Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
File: ZAGt7bycjxxs8jifx_dB7fTxnyw.mft (raw, json)
Hash identifier: K7VB6lDNL2+eV1HmnVTwyBkA0uZoUBZVBhmXbvoKEBk=
Subject key identifier: 80:D3:DF:04:BF:7E:BB:56:FF:70:B5:D5:E5:CB:92:AA:AC:7A:F0:79
Authority key identifier: 64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C
Certificate issuer: /CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
Certificate serial: 019D26282BCE0BF2C8B6EF7DC8CD6AF132CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
Manifest number: 0EE2
Signing time: Wed 25 Mar 2026 18:01:00 +0000
Manifest this update: Wed 25 Mar 2026 18:01:00 +0000
Manifest next update: Thu 26 Mar 2026 18:01:00 +0000
Files and hashes: 1: KSszcmUpPo8JBR4sfrdc2vv2aRg.roa (hash: ew+549kVqxTodrfZ3xKjeuTH8QTf9/NbVOyVAUCiCUA=)
2: ZAGt7bycjxxs8jifx_dB7fTxnyw.crl (hash: Eb37xQJP5uk05G2/1x/ju/+Pwi4lsk6sYSmdr6ymyNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:2b:ce:0b:f2:c8:b6:ef:7d:c8:cd:6a:f1:32:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
Validity
Not Before: Mar 25 18:01:00 2026 GMT
Not After : Mar 26 18:01:00 2026 GMT
Subject: CN=80d3df04bf7ebb56ff70b5d5e5cb92aaac7af079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d2:a8:f2:ab:4b:58:bc:02:f7:43:24:be:56:
4d:db:af:6a:41:11:06:e8:60:75:38:fa:15:82:92:
4d:02:95:42:2e:ec:3d:c6:f6:a5:8c:9f:af:41:33:
a4:53:f5:a5:4b:61:e5:80:67:2c:6d:65:a4:70:d0:
fe:0a:41:e0:61:ae:9f:43:b6:9a:8b:69:af:27:d4:
d5:62:86:fd:6d:bf:35:5f:f9:8e:99:18:e9:f0:a4:
4a:de:43:0c:a3:7e:eb:94:e5:97:d5:75:e0:ee:73:
44:b8:d3:f9:22:39:bf:39:fe:2f:33:64:87:46:2c:
03:b5:94:76:d2:ba:33:d5:82:60:e3:fa:e4:94:e0:
c4:1d:5a:18:28:f0:0c:e6:e8:30:b0:e0:aa:ba:e4:
d6:75:8e:0a:5f:80:44:8f:38:73:4f:e3:f1:42:1c:
c3:3d:63:fc:31:5c:02:a1:a5:46:a4:e0:7b:47:7c:
4d:1d:d5:f3:4a:47:ce:ab:a1:b7:6a:56:2b:c7:9b:
12:08:b1:61:49:e5:ce:06:b3:58:4e:d0:95:a7:5f:
c4:26:54:4b:34:42:ff:f8:e6:aa:2b:d1:a7:ec:de:
5e:23:56:a3:d7:cf:c7:c7:22:4e:cb:14:e5:ae:e4:
1c:74:0b:a2:bd:1f:42:32:f5:1a:60:7f:d8:25:02:
3b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D3:DF:04:BF:7E:BB:56:FF:70:B5:D5:E5:CB:92:AA:AC:7A:F0:79
X509v3 Authority Key Identifier:
keyid:64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:1c:ba:f2:36:72:a3:65:2a:d4:ad:fe:c1:2e:9d:6f:76:bf:
9a:03:f8:76:52:e1:d6:ee:f1:c0:a6:4f:a5:99:61:da:37:82:
84:16:73:0b:4c:79:ec:ed:09:5d:aa:b4:c7:4d:d6:6a:5b:e8:
a0:aa:22:fe:72:c6:90:2b:f4:54:dc:21:e0:38:8b:50:5b:9f:
78:58:2c:4d:e1:13:d5:f8:ef:93:ab:ac:f1:5f:04:74:b7:42:
d1:43:f9:24:13:ba:aa:8e:ba:af:fa:8c:4e:0d:b5:23:f4:f9:
c8:cb:65:06:89:d0:da:22:92:a6:c7:2b:66:13:c8:65:59:af:
c2:5f:ec:db:f1:66:15:53:26:ff:74:52:6b:91:34:9a:58:a7:
cb:5f:6c:a3:8f:f9:99:1e:1c:12:de:8d:3e:5d:16:01:1a:f4:
1d:07:6f:aa:20:0a:76:50:53:3c:7e:01:6e:d5:ab:9b:02:21:
cb:f8:66:6e:9c:77:2a:5d:e9:7f:54:d1:b8:2e:e0:a8:8e:2c:
c2:f0:e9:42:b1:92:3c:87:ed:ec:d4:35:8c:b9:90:1a:ba:e7:
7a:5c:20:63:bc:4f:f2:8b:42:81:30:79:b6:6a:2a:07:b2:af:
91:dd:82:c6:b1:98:7e:c1:bf:ee:8f:f6:24:80:09:e0:14:82:
84:11:7d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:30 2026 by rpki-client