Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/890a41-be76-434d-87cf-ccc82f2d57e0/1/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.mft
File: ZE1zGWVIkkSnvSj4k9Czdpr9mW8.mft (raw, json)
Hash identifier: DdQeTGL7leZSW/OUujqp5I2e7lJ5lRr6e87TymyHzzw=
Subject key identifier: 69:11:65:8E:1C:94:9C:44:F6:65:89:9E:DD:BF:67:0B:0C:06:E3:CA
Authority key identifier: 64:4D:73:19:65:48:92:44:A7:BD:28:F8:93:D0:B3:76:9A:FD:99:6F
Certificate issuer: /CN=644d731965489244a7bd28f893d0b3769afd996f
Certificate serial: 019D27E061F14F4FCF6C1914A2EFE901D8CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/890a41-be76-434d-87cf-ccc82f2d57e0/1/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.mft
Manifest number: 023A
Signing time: Thu 26 Mar 2026 02:01:49 +0000
Manifest this update: Thu 26 Mar 2026 02:01:49 +0000
Manifest next update: Fri 27 Mar 2026 02:01:49 +0000
Files and hashes: 1: ZE1zGWVIkkSnvSj4k9Czdpr9mW8.crl (hash: K5xMtzcS1EIpAAyiu5x2aLjiODd2bCsQryDY2H9SjRQ=)
2: u9gP8A91VMRA57qyicb7SQNNI18.roa (hash: 0MKrZtGd36J4o61NEPJP4zHNGsYmgrJJ2A25NjVwYGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/890a41-be76-434d-87cf-ccc82f2d57e0/1/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/890a41-be76-434d-87cf-ccc82f2d57e0/1/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:61:f1:4f:4f:cf:6c:19:14:a2:ef:e9:01:d8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644d731965489244a7bd28f893d0b3769afd996f
Validity
Not Before: Mar 26 02:01:49 2026 GMT
Not After : Mar 27 02:01:49 2026 GMT
Subject: CN=6911658e1c949c44f665899eddbf670b0c06e3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:e3:42:09:e7:80:51:3b:57:03:10:66:ff:
97:6c:06:ec:2e:0b:f0:63:e7:9e:14:dd:d1:57:35:
9a:32:e0:7e:1a:13:92:d2:df:87:e4:46:7a:c9:03:
07:d7:fe:e2:b6:d4:5a:17:3d:7d:b9:8d:81:88:7d:
02:e7:c8:8e:ba:aa:53:c0:f8:69:4c:b7:62:04:66:
d0:ea:c6:92:f3:a8:80:12:17:b2:fb:7a:f0:d5:15:
30:20:e0:92:3e:0a:94:84:d0:3b:2d:a4:9d:97:23:
f6:be:f9:5e:5a:59:a2:52:b2:ca:ad:04:f0:f1:09:
44:12:04:7b:21:11:33:5b:ac:0f:18:9e:46:69:1a:
f2:b6:a6:dd:de:5c:3e:6b:73:58:b9:8b:db:fb:d4:
77:d6:dd:d2:23:8d:1b:b2:dc:b7:1a:c8:4b:a9:99:
7a:71:40:6e:83:3f:3d:6c:a6:85:79:02:bc:98:e9:
db:cc:8b:ae:73:40:63:82:5d:aa:3e:3d:e1:04:67:
35:d1:e1:26:16:7f:03:9d:e4:51:65:7c:37:87:10:
e0:76:e7:af:47:06:9c:80:55:21:4b:29:e4:55:e3:
3e:a7:76:88:cb:4d:30:a6:bc:85:60:a7:10:6c:71:
95:2e:ee:da:9a:31:5c:93:07:e5:99:5b:78:66:76:
2f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:11:65:8E:1C:94:9C:44:F6:65:89:9E:DD:BF:67:0B:0C:06:E3:CA
X509v3 Authority Key Identifier:
keyid:64:4D:73:19:65:48:92:44:A7:BD:28:F8:93:D0:B3:76:9A:FD:99:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/890a41-be76-434d-87cf-ccc82f2d57e0/1/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/890a41-be76-434d-87cf-ccc82f2d57e0/1/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:13:f5:44:7e:62:83:7c:b3:93:0e:ce:98:f2:a2:54:bb:59:
5c:85:c4:69:35:53:1c:bd:96:ab:54:36:55:57:54:69:cc:9e:
55:69:49:7a:62:48:36:3f:5c:0a:a9:3d:c1:ca:f1:4c:f6:6d:
88:cb:bd:8a:dc:9b:95:b5:80:9c:f6:b0:a6:52:95:2a:60:a4:
66:8d:88:94:67:13:50:70:b4:e6:ac:c4:8d:bd:be:e3:ed:09:
16:17:c4:f8:b8:58:fc:59:44:29:48:75:a8:9c:d1:65:9c:fe:
22:4f:c2:06:79:fc:41:ae:04:e9:cf:06:59:c8:72:2f:7e:8f:
5e:e4:69:a7:b8:d7:91:54:bc:78:02:2c:9c:bf:0a:7b:8f:ec:
e4:8f:15:cc:6b:a5:43:41:fa:3b:01:e7:ee:a4:5d:a6:da:51:
22:59:e1:bd:86:3b:a5:4c:e6:b9:d3:42:06:3f:18:a7:3a:55:
cf:70:fd:bb:49:8b:84:6e:b9:a9:2b:7c:78:1c:05:5b:78:5e:
c3:26:6f:9d:0e:d9:36:84:12:b2:bd:28:29:7d:d8:a9:a6:6e:
57:6b:91:55:52:b9:33:a1:f8:75:75:88:ac:90:10:1d:29:3f:
b8:af:c1:4a:6c:bd:c3:ab:ce:93:fe:bb:f5:26:54:0e:24:53:
e7:40:71:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:39 2026 by rpki-client