Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
File: ZZq64rDK6GxBlrAgdluCOiAyB_w.mft (raw, json)
Hash identifier: QG3dy8cu87/mGPaMinWvFJHJ87jQHxmJkHEkcWKxyDI=
Subject key identifier: 8C:6F:2B:B4:44:A0:31:DA:53:29:4C:57:F5:D4:26:43:48:BC:AC:79
Authority key identifier: 65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC
Certificate issuer: /CN=659abae2b0cae86c4196b020765b823a203207fc
Certificate serial: 019D29617068C2B5328BCFAF277A6B914930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 09:02:24 +0000
Manifest this update: Thu 26 Mar 2026 09:02:24 +0000
Manifest next update: Fri 27 Mar 2026 09:02:24 +0000
Files and hashes: 1: ZZq64rDK6GxBlrAgdluCOiAyB_w.crl (hash: gWTbvhoLMHa3XRQHiYHmJeoKk1D6clGiyvs+BOdm3YQ=)
2: vu1POpZ4fbsFLSVfm4Tq2UNs8Yo.roa (hash: dj2PPZhraZg7Mhgjn+2qQ98wor01N03TocqybH8CZeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:70:68:c2:b5:32:8b:cf:af:27:7a:6b:91:49:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659abae2b0cae86c4196b020765b823a203207fc
Validity
Not Before: Mar 26 09:02:24 2026 GMT
Not After : Mar 27 09:02:24 2026 GMT
Subject: CN=8c6f2bb444a031da53294c57f5d4264348bcac79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0e:2c:1b:30:af:a5:d0:6b:6d:4f:1c:4b:2d:
bc:cd:ab:41:ed:df:6c:d0:de:c3:26:df:1f:bb:ef:
26:26:dc:2f:d7:83:de:c5:93:bc:84:e6:6f:78:32:
17:4e:ba:10:91:6a:db:cf:4e:19:d8:ce:92:de:8b:
9c:9f:e6:b8:b6:dc:c4:43:47:36:28:66:bf:23:6b:
5b:25:ca:4f:b2:f0:e5:72:02:ea:58:21:e1:60:7e:
be:cd:a7:23:f5:bb:ca:db:e8:86:f9:f9:94:d7:b6:
91:79:95:4e:1e:97:13:b0:6d:3e:ad:31:e6:d2:61:
2d:86:f2:93:01:0a:15:8c:3a:f9:9b:df:8a:aa:10:
03:08:13:ba:46:96:4e:a1:47:c7:ba:cf:f5:83:0d:
5f:11:ec:16:d7:03:7d:cc:4f:46:06:99:d3:c5:9b:
0b:07:5b:df:38:c1:47:ae:cf:92:9d:39:26:4e:d4:
59:93:14:f9:15:8f:e0:b2:30:99:b7:40:4c:7e:70:
9f:8d:eb:e4:c8:62:ab:95:3f:8f:69:77:b8:f1:88:
e5:05:bf:cb:d4:2f:12:5c:f3:04:da:8f:00:b7:60:
ea:33:cb:3e:ae:e5:af:bf:0f:fa:4d:32:c4:34:b0:
66:82:72:97:ca:87:97:59:34:9f:2e:5d:d9:f8:9b:
ba:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6F:2B:B4:44:A0:31:DA:53:29:4C:57:F5:D4:26:43:48:BC:AC:79
X509v3 Authority Key Identifier:
keyid:65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:42:4d:cb:6f:49:18:07:3c:49:f5:c6:94:67:27:4e:9a:51:
57:09:7e:25:80:f6:30:3e:c6:d4:8c:e6:d1:3b:52:a6:a9:fe:
cd:2d:e7:32:a0:80:cc:17:6d:b6:f4:24:9f:af:48:8a:fe:26:
8b:4c:a5:71:34:f5:97:b2:5f:81:58:73:f0:bd:04:9d:51:59:
95:43:91:54:df:df:ac:9f:45:18:f2:cd:8f:61:9b:2e:c9:fb:
65:1d:99:b4:5a:55:90:e2:31:7e:39:d9:17:b9:36:b4:09:cf:
f4:d6:4a:b5:e2:de:99:90:e9:e9:21:8b:12:4f:6f:ea:b0:02:
9a:4b:02:2f:a4:34:98:2e:51:32:79:58:6d:11:e5:92:15:f8:
8d:be:6d:02:32:ac:36:22:76:8f:c0:14:56:07:66:0a:9b:ab:
e2:a5:ff:31:d4:3b:0b:78:5d:4e:e8:44:d8:52:08:b2:64:b7:
58:69:33:c1:38:63:57:be:32:bd:a8:1a:62:7c:74:aa:6b:3a:
29:b3:9a:f9:6b:ad:f8:2b:9c:67:03:af:cf:75:cd:d1:97:42:
2b:78:42:f3:65:90:0b:c8:1a:e0:b6:45:5e:26:f0:33:0b:2e:
fd:ca:ad:56:48:bd:f0:dc:dd:86:e4:fa:92:8f:a1:27:ed:45:
da:86:b6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:31:44 2026 by rpki-client