Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
File: zZFzvIKKtx2i68r6f4mOxqoe6nY.mft (raw, json)
Hash identifier: UaRiAh62KNh80dXiB0yx6CZ86NNTsFGbEsrTboZ3lEk=
Subject key identifier: 6C:B8:E6:1A:06:2F:3D:50:9B:3F:4A:30:DE:30:42:CD:65:DC:B6:6A
Authority key identifier: CD:91:73:BC:82:8A:B7:1D:A2:EB:CA:FA:7F:89:8E:C6:AA:1E:EA:76
Certificate issuer: /CN=cd9173bc828ab71da2ebcafa7f898ec6aa1eea76
Certificate serial: 019D29CE63E89F5D9BB3315270A6693DD62B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZFzvIKKtx2i68r6f4mOxqoe6nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
Manifest number: 0718
Signing time: Thu 26 Mar 2026 11:01:24 +0000
Manifest this update: Thu 26 Mar 2026 11:01:24 +0000
Manifest next update: Fri 27 Mar 2026 11:01:24 +0000
Files and hashes: 1: nAJxhXG44wyPTc0EFqzl-RykeMo.roa (hash: ZE3/dC2ID9u+b4jjbTZ42QFLg8NiUmB80hYNY0tMDq0=)
2: zZFzvIKKtx2i68r6f4mOxqoe6nY.crl (hash: X9NUh0EgD4wbb/7Z3Ri2YndnJcmafL0ECoBWBQ1vY0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZFzvIKKtx2i68r6f4mOxqoe6nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:63:e8:9f:5d:9b:b3:31:52:70:a6:69:3d:d6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9173bc828ab71da2ebcafa7f898ec6aa1eea76
Validity
Not Before: Mar 26 11:01:24 2026 GMT
Not After : Mar 27 11:01:24 2026 GMT
Subject: CN=6cb8e61a062f3d509b3f4a30de3042cd65dcb66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:18:ae:bc:ed:f1:98:74:5a:c7:b9:ba:27:a0:
77:f0:28:0b:2f:bf:b1:55:2c:8d:73:8a:8e:2d:1f:
45:73:22:a5:78:c5:67:be:03:47:36:1a:2e:8b:3f:
17:82:02:16:0f:76:65:57:81:dd:a2:cd:9b:7f:08:
06:41:b0:38:c4:61:35:db:0e:0a:29:32:47:b4:f8:
ee:8f:f8:5a:5a:ce:96:a5:f9:ee:84:5d:f8:ae:5c:
6f:1c:78:4d:55:f8:e3:85:dd:78:0f:21:ea:82:2d:
42:72:2f:c4:e0:c5:69:fc:76:04:56:a4:05:3c:7f:
e3:ef:63:74:60:2d:96:9f:a1:33:e4:f5:8f:7a:f4:
11:27:af:d4:0f:18:28:d7:2d:01:64:f0:08:b8:e3:
ea:8b:8d:24:ff:db:d9:d8:3e:d7:4f:6d:c7:3e:5f:
50:19:6f:1a:31:7d:13:21:da:64:c1:85:db:d4:59:
b2:dd:ee:f9:34:e6:e6:e2:1f:9c:9e:50:c4:27:ae:
5f:9a:a7:29:bd:a0:20:e9:3e:06:16:47:e5:31:5d:
09:82:f5:f9:39:36:8e:15:5f:43:bf:3e:f2:04:a3:
82:70:bd:d2:a6:70:0c:55:7f:1f:28:b0:6b:dd:a7:
d8:50:86:02:b0:64:85:14:8b:af:e9:d2:17:ed:9e:
88:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B8:E6:1A:06:2F:3D:50:9B:3F:4A:30:DE:30:42:CD:65:DC:B6:6A
X509v3 Authority Key Identifier:
keyid:CD:91:73:BC:82:8A:B7:1D:A2:EB:CA:FA:7F:89:8E:C6:AA:1E:EA:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZFzvIKKtx2i68r6f4mOxqoe6nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c2:a0:f0:d2:7b:44:ae:f2:5c:3c:10:22:82:da:ff:94:12:
da:36:56:18:01:52:c0:20:40:eb:54:d9:06:75:58:0d:8e:43:
24:69:f6:7c:61:53:2f:70:6c:56:ff:54:3d:f3:3b:1c:9e:a1:
ab:5b:c4:94:e7:08:aa:80:22:37:fc:c0:d6:f8:db:46:21:b4:
e2:cc:2f:77:18:7f:7c:ef:92:4d:56:51:19:74:b7:c6:4b:bf:
db:3e:a7:4a:46:20:61:ad:a5:40:4b:1b:eb:87:fd:1d:b3:c6:
3c:37:02:08:99:86:2d:40:9d:75:46:2b:76:09:36:89:82:78:
32:4e:ae:54:1c:a4:76:b0:38:1d:ae:75:28:5f:84:9d:6e:2e:
eb:00:20:de:2e:6b:9e:8b:35:11:8b:73:fa:d5:9b:b4:22:86:
b4:62:b8:fe:a5:f1:1a:77:46:07:5b:b0:8b:f7:ab:ae:2e:ff:
a5:3c:a5:19:88:93:4b:e3:49:e0:9c:6f:66:88:76:2d:a5:ce:
5b:c6:8c:db:fe:0e:27:f5:ec:bb:e9:10:11:71:15:ce:d7:d0:
d2:f6:01:b4:1b:76:1a:3e:e6:b3:9f:9d:e0:22:56:1d:f9:30:
71:af:80:ab:3a:9b:0f:d6:d7:a3:ad:19:86:4f:29:9d:69:67:
eb:04:d6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:22:03 2026 by rpki-client