
b7:8f:af:1c:a8:a2:b9:45:9e:18:e0:08:5e:6a:a6:
ba:c1:f3:f9:a4:3b:c7:9b:86:cf:47:ae:9e:17:c9:
cd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A7:8C:02:1C:70:39:C5:E7:FB:29:21:6E:24:C0:2C:55:32:F1:D4
X509v3 Authority Key Identifier:
keyid:66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:90:60:4d:9e:56:e0:03:11:8f:20:7e:c5:ce:f6:e5:d4:67:
99:d1:8a:2e:aa:7d:8e:31:02:46:5d:95:b7:39:24:69:4e:fc:
b7:f1:1f:7d:6e:90:b3:46:3a:fc:91:10:32:a3:65:d6:da:fb:
af:9a:ce:a3:7b:34:89:ce:7f:98:23:7d:0b:35:b7:bb:f9:36:
fc:87:18:61:5c:86:fa:44:b9:8c:fb:49:72:81:86:0b:d5:0d:
d0:54:18:95:bf:c8:85:f5:c4:96:5d:95:a3:89:2d:92:53:4b:
58:13:f4:c6:89:83:97:48:61:41:f9:61:4c:56:a0:3e:45:7a:
75:9c:7d:0f:5a:1b:ae:92:04:9c:0d:a1:1d:a8:83:a5:cc:50:
3d:cb:19:15:65:66:9c:eb:cb:b3:d3:15:2d:ef:0b:e4:23:cb:
40:d9:1a:12:6e:2b:74:4e:87:60:bb:7b:9d:26:d5:a4:8f:0f:
ae:d8:ff:43:0a:cc:ca:9a:16:36:f6:0d:78:68:97:67:88:6a:
d9:e0:5c:95:24:e9:68:e3:a8:b3:b4:1a:48:fc:ed:b3:57:0a:
86:9e:aa:2c:52:33:de:a3:67:99:f7:ae:ca:27:86:c7:2d:e4:
48:f6:65:38:55:4d:df:cb:7b:43:bc:c7:f9:cd:41:cc:ef:75:
d7:61:94:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:20:16 2026 by rpki-client