Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
File: Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft (raw, json)
Hash identifier: WW/jaFDFVcfNXf8y/ZoxAk9zGwSLsiClJ6ma4AY6lHU=
Subject key identifier: F4:9B:F6:9C:3D:94:0F:08:F7:4A:E3:94:C3:E4:9A:A2:47:0A:E1:8C
Authority key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
Certificate issuer: /CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Certificate serial: 019D2703BAD3EFE4A4BEB985A65D225D1D79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
Manifest number: 0822
Signing time: Wed 25 Mar 2026 22:00:48 +0000
Manifest this update: Wed 25 Mar 2026 22:00:48 +0000
Manifest next update: Thu 26 Mar 2026 22:00:48 +0000
Files and hashes: 1: C_VRFP2HIVQ92IBRqKDUpWFoIEw.roa (hash: vn7JZEI6f0C3P1aOSgIzdjUGS6glebz8hQYfRM3UhMg=)
2: Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl (hash: Q96JKI1YnAtG25/Si/roa2+wqXTrwGs9/J+qiXUms64=)
3: wDaukqq7DBMLY3tz0NlY1IroUx0.roa (hash: 3J9MoAyfecCeK4hgjY1lICytZk6haCoZrI0pumvGF1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ba:d3:ef:e4:a4:be:b9:85:a6:5d:22:5d:1d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Validity
Not Before: Mar 25 22:00:48 2026 GMT
Not After : Mar 26 22:00:48 2026 GMT
Subject: CN=f49bf69c3d940f08f74ae394c3e49aa2470ae18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a1:d4:0e:61:64:7a:ef:19:27:7d:64:a9:d0:
be:12:cf:3b:98:aa:6c:a3:df:41:46:5e:ac:9a:2d:
19:e6:13:ca:4c:51:61:d6:d4:4e:c6:de:9c:a8:fd:
1f:d7:bb:0d:9f:f1:fd:d1:f8:ea:c3:c2:f7:00:e6:
84:53:d2:ca:6f:07:c3:e0:58:62:93:f9:67:d3:a5:
3f:ca:b7:a2:04:89:18:d6:ce:86:d0:25:68:9d:7c:
a4:b0:df:d0:ab:8e:c6:43:12:17:03:ac:d8:9d:b3:
36:07:cc:6c:09:4e:d4:6e:d8:f8:18:19:2e:54:af:
17:2d:85:59:ba:0b:4a:d5:e4:54:e5:4f:a5:b4:c8:
d3:fb:87:7c:78:67:27:dc:51:35:6f:ef:71:71:81:
a1:8b:ba:ec:a8:d5:75:55:c2:af:df:b3:57:5d:dd:
78:38:1b:a1:d7:d4:97:22:76:2a:d4:4a:31:aa:92:
50:4e:aa:17:95:20:29:a2:9d:a2:32:72:e7:d7:a8:
41:99:8b:98:ab:dc:69:32:5b:71:5e:0c:99:98:c3:
28:c5:41:16:18:b5:9a:a4:9f:6a:2e:89:dc:fa:27:
cc:f5:79:1b:4b:41:34:71:3d:1e:fc:22:20:36:c8:
e6:fb:f0:ae:b3:b7:80:f3:d5:98:ed:0a:34:56:52:
3f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9B:F6:9C:3D:94:0F:08:F7:4A:E3:94:C3:E4:9A:A2:47:0A:E1:8C
X509v3 Authority Key Identifier:
keyid:66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:20:70:70:25:f4:89:fd:bc:d5:87:79:1c:04:4e:86:e4:2f:
f8:1e:3f:d2:f3:78:d3:f7:bf:8d:05:be:ce:c9:8f:f2:47:cb:
b9:d3:49:f2:e4:38:60:89:f1:e0:1a:b9:99:96:27:30:cf:92:
4b:27:c5:65:62:4d:43:f6:d9:d2:c2:31:8b:2b:5b:66:d3:bf:
a0:d3:19:67:9f:3c:93:d8:85:36:bc:c8:e6:59:60:25:7c:a4:
aa:7e:71:9e:4d:42:c9:80:6d:4f:71:1c:46:7d:e5:8b:5f:fa:
e4:fe:29:e6:e8:cc:d7:88:66:b8:a5:89:44:81:1d:bb:45:ae:
b8:65:ed:77:1a:76:7b:fb:e8:6b:73:02:08:b9:aa:5c:8e:12:
d7:6d:4b:10:7a:83:e6:e4:cf:ad:26:ae:b5:9a:a3:1e:19:eb:
1e:c4:fe:22:54:49:08:d7:83:5d:ff:90:80:e7:d5:19:83:a0:
f6:ca:c1:69:b3:70:6d:65:5e:26:b1:2a:d8:7e:34:ae:a3:d3:
e8:90:df:32:f2:3a:2b:3e:74:4c:4f:75:10:af:93:97:fd:95:
55:ce:5b:31:53:7f:b8:91:ef:d3:ac:62:da:0f:02:01:13:03:
d4:11:6f:33:40:fe:bc:e3:de:80:c3:15:04:fa:0d:25:ec:af:
4b:c6:2f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:28 2026 by rpki-client