Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
File: ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft (raw, json)
Hash identifier: 0bVuha3KGReF3XDViQC/1/cZZ1pcXQbv004iWmcoBlE=
Subject key identifier: 31:CB:AC:AF:8D:15:0B:D6:3C:4C:29:EC:D5:34:E6:84:8E:C5:9D:CA
Authority key identifier: 65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5
Certificate issuer: /CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5
Certificate serial: 019D2583DD7FAF21518D8A34EC60E77A8159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
Manifest number: 050C
Signing time: Wed 25 Mar 2026 15:01:32 +0000
Manifest this update: Wed 25 Mar 2026 15:01:32 +0000
Manifest next update: Thu 26 Mar 2026 15:01:32 +0000
Files and hashes: 1: 3cRUjdhX8xbK1k4DfWaubJp1w0E.roa (hash: Z7aa0TuqsrWRnvU0sn3YMIcRZ7r4lbfupWu8b6jE2/I=)
2: ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl (hash: b5ZmbVg1E6DJuWxK/5WrCEd6vWasf7UNZcOCUj7rVWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:dd:7f:af:21:51:8d:8a:34:ec:60:e7:7a:81:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5
Validity
Not Before: Mar 25 15:01:32 2026 GMT
Not After : Mar 26 15:01:32 2026 GMT
Subject: CN=31cbacaf8d150bd63c4c29ecd534e6848ec59dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:8a:ba:8d:a8:0a:85:b9:41:15:4f:85:5d:
d1:59:38:1d:0d:ba:54:54:b7:7a:4a:dd:9a:60:3d:
42:42:54:50:79:0c:c9:76:60:44:10:90:d2:63:01:
82:b5:3f:66:32:14:ea:5e:4c:0c:72:78:4e:8a:ac:
79:ba:30:3d:74:8a:88:9d:5e:2e:ac:ea:e1:55:0a:
3f:a7:f1:69:c3:e5:73:55:92:f4:ed:cf:5f:8a:84:
ad:0d:88:d8:c0:a0:55:13:60:63:7a:bd:88:9e:f9:
85:b5:40:be:4c:d1:b6:36:11:df:18:78:32:39:1b:
62:c0:03:7a:b6:7f:27:b0:63:5d:db:c4:3d:5d:69:
0e:02:be:97:ae:d8:51:dd:5c:12:0a:7d:c2:4d:d7:
5d:8d:30:73:8d:41:08:9d:fb:07:c2:cd:98:42:7e:
83:3b:be:62:f1:47:9d:98:ce:f6:c5:85:b0:db:c9:
9a:87:db:7e:f9:2c:19:f7:b3:d4:04:af:57:32:45:
15:3a:0f:85:cd:26:6a:17:49:ad:9b:22:5f:dd:1d:
9f:df:a7:9b:f5:fc:09:aa:9e:10:f0:bb:90:29:4d:
ed:0d:35:ed:61:18:23:86:58:91:f7:b9:86:64:29:
62:94:5a:ea:6f:42:b0:a8:04:57:13:2e:51:b4:65:
2f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CB:AC:AF:8D:15:0B:D6:3C:4C:29:EC:D5:34:E6:84:8E:C5:9D:CA
X509v3 Authority Key Identifier:
keyid:65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:6d:7d:b8:be:15:46:19:70:ad:28:85:6c:c0:f6:cb:e1:01:
f3:3d:1b:a3:92:2b:a4:f4:69:6c:b1:7a:0e:14:db:0f:48:e0:
e8:e2:81:2f:07:25:ae:c0:92:0c:53:1c:39:67:2e:ce:fc:b5:
73:d1:51:d4:12:b2:d8:9d:7d:77:35:61:ac:14:9d:09:a7:27:
07:24:63:34:62:06:ba:0e:de:fa:5b:7f:be:24:1c:0d:f5:ae:
7f:3f:0a:39:8d:81:32:ca:c3:9b:c2:47:96:9c:cb:50:8d:02:
9f:00:53:d5:8a:42:98:1a:59:12:c0:30:52:fd:e6:71:fa:6f:
bd:d6:95:b0:83:ee:fd:6b:19:62:3d:cd:b0:bb:13:df:c4:94:
41:e2:2b:89:86:3a:59:9d:09:f8:e2:b2:7d:53:56:e9:9b:cf:
ca:67:28:da:c4:fc:5b:ca:66:3f:e6:90:97:6c:ed:55:45:a4:
56:17:a7:f7:20:2c:5f:31:c1:73:e1:68:19:ff:63:fb:f8:63:
e7:8e:8b:3e:82:59:2f:ae:86:c7:6f:99:0e:13:0f:e1:37:80:
b6:5f:11:bb:41:53:eb:91:4a:45:37:d0:b1:ef:a6:07:03:7e:
52:db:60:8c:d4:cd:1f:88:5b:55:40:87:26:45:9a:0e:61:db:
39:06:f2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:32 2026 by rpki-client