Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
File: zGB34ATojv-PE7d0DfJU2eSN1XQ.mft (raw, json)
Hash identifier: +Q8RCbzMtw2L8Q4aQbKLS2iNIyynZg+obJdlP153EKk=
Subject key identifier: E0:38:46:F7:91:F5:9C:2D:DC:C9:01:C3:DE:1C:F6:DF:25:0F:66:60
Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
Certificate issuer: /CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Certificate serial: 019D26CD086621FE8F431D0C113B7235CBDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 21:01:04 +0000
Manifest this update: Wed 25 Mar 2026 21:01:04 +0000
Manifest next update: Thu 26 Mar 2026 21:01:04 +0000
Files and hashes: 1: 8q97JD8tJUeeOn9fKUKNm7YiLwU.roa (hash: +XZNxuku4QOLJPqFzFk8t0v4pn8/FyRgMW7pvdNX3CU=)
2: MDkPOpYz1CFhy53GuyXV7mJS25Y.roa (hash: JdEyxxhM+8u/dWlLfW1Caxnykc4bJ7pVq4kK7m8J+m0=)
3: sPvIT2OpPdfQUjumOhMItUZScLE.roa (hash: 3ub5VhGbB2HUNoD3TI7D0yCIQk+I5O7LDn2pAlXC/k4=)
4: zGB34ATojv-PE7d0DfJU2eSN1XQ.crl (hash: TixGV+rd1ripg7YMvlhEGQUnl5WAJFwgn/w3Pgctcr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:08:66:21:fe:8f:43:1d:0c:11:3b:72:35:cb:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Validity
Not Before: Mar 25 21:01:04 2026 GMT
Not After : Mar 26 21:01:04 2026 GMT
Subject: CN=e03846f791f59c2ddcc901c3de1cf6df250f6660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:22:9e:61:f7:66:5a:ea:94:0b:bf:bf:5f:68:
7b:d8:bb:8a:43:88:fe:58:3e:cd:c5:eb:88:7f:3d:
ae:48:ee:f5:77:5b:1d:9f:1d:98:ad:88:57:46:80:
bb:c5:dc:fc:44:87:93:64:6a:99:b4:b8:f3:97:fa:
49:42:64:fa:0f:d8:0e:e1:dd:1d:18:77:e9:8b:34:
67:25:57:e2:f8:1c:4a:c2:22:81:a8:61:59:9a:1d:
13:2c:bf:72:9e:9a:46:8d:52:28:1e:08:f5:f7:27:
49:64:d6:f0:8c:d6:50:fc:9a:5c:c3:a6:2d:bb:29:
b2:47:56:c3:dc:68:64:7b:cd:4d:b6:65:24:8d:b8:
7c:af:fe:df:0b:41:48:b7:4f:c8:2d:44:02:4c:75:
56:9c:bb:9a:c0:52:21:a7:9c:c4:9c:f3:87:9e:9b:
6b:6f:a0:de:2e:42:8e:0f:17:9d:ea:a3:67:1a:d8:
cd:a5:06:7a:d9:4f:03:0a:13:47:7c:c7:7d:62:4c:
a5:33:63:36:25:22:c5:e6:99:f2:b7:10:c9:6c:e9:
09:66:fa:3a:1d:43:c5:40:ec:8d:0f:8e:0d:df:c8:
79:37:08:6a:9f:4a:ee:2b:4e:78:83:f8:58:75:fb:
ea:de:66:37:4c:37:7e:33:1c:f5:61:55:85:a9:9e:
45:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:38:46:F7:91:F5:9C:2D:DC:C9:01:C3:DE:1C:F6:DF:25:0F:66:60
X509v3 Authority Key Identifier:
keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:47:ff:92:51:74:14:3c:12:41:a1:22:99:ca:98:98:95:ad:
5e:f6:03:c7:50:15:7f:67:2f:24:d5:85:1f:27:bd:7d:56:62:
ec:ec:41:98:7c:b6:72:33:b5:8f:68:a4:b8:36:46:cb:71:6a:
ed:28:75:5e:8b:4f:e2:0d:83:5c:b1:93:7e:d2:18:31:9b:2b:
6b:12:d0:f5:9f:2c:c9:58:7f:43:69:08:f1:9c:95:ee:8c:70:
c6:01:ac:e5:7c:50:13:df:e3:b5:a4:2d:8b:6b:f2:6d:46:6f:
c2:83:31:6d:6f:4d:4f:0a:9a:1c:d9:17:c3:fc:6d:5f:d5:9a:
aa:46:2c:b7:26:fd:9a:12:a9:6a:22:b8:cc:b5:ce:71:ad:77:
2d:4b:80:be:55:b2:37:a9:f2:66:7b:48:f5:81:6f:cf:ab:56:
26:0e:e4:42:a1:99:a9:5f:19:f0:4a:74:6a:1a:24:66:a5:96:
4a:25:70:7e:e8:50:55:0e:cf:8d:23:b5:c7:41:42:f0:df:76:
c0:2f:a8:bd:56:bf:f5:64:b5:fe:60:70:9d:5b:c9:63:eb:78:
22:eb:21:91:b4:7e:e3:10:a4:2a:fe:1d:17:c2:7f:cc:6b:66:
fc:4a:bc:83:a1:ea:e0:61:92:80:d4:f5:4d:64:9d:fc:d6:c6:
3e:48:aa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:42:58 2026 by rpki-client