Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
File: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft (raw, json)
Hash identifier: b/Mtvg9uXy4EJOkjT2FUWQRY8a35rltAI3qqLKS/4/k=
Subject key identifier: 5B:BC:96:00:D4:17:00:45:58:87:57:B5:CE:1F:7F:B5:BC:38:78:44
Authority key identifier: CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4
Certificate issuer: /CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
Certificate serial: 019D28BBE58718A2DFCD563192235244C003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
Manifest number: 1139
Signing time: Thu 26 Mar 2026 06:01:35 +0000
Manifest this update: Thu 26 Mar 2026 06:01:35 +0000
Manifest next update: Fri 27 Mar 2026 06:01:35 +0000
Files and hashes: 1: 5mo5xCIsbIhrhc8a0MMdjoHlY1A.roa (hash: pyWlQmd0OGBAWyVjo0BfVWnydEoUEqSFJZF/M2RGZlA=)
2: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl (hash: J/DqF9QqCTnTOoE5FaAydIPMhrQraTBxLiYmPw8WmpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:e5:87:18:a2:df:cd:56:31:92:23:52:44:c0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
Validity
Not Before: Mar 26 06:01:35 2026 GMT
Not After : Mar 27 06:01:35 2026 GMT
Subject: CN=5bbc9600d4170045588757b5ce1f7fb5bc387844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:a8:0b:41:38:83:91:23:7e:e2:1b:b1:4c:
ba:4c:3e:02:b3:41:1b:2e:82:af:42:98:43:16:78:
84:1d:83:00:e1:34:3d:36:2e:49:b0:8a:d0:35:d4:
b7:35:df:ed:8e:2c:1a:bf:b2:54:7a:7b:94:34:8a:
d8:ec:24:c5:6a:bf:ba:74:03:68:13:08:76:1e:23:
d7:5b:e2:85:d9:46:99:c4:58:f7:47:f0:22:c6:7b:
a1:71:cd:46:fe:14:21:be:21:27:9c:7a:6a:c8:47:
5f:3d:67:49:38:c2:ff:cd:d4:30:7e:2a:d7:22:0b:
7e:35:b1:6b:ac:ae:2a:ff:78:c5:99:4e:dc:88:15:
51:a7:da:73:2a:4e:89:ed:75:f3:de:26:04:af:f8:
9e:9e:f8:0b:b5:d1:fc:b1:93:5b:c8:4a:ef:bd:a9:
16:6c:5e:e5:0d:d7:63:d3:46:75:81:b5:f1:a3:6d:
6a:31:d4:64:44:88:c3:51:79:21:15:ee:c9:c0:94:
3b:66:66:7e:af:2f:d6:fa:c4:f0:29:14:ec:a1:1e:
b2:39:c6:3c:0b:68:01:74:3c:d6:0d:92:63:3f:40:
d8:da:96:03:f0:ed:59:47:f4:58:18:bd:67:9d:0e:
2c:5a:ec:b6:28:f2:74:c9:55:2b:7c:34:cc:54:97:
a3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BC:96:00:D4:17:00:45:58:87:57:B5:CE:1F:7F:B5:BC:38:78:44
X509v3 Authority Key Identifier:
keyid:CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d6:f4:6f:4b:b8:40:44:0b:de:19:d8:a4:8c:c5:7a:44:e1:
d9:04:c8:65:94:98:0d:cd:fa:36:85:22:fa:2e:80:5c:ff:b7:
9b:53:ac:4a:e9:62:52:aa:8c:6a:5b:fe:4a:07:48:02:c5:f4:
d0:39:94:65:f7:f1:b1:71:8a:f5:b9:c6:e5:c2:64:c3:c1:59:
76:ae:8d:18:8c:40:78:b0:01:2f:1c:2b:8e:e3:c8:ca:c0:98:
29:ec:5f:b6:f1:92:34:29:6a:09:65:a3:16:36:4c:82:9d:09:
12:fa:71:d5:ca:b3:19:eb:46:a5:5d:d0:28:90:10:59:c9:94:
89:81:cd:a7:8c:46:3e:e6:27:d9:cb:e0:0d:d2:17:f8:d8:00:
ca:02:ff:54:67:73:68:27:c6:b9:de:fe:1a:65:0c:51:6e:9b:
02:be:12:4e:f0:ae:0c:a1:56:48:fc:51:3a:22:57:6d:e3:4b:
5a:de:c0:ec:88:1b:b6:02:eb:7b:1e:47:bb:93:f6:db:90:a7:
b0:38:a4:78:d0:5c:c3:e4:13:f6:d5:93:c2:d4:56:a1:86:56:
74:70:53:7b:2d:1f:7c:fb:61:88:e1:82:56:36:4a:f2:54:50:
cf:2b:63:62:43:8b:e7:15:19:f8:f3:11:a9:dc:b6:b0:37:02:
bd:52:52:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:27:55 2026 by rpki-client