Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
File: Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft (raw, json)
Hash identifier: 3xnqjayIAlb5nNvsS8+Pj6W6xMghCJG832A39rRb1mA=
Subject key identifier: 7F:2F:23:D6:11:E4:98:5C:99:39:B5:08:13:16:15:93:60:CE:32:15
Authority key identifier: 66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F
Certificate issuer: /CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
Certificate serial: 019D28BB8AADE9D07637693502BA850DA33A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:01:12 +0000
Manifest this update: Thu 26 Mar 2026 06:01:12 +0000
Manifest next update: Fri 27 Mar 2026 06:01:12 +0000
Files and hashes: 1: EY3B-toGXUZtNKRbRIT1VD4kBHE.roa (hash: 3Wh78iI9ibfL8FY/7stYt19m1NshKZMf/srlWVz8NYk=)
2: Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl (hash: kCSOpAsNq/aw+uCbKHDLOKha7za5LckfzTOHnxIACBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:8a:ad:e9:d0:76:37:69:35:02:ba:85:0d:a3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
Validity
Not Before: Mar 26 06:01:12 2026 GMT
Not After : Mar 27 06:01:12 2026 GMT
Subject: CN=7f2f23d611e4985c9939b5081316159360ce3215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c7:96:c2:26:11:77:76:a8:1a:6a:22:ea:9d:
1e:69:e9:51:78:bd:ab:3b:7e:d4:9b:59:d7:84:c1:
e2:0e:d7:8c:84:fd:c8:ba:0d:ad:07:7a:54:6d:7c:
51:69:69:96:44:2f:69:68:68:d5:e1:ab:54:25:47:
65:bd:12:98:94:a1:85:65:99:73:4f:e6:71:fb:03:
50:a4:7d:4d:f6:2e:4c:15:ad:9f:75:2e:e2:1b:27:
d4:dc:fa:1c:48:f4:92:7c:59:d2:bd:b0:80:20:13:
89:a7:2d:4a:82:e5:fb:f0:2f:a3:a0:9b:b9:78:bc:
03:b4:d4:5b:cf:9c:dd:19:8c:6a:8d:ac:20:2b:b4:
0a:33:83:9a:22:9e:f6:fb:50:da:62:18:cf:95:27:
79:60:d1:05:6c:3d:32:4c:21:7f:c4:4a:b0:f1:4f:
31:fe:54:2f:9d:52:2e:5f:7c:ea:91:0f:32:c4:f6:
1a:c6:21:8b:03:d4:4f:ed:5e:a1:71:62:49:c4:8b:
91:01:4b:36:af:8d:5a:38:10:6f:ab:37:1c:23:87:
c7:ae:8b:9b:cc:61:8b:7a:11:9b:cb:aa:98:ae:f4:
fa:17:9a:73:3a:cd:fb:5b:a0:e5:57:78:67:cf:de:
60:e1:55:51:73:97:cb:d1:10:aa:5f:e0:95:7c:2f:
d6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2F:23:D6:11:E4:98:5C:99:39:B5:08:13:16:15:93:60:CE:32:15
X509v3 Authority Key Identifier:
keyid:66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ba:c8:19:93:77:4c:61:91:91:ed:34:10:35:9d:7c:63:15:
a2:e2:fb:4d:69:5f:98:ec:14:73:14:f3:30:54:26:53:7f:b4:
f3:95:0b:4f:c1:1c:fc:a7:44:a2:4a:ff:a8:64:d9:4d:64:74:
ad:de:7f:41:35:50:76:b2:2a:31:8e:44:c0:c4:a3:65:b3:33:
a2:0e:7b:a9:4f:83:ce:37:21:82:b2:d1:dc:7b:a3:32:0d:fa:
60:be:88:c4:9e:28:64:a2:6d:69:fc:ec:3b:cb:45:ee:4e:f0:
07:6a:02:d2:37:a6:72:48:f6:ff:4c:8e:4e:f4:f4:65:0c:4a:
68:3c:47:ed:37:55:34:bc:51:cf:74:24:f3:6a:52:20:aa:f3:
a6:be:b7:c7:50:2e:2e:65:ad:69:9a:61:b9:90:4c:50:b4:bb:
e6:2c:6a:bf:e1:07:60:89:42:e4:a5:1f:d9:f7:dd:6f:de:99:
0c:01:55:73:6f:13:29:3a:00:d4:a1:64:8e:2a:91:a3:75:f8:
7d:cc:cb:2f:79:98:9a:82:18:8f:ba:3a:28:7a:dd:0a:5f:97:
bc:cc:d6:32:00:00:af:b9:8c:bb:3d:c0:83:b8:8f:da:85:01:
25:08:c6:05:2f:67:03:c5:c9:3b:50:e4:7d:7a:b5:9d:41:0a:
88:60:ef:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:08 2026 by rpki-client