Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft
File: ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft (raw, json)
Hash identifier: 86eTN0+m6FNDKkNrIEzfSeHaAaI2yNCxbu2gokUEojs=
Subject key identifier: BE:0A:DD:7F:1F:6F:25:B4:81:73:A9:96:32:87:73:52:B6:FB:95:64
Authority key identifier: 64:DA:BA:15:D1:D3:66:CB:53:09:54:12:D0:64:90:E2:34:98:E1:70
Certificate issuer: /CN=64daba15d1d366cb53095412d06490e23498e170
Certificate serial: 019D29299F8B57AD0BBD067DF44DBB8E96E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 08:01:26 +0000
Manifest this update: Thu 26 Mar 2026 08:01:26 +0000
Manifest next update: Fri 27 Mar 2026 08:01:26 +0000
Files and hashes: 1: ZNq6FdHTZstTCVQS0GSQ4jSY4XA.crl (hash: cgbOmxjtYNR/Cw7UzUnMbLOoJoCZWV0VrjjSXgIaDSQ=)
2: bF8Fj85M5baKnqvJRx8XW6rb7BQ.roa (hash: f3mVln76POyyxSCx8XE3vxQpqNxsBFWRi4oixhIFTn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:9f:8b:57:ad:0b:bd:06:7d:f4:4d:bb:8e:96:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64daba15d1d366cb53095412d06490e23498e170
Validity
Not Before: Mar 26 08:01:26 2026 GMT
Not After : Mar 27 08:01:26 2026 GMT
Subject: CN=be0add7f1f6f25b48173a99632877352b6fb9564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7c:44:3c:7a:fd:a6:1f:3a:85:e0:62:06:84:
84:e3:de:49:3b:31:9b:6a:f8:e1:67:6f:0a:44:28:
db:fd:bd:2c:89:75:56:96:ed:b2:fe:e3:0a:9a:0b:
b0:99:24:dc:7f:71:7f:31:c7:e4:e0:0b:3e:6e:e7:
34:6f:66:f7:36:be:00:42:d5:bf:6f:13:2d:54:c8:
e3:18:d8:63:fd:c6:19:5e:fe:66:b1:2d:14:f2:0d:
2b:73:3b:1e:0b:6e:13:d3:7e:e3:31:70:bc:29:22:
24:81:9d:05:88:78:cd:3c:29:3a:b2:c4:17:3e:b8:
2b:e6:e0:24:cb:ff:1f:2a:a9:47:69:f7:74:ad:c7:
29:39:97:74:93:ca:d7:4b:13:34:35:1b:96:b9:0d:
dc:fd:4c:41:42:30:38:ae:fc:86:c1:7d:a3:b0:e7:
bb:8c:5a:e2:fe:96:11:d5:cd:67:d1:3a:cc:6f:69:
61:7f:d1:f8:b2:ec:0e:2b:f8:a7:3f:c4:8e:bb:9a:
9c:af:1c:f9:9f:64:83:bf:f2:6c:1d:f6:5b:db:97:
fb:5f:c3:75:65:88:49:7f:b3:e6:3d:b4:f3:2b:2f:
b8:5f:55:cc:fd:15:a6:9b:50:b4:d4:86:da:27:b8:
9d:81:70:5c:cf:3e:e0:34:b4:b5:07:a6:58:62:b8:
96:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0A:DD:7F:1F:6F:25:B4:81:73:A9:96:32:87:73:52:B6:FB:95:64
X509v3 Authority Key Identifier:
keyid:64:DA:BA:15:D1:D3:66:CB:53:09:54:12:D0:64:90:E2:34:98:E1:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:2e:d2:a2:27:4a:5b:98:16:a6:2b:18:6c:8e:66:3c:18:cc:
86:b3:af:30:5f:ba:dc:cb:58:a9:3d:f7:ce:b1:4a:b8:2f:8e:
ec:45:24:cc:78:51:55:9f:96:63:ee:f7:0a:2e:9f:e2:61:f2:
d6:bf:a8:1f:52:70:95:15:f6:86:7d:00:b4:ba:9a:cc:a6:14:
f6:b8:b9:a1:8f:07:95:03:ce:fd:61:7c:ce:21:e5:77:54:82:
5f:7a:91:10:1a:0e:06:54:36:89:9f:3d:2a:ef:d9:09:69:7e:
80:46:28:f5:a4:62:a0:87:90:b1:df:0b:41:8f:42:37:71:ba:
ac:03:30:1a:a7:8a:20:c2:ce:0f:8d:14:fd:74:56:90:91:71:
7d:5b:2a:5a:14:dd:bf:81:31:a0:bc:7f:2c:f2:12:6e:d9:0d:
f0:13:9d:64:0a:98:2f:6a:99:93:ff:93:1f:e2:de:dd:71:45:
f4:38:b6:86:52:a3:7f:6e:58:65:fa:79:35:02:f2:fa:0d:09:
b4:a2:19:2d:db:64:ac:f2:7f:8f:53:53:93:ee:18:c9:c9:94:
2b:70:17:4c:5f:5c:8d:d4:48:b2:35:76:d5:fe:46:4d:b1:95:
53:0f:c0:3b:7f:f5:95:c0:9b:cc:71:b3:25:d4:71:1d:b2:5d:
17:16:2f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:51:27 2026 by rpki-client