Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
File: ZfASDuO28PjbUtDbgcAeREfY5Lo.mft (raw, json)
Hash identifier: VpradcbE9TmVSOkCCEgTvoiQ21ThTBXt7X47tN/33hs=
Subject key identifier: 22:6E:37:CF:35:1A:17:98:08:1E:A4:BB:03:B8:69:65:51:AE:7E:8D
Authority key identifier: 65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA
Certificate issuer: /CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba
Certificate serial: 019D2A049FAAAF5274EA8ABC9DFB24F726A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 12:00:39 +0000
Manifest this update: Thu 26 Mar 2026 12:00:39 +0000
Manifest next update: Fri 27 Mar 2026 12:00:39 +0000
Files and hashes: 1: Tthj6IAisEXh8B7T83zOvQFpSgE.roa (hash: swp/iMSfoovOUEacEZNjOCFIiISihBeFVFi87XAxBPg=)
2: ZfASDuO28PjbUtDbgcAeREfY5Lo.crl (hash: dArVDkNXIUoTrXLrW4V40ibqEgOuuWmDvdTNroDJri4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:9f:aa:af:52:74:ea:8a:bc:9d:fb:24:f7:26:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba
Validity
Not Before: Mar 26 12:00:39 2026 GMT
Not After : Mar 27 12:00:39 2026 GMT
Subject: CN=226e37cf351a1798081ea4bb03b8696551ae7e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:1d:8b:37:74:85:4d:63:ec:d0:12:a9:b7:
30:86:d0:6a:3b:b4:9d:4b:84:f4:3b:a2:ba:9a:2e:
20:95:af:53:35:7c:68:aa:14:18:18:2f:a8:6f:4f:
91:2b:d4:23:c4:5b:cd:46:02:97:cc:3b:5d:e1:74:
a5:5d:e5:49:22:04:3d:5e:65:48:ca:b1:24:82:73:
4e:43:0f:5e:5b:de:22:b0:c5:22:1f:5f:67:2f:40:
84:67:25:66:f4:0d:14:b0:34:47:a7:95:05:9c:1b:
32:c7:d8:ff:43:09:d7:13:cd:8a:d7:21:a0:11:32:
aa:df:3e:8c:cd:cb:29:f8:f1:6f:2f:d0:0e:b2:33:
32:3e:7c:39:06:ec:22:4d:79:25:54:6b:77:17:bd:
ec:39:50:ce:9f:13:97:05:cd:b4:6e:e0:83:0f:70:
65:d8:3f:17:ba:d9:94:29:ad:b1:e7:59:71:b4:5f:
3c:cf:c1:1b:b5:9e:18:eb:b5:a3:fb:90:2b:fe:45:
1c:8e:ec:7e:d9:76:6c:1f:e5:0b:52:f9:76:0b:3f:
38:fb:17:36:08:ef:e6:73:19:2f:0b:2f:1e:50:06:
a3:83:dc:86:4e:96:53:55:81:3b:5d:59:f2:07:0e:
48:02:d6:45:75:85:3e:02:31:6a:ba:e9:65:e3:d2:
b5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6E:37:CF:35:1A:17:98:08:1E:A4:BB:03:B8:69:65:51:AE:7E:8D
X509v3 Authority Key Identifier:
keyid:65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:7a:18:32:91:cb:a4:c5:31:68:bf:ba:01:82:99:81:3d:11:
ab:b6:87:08:f0:d5:8e:e3:b7:4c:ea:4b:24:66:e1:03:e4:f3:
4f:e7:05:c5:d6:74:a2:6d:94:73:3f:2e:cd:2c:fb:75:14:2b:
db:b0:fa:bd:c7:e0:ef:0a:66:35:d0:0c:f1:9d:ad:67:8d:dd:
0b:62:0f:d0:46:81:fc:76:26:99:36:50:21:7f:b9:87:c4:c4:
44:b9:f0:bf:16:94:36:ad:9f:ed:e2:99:b6:5c:e2:e4:e0:f5:
df:84:eb:76:29:e0:5c:fd:85:62:62:6e:d1:58:76:60:db:88:
3c:2f:c6:29:e2:72:bc:34:e4:20:41:ea:88:77:46:e0:77:d7:
17:79:12:18:61:03:12:15:de:e6:5c:38:20:bb:2b:0e:2f:d2:
75:c5:67:e0:f8:53:00:df:f4:b6:0f:61:32:2a:0e:a4:19:2a:
f3:26:e7:3d:34:d0:66:8f:af:f6:66:5f:4b:e6:59:7a:ea:1e:
9f:03:a6:43:fd:6d:3c:b0:f1:dc:80:34:d6:4f:7d:5c:b1:99:
d7:9b:24:93:c4:4f:1a:26:3d:05:82:5e:9c:09:c9:10:85:24:
94:e2:ed:38:15:0f:6c:96:8c:b3:16:9c:69:3c:72:d8:f2:a2:
cc:4e:d4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:04:31 2026 by rpki-client