Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
File: zZGetcIQg2AVXef7TyFqBVrjHwk.mft (raw, json)
Hash identifier: VrphqBdVpMWY+fqqblEapHtA+02ZgpEXnsNo82OE9lc=
Subject key identifier: B2:ED:69:BE:FD:B5:16:26:98:8C:38:8D:68:FD:FE:B5:9F:18:C0:F5
Authority key identifier: CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
Certificate issuer: /CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Certificate serial: 019D2703CC31137D21A443983AE9AE6B189C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
Manifest number: 188F
Signing time: Wed 25 Mar 2026 22:00:53 +0000
Manifest this update: Wed 25 Mar 2026 22:00:53 +0000
Manifest next update: Thu 26 Mar 2026 22:00:53 +0000
Files and hashes: 1: GOSw37CdgLKeIKbJScsqY_9Dr2w.roa (hash: ZvDfQJkz45jdazcjaKmxmDgrWuHDPZ2kpxNBxgEv1Uw=)
2: y8_LNgwxUbTo2kYfyXrTJhM5aoA.roa (hash: 5zjlPGmjTWA8lGnzMm1Kk7Dl2qi8X7Yn0O8wDBpdII4=)
3: zZGetcIQg2AVXef7TyFqBVrjHwk.crl (hash: vw4Jxst7liQuOFtmmo+mE1Iz0Fs9Q9JpLgMKmbsKKC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:cc:31:13:7d:21:a4:43:98:3a:e9:ae:6b:18:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Validity
Not Before: Mar 25 22:00:53 2026 GMT
Not After : Mar 26 22:00:53 2026 GMT
Subject: CN=b2ed69befdb51626988c388d68fdfeb59f18c0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:d1:e0:2d:85:30:59:84:d1:a6:b9:9d:6c:
1e:bd:1a:d4:c9:5f:1b:29:04:3d:db:93:58:30:2f:
65:f2:a2:f8:a6:7f:c7:fe:16:16:33:2a:ae:4b:4c:
30:0e:7b:53:5e:41:b3:54:6e:2d:53:55:bf:1f:78:
29:49:57:76:eb:77:7f:26:a0:f7:81:b2:49:55:34:
b2:ea:b4:2a:f5:0b:3b:45:36:25:9c:49:7a:69:9e:
36:36:ba:87:e0:b0:8c:35:83:f8:7e:39:07:ba:a4:
42:db:83:1c:a3:d9:0e:c3:b9:f6:bc:96:11:93:e7:
57:f8:43:a8:c2:1c:c0:da:45:6a:9e:7e:10:58:fe:
75:74:11:6c:4a:49:ec:e9:a4:2d:e4:34:b3:d0:ff:
79:53:3e:1b:8b:5c:9f:f0:07:04:79:00:3d:78:ff:
b9:a9:4f:46:6d:fa:95:63:73:ed:e2:00:25:56:75:
77:62:35:c1:ad:ff:bd:b8:81:e7:30:57:e8:84:66:
c8:4d:3f:04:e8:88:c4:a5:33:89:80:78:f8:80:d4:
43:66:bb:b7:88:a5:54:02:37:86:16:54:85:0b:48:
ad:b6:e4:c5:26:0f:f0:29:9c:4a:18:b2:40:92:21:
d5:07:1e:ac:44:ef:02:9f:d8:a2:83:19:8c:7d:45:
4e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:ED:69:BE:FD:B5:16:26:98:8C:38:8D:68:FD:FE:B5:9F:18:C0:F5
X509v3 Authority Key Identifier:
keyid:CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:6b:e1:91:28:e6:df:9b:2f:f2:35:5d:f7:4f:38:f9:b5:48:
b8:26:ea:45:0e:44:c9:dc:8f:d9:94:b9:ef:c5:b4:34:e7:8e:
6d:28:f6:93:78:c7:a4:da:75:b3:69:af:7d:4d:7e:84:a4:a5:
af:93:cb:2d:0c:2a:7b:a8:ec:42:94:51:ff:ab:e7:b6:d0:20:
55:7a:ba:0a:3f:ce:b7:00:98:77:92:d7:77:8b:bd:b1:0f:16:
ec:9b:9f:76:95:56:7a:b4:df:f6:95:d2:67:1a:1c:01:67:3a:
b5:cf:42:bd:d5:6c:bd:a0:6c:26:ba:1e:3d:e4:4d:ca:77:9b:
90:8b:fb:b0:4b:03:98:ee:cd:6b:dd:57:b2:d9:a4:87:7f:a5:
9a:99:6a:75:24:68:b2:38:c9:68:e5:0f:49:b0:72:23:d0:2c:
9d:8a:76:61:01:1d:85:b3:42:0c:7f:42:c5:93:80:cb:f9:bd:
dd:67:ce:10:2b:da:65:a2:6a:0c:9e:b3:6e:b8:db:5e:c1:94:
ee:c2:24:63:92:13:d5:5d:5c:03:88:c8:c7:69:cc:56:37:af:
59:44:a7:05:b4:42:d6:03:74:0f:c0:0c:f4:31:df:ad:66:cd:
0f:f7:e9:0f:1e:76:fb:66:ce:77:bc:58:a5:34:15:ee:50:04:
e2:26:c0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:33 2026 by rpki-client