Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
File: ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft (raw, json)
Hash identifier: 17zzvEMxHprwh0BBUIAF9hglHOvc3EyP8uxlcwURoOQ=
Subject key identifier: 75:7B:6F:F2:58:B5:E7:52:99:00:23:88:40:A4:2B:9F:1F:6C:FF:AA
Authority key identifier: 65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB
Certificate issuer: /CN=65226ee5ea0406592df975c6f4c84f10f14d15cb
Certificate serial: 019D2772AAA393A38252AC277A89C8426E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
Manifest number: 17C7
Signing time: Thu 26 Mar 2026 00:01:59 +0000
Manifest this update: Thu 26 Mar 2026 00:01:59 +0000
Manifest next update: Fri 27 Mar 2026 00:01:59 +0000
Files and hashes: 1: USooHDGW_QeqYRyqa6kck-Wwdw8.roa (hash: VauOA3CJ0j4kbwlbCKNmu8qN0LtwGSRo+52ifzBfLcs=)
2: ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl (hash: 9K49oYdK3/kCiIHHNL5caRff5hBnMlsAqaf1ArFTVBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:aa:a3:93:a3:82:52:ac:27:7a:89:c8:42:6e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65226ee5ea0406592df975c6f4c84f10f14d15cb
Validity
Not Before: Mar 26 00:01:59 2026 GMT
Not After : Mar 27 00:01:59 2026 GMT
Subject: CN=757b6ff258b5e7529900238840a42b9f1f6cffaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:06:e9:f6:cb:61:4b:bd:68:8a:58:6a:6f:04:
7d:ff:34:94:ae:45:37:78:b5:0d:06:a7:30:f8:c5:
96:be:41:52:e1:3e:61:73:54:20:ef:30:20:1c:78:
52:37:61:b3:08:cc:8f:6b:3f:02:ee:dd:65:4c:84:
14:cd:a0:9b:6b:07:47:06:b7:96:b0:34:32:d9:31:
05:03:36:32:79:64:7b:af:78:28:ad:76:2d:04:ff:
29:2b:29:e3:ff:b9:95:fd:31:b5:f5:2d:28:54:f1:
d1:d3:3e:22:ef:9b:fa:bc:5b:ed:a2:86:65:f7:33:
d6:05:9a:f9:f3:0d:21:65:c2:52:24:8e:50:85:ad:
b4:ab:1b:be:1c:a1:4f:53:6e:ef:96:e4:30:c1:d8:
fd:1e:a5:02:90:02:d3:a5:8f:a9:ea:1a:6d:01:ea:
bd:c5:3c:5d:a4:4c:ab:71:b2:f3:0f:9d:e0:72:94:
f3:1a:15:89:db:5e:43:0a:d7:c4:fa:de:ba:61:9b:
85:f3:85:b6:de:28:1c:90:5d:c6:b7:b8:14:4c:49:
df:4e:cd:8e:28:44:c8:48:e9:6c:76:cc:24:39:fb:
bc:57:90:c3:e8:f4:3e:5a:2a:71:7a:76:be:c5:0d:
35:5e:b5:52:f5:c5:bc:8c:5d:2b:94:6e:d4:e0:40:
94:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7B:6F:F2:58:B5:E7:52:99:00:23:88:40:A4:2B:9F:1F:6C:FF:AA
X509v3 Authority Key Identifier:
keyid:65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:bb:34:da:0b:88:2b:7e:ee:a4:2a:0c:59:ba:55:e2:80:63:
60:38:1e:c5:40:95:e2:c3:d2:54:fb:48:92:dd:3c:c1:ca:c4:
8f:c6:23:19:c7:82:1e:5b:f5:2a:93:75:8c:aa:3e:20:28:d2:
ef:28:ec:3a:ba:b1:f9:41:17:c8:e8:1e:18:89:74:2e:47:19:
93:fc:24:a1:5b:9e:31:e3:f2:81:03:03:b1:be:5f:20:29:f4:
ff:00:0f:d9:d8:2b:4c:86:b5:5b:44:41:20:57:d8:8f:ad:5b:
b9:33:f0:31:34:65:e8:f0:df:85:b6:7b:fa:31:d9:5e:de:6c:
b2:c8:71:6f:ce:af:55:de:cf:93:41:89:73:f4:4e:57:7f:36:
4d:91:c3:f9:9b:69:ec:07:88:c7:96:a7:56:a4:7b:0e:e8:52:
3c:26:20:46:7b:0e:0e:17:5e:b7:33:8c:dc:92:50:34:8e:46:
56:ba:48:07:fd:c4:04:4b:28:f7:d3:84:65:99:bb:bf:65:5d:
e0:cc:7c:ad:8c:97:7a:8b:7b:b4:2a:e6:6a:7a:f3:33:c9:a4:
3d:72:1e:c4:ff:8e:d6:82:1a:5f:97:a2:40:dc:c0:65:0f:95:
84:d0:07:19:d5:ac:c3:de:31:ae:bc:11:fd:20:94:92:fb:c6:
15:12:be:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:17 2026 by rpki-client