Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
File: ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft (raw, json)
Hash identifier: 27GcJreYf5kV1fzPjA2Xeqw1r7hkFxLZYhqM+L71bgM=
Subject key identifier: 5E:C8:C5:4F:81:08:76:A7:1B:E8:A4:7E:6C:EB:F7:72:3B:61:9E:C4
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial: 019D28848B9F827C41CDF375ABC12166EB62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
Manifest number: 188F
Signing time: Thu 26 Mar 2026 05:01:08 +0000
Manifest this update: Thu 26 Mar 2026 05:01:08 +0000
Manifest next update: Fri 27 Mar 2026 05:01:08 +0000
Files and hashes: 1: 0z9citdXF8752nMEZiQ4oSMIADQ.roa (hash: JsB61vUCFnFWtGQaFlnVeeC8gXBCxefSLsjNjYyY9/g=)
2: 1QDofdrdxn1wg6XblVl9BvBWUmc.roa (hash: 8Sto9TSm0VzEJfpih+W00AHEzAW1aUXacQ7edZT+jK8=)
3: SHKEVaNgH9Bucka6k6DYJtipntE.roa (hash: BUtzhRgSiAPbFwNwynYtm2FzNHzBaqAfRxGfLRS/A6M=)
4: SiLSIEYAwNCN6yfvfGLloC6RIXg.roa (hash: f37/jtR+gmt7ksn8/WXr+fSg16YuTdrSXAgeLfyiBrs=)
5: VHWtEL_iyyJZZOqjrL2J-IKargg.roa (hash: rnSeZqJKS3ZOhG3KIGaYj7ByHskvac+xvOyX10SyZy8=)
6: ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl (hash: SktLUvZ4z08fvKyidKnQfLGnfzv0dzJOBDLcg7YyzXo=)
7: mYZ-CoJ30ryRjfCq_ZwrN2mkqqU.roa (hash: yzaoDw2vJVnlrfgQa+Wm4W0pkL/1ud5VYXRkIehmaa4=)
8: qBMQ_OTzlhMPTgYD0x98v7ieh-M.roa (hash: srAfkImn91GUj6UJibeFHF6TEzTA92kUfQ1mQv9UhIQ=)
9: vivzNK4w1TVYnua5SgoJCXmDNng.roa (hash: 9/40NjL27IpJKJ6tBTmAIkD9cPnZOn2LOM7782cQFOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:8b:9f:82:7c:41:cd:f3:75:ab:c1:21:66:eb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
Validity
Not Before: Mar 26 05:01:08 2026 GMT
Not After : Mar 27 05:01:08 2026 GMT
Subject: CN=5ec8c54f810876a71be8a47e6cebf7723b619ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:30:43:30:7b:3d:42:6a:8f:b4:63:24:2c:e4:
5e:cb:dc:d6:6c:52:45:21:bf:d1:81:a5:6c:7c:fe:
2e:35:b7:e5:fc:cc:a2:f0:e1:47:07:f5:0a:bc:9b:
5d:61:14:f4:88:a1:51:78:55:ee:cd:6c:cd:23:be:
81:df:9d:95:49:79:d8:c2:81:e0:83:d7:61:4d:61:
5c:cf:85:e9:db:4c:db:3e:72:6a:c4:ef:8c:80:8c:
9d:60:db:04:2c:66:a6:99:d0:2a:3c:47:18:f8:98:
5d:f1:4c:56:8d:8c:bf:a6:a7:fd:cb:b4:b6:02:06:
77:81:c7:14:51:a2:b9:38:29:a8:71:76:b4:05:df:
81:3f:e7:ea:6d:0e:ae:24:8b:c4:0d:ae:c4:da:3a:
77:ea:3d:3f:82:c9:ca:6e:d1:f5:49:57:47:0d:ae:
f9:6f:7b:70:cb:47:49:ce:2b:a2:5a:c8:cc:f2:b8:
63:e0:39:6f:c0:bc:0f:ef:79:04:e9:fd:19:11:bb:
6a:6a:e7:d9:26:ac:e6:83:f0:07:01:32:4f:ea:4f:
7e:54:b5:6d:18:6b:6f:f7:0d:59:a9:d3:d7:e6:a6:
96:41:84:7e:50:4b:bb:be:f2:28:08:be:b0:59:31:
ed:30:c6:c5:19:51:53:ec:d4:b6:d1:2f:e7:49:36:
bd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C8:C5:4F:81:08:76:A7:1B:E8:A4:7E:6C:EB:F7:72:3B:61:9E:C4
X509v3 Authority Key Identifier:
keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:be:c6:db:c6:b6:48:11:e4:9d:8a:1b:26:70:97:05:38:47:
f1:4c:a1:0e:2b:b8:34:15:d1:00:3a:bb:0f:0b:fb:b6:da:be:
42:8f:57:45:58:d4:e1:08:56:d3:5a:7f:62:a1:a5:e7:36:6c:
7f:56:42:07:d5:86:d0:0b:2d:bf:fe:5a:86:f2:c8:76:e0:3f:
46:ec:b0:03:a1:21:8e:bd:79:c6:e8:ae:1b:63:74:12:0a:f3:
fd:2f:70:29:b6:f1:b8:99:45:90:d8:cb:18:fa:9c:fa:a6:01:
a3:53:56:19:a6:64:53:7a:71:df:26:51:41:e5:96:ae:d6:fc:
99:a2:be:f0:49:be:94:bc:9a:78:46:90:aa:76:8b:08:66:fe:
a1:83:a8:4e:b4:e7:66:db:2f:b8:a8:d8:6c:e3:ba:55:b0:e2:
3d:ae:89:cc:17:10:01:ae:57:3a:21:9d:3d:b0:25:0d:61:c5:
b4:e1:b1:f6:2f:27:f7:8b:25:ca:57:90:2e:6d:d8:86:df:63:
45:56:86:ea:31:ec:72:e1:70:51:e5:52:3b:ae:ac:80:9c:87:
8e:bf:61:d3:63:63:a4:c4:1a:8b:f8:68:53:7b:d7:a3:27:43:
4c:72:e3:61:50:dd:71:f0:24:44:92:b8:c2:21:be:56:32:c8:
67:8b:4c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:15:48 2026 by rpki-client