Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft
File: ZlBwd85_MPwGht0JNKiZl98x6Ew.mft (raw, json)
Hash identifier: pUXnATvGIBjM1a+WrMlKc3iDVzcXmB/CgRxCQgDJMK4=
Subject key identifier: DA:58:6D:85:9E:00:6C:50:B0:4B:6B:68:79:CA:E5:83:59:D9:88:FE
Authority key identifier: 66:50:70:77:CE:7F:30:FC:06:86:DD:09:34:A8:99:97:DF:31:E8:4C
Certificate issuer: /CN=66507077ce7f30fc0686dd0934a89997df31e84c
Certificate serial: 019D281699E3C09C9EBD5BE993AC2CAD5816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft
Manifest number: 0409
Signing time: Thu 26 Mar 2026 03:01:02 +0000
Manifest this update: Thu 26 Mar 2026 03:01:02 +0000
Manifest next update: Fri 27 Mar 2026 03:01:02 +0000
Files and hashes: 1: ZlBwd85_MPwGht0JNKiZl98x6Ew.crl (hash: Z3XLoJ2R9bVjsWDJ9RJFCF3ckP/0qFmVHELCe/LeJHo=)
2: oEr0iaXnd0sYycCq7BAkuxMnYgU.roa (hash: htrjhsBScBfwfdBlz2NkGUVVLsJ41MJX7K3Gfxtec48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:99:e3:c0:9c:9e:bd:5b:e9:93:ac:2c:ad:58:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66507077ce7f30fc0686dd0934a89997df31e84c
Validity
Not Before: Mar 26 03:01:02 2026 GMT
Not After : Mar 27 03:01:02 2026 GMT
Subject: CN=da586d859e006c50b04b6b6879cae58359d988fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:3b:30:06:28:2a:54:54:5b:4a:c3:31:49:
19:e2:f3:2e:21:6b:a9:e8:64:e0:6b:48:2e:e4:d4:
fd:17:0f:65:74:34:09:be:e7:49:28:c1:b2:cd:64:
4b:0b:0e:36:71:51:68:62:68:79:f8:4b:5a:a6:f5:
d0:d0:b8:df:45:08:dd:25:5b:7e:ab:c4:56:ed:36:
1c:e9:de:97:c7:c2:de:7c:c3:86:54:93:21:c8:29:
52:c2:8e:fd:b5:b6:33:64:b7:80:9e:52:ac:b1:69:
4b:10:44:e9:1c:4f:58:3f:ea:52:79:8a:36:be:a1:
5f:bb:0b:72:dd:e2:fa:8d:c8:10:58:9e:14:12:cf:
89:31:17:5b:10:5e:87:b5:ab:4a:47:8f:87:2b:ff:
b8:1d:cf:eb:92:72:37:7e:93:5a:bd:8c:fb:67:b1:
f0:43:17:f4:fe:3c:20:f3:33:9c:b6:26:c8:28:86:
43:9b:09:a7:0a:54:e9:2d:b7:c9:18:56:c2:c7:f8:
ed:cc:f4:d3:6c:32:b1:71:82:5f:08:a9:58:d6:29:
f7:dd:d4:c7:a2:1d:00:38:25:69:34:62:d8:44:46:
7a:94:5a:a7:6a:8f:37:99:49:00:b7:fa:e6:5b:3f:
c0:f5:f9:ab:b1:3d:32:d5:ba:b9:03:c5:9c:e8:33:
be:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:58:6D:85:9E:00:6C:50:B0:4B:6B:68:79:CA:E5:83:59:D9:88:FE
X509v3 Authority Key Identifier:
keyid:66:50:70:77:CE:7F:30:FC:06:86:DD:09:34:A8:99:97:DF:31:E8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a9:67:a7:48:48:65:5b:01:ae:7b:2c:ff:c4:80:05:d3:fe:
d3:38:d2:8a:0f:ac:61:67:c4:2e:e7:67:87:66:c0:a8:ad:27:
95:d1:59:1e:b3:ce:34:37:bd:59:46:98:8d:5d:06:52:fc:97:
45:bd:c7:ec:10:d4:05:21:4f:8f:df:54:9a:f6:59:b2:15:20:
c2:f2:60:b8:df:69:26:67:a4:a2:79:c9:21:49:db:db:a3:98:
fe:d0:8a:a8:dc:ab:46:11:22:11:9b:a6:66:17:66:18:07:c7:
15:2e:bd:5e:15:27:77:b8:2c:45:98:82:6c:d3:6d:44:49:7d:
12:d7:cc:30:67:8e:33:c9:6d:dc:41:0b:4a:c1:fb:f5:e3:34:
bf:e2:a2:ff:b2:7d:12:16:4c:4a:a4:0e:ab:bf:52:1c:f6:fe:
e7:0c:ff:c1:e2:2c:a5:61:e9:35:bc:d1:6a:cd:bf:a9:4e:1c:
da:18:84:eb:da:aa:73:7c:73:87:0d:b2:b4:fa:7e:96:c5:27:
ed:9f:bb:d3:91:29:6b:4f:9f:ac:40:0c:5f:75:89:6d:79:07:
90:8c:af:ff:06:a5:8b:b5:21:d0:44:fc:0f:48:d3:85:ba:01:
0f:4f:9c:a7:42:b6:ca:7a:23:4b:57:c2:7c:44:3c:41:8a:7b:
ce:48:62:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:29:40 2026 by rpki-client