Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft
File: ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft (raw, json)
Hash identifier: BaDyo0HtVMxn2Ys5diureGpSePoKoDxsNbmWs2hJOD4=
Subject key identifier: BB:9A:91:8B:78:30:E6:14:CB:0E:8D:3E:8E:82:13:C9:4B:09:AE:F8
Authority key identifier: 66:D5:E5:CD:7D:03:75:DE:25:27:40:54:64:12:B8:8B:A5:BC:FA:7A
Certificate issuer: /CN=66d5e5cd7d0375de252740546412b88ba5bcfa7a
Certificate serial: 019D284DA11951D2286FBCE81DF11BFF793A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft
Manifest number: 1413
Signing time: Thu 26 Mar 2026 04:01:09 +0000
Manifest this update: Thu 26 Mar 2026 04:01:09 +0000
Manifest next update: Fri 27 Mar 2026 04:01:09 +0000
Files and hashes: 1: HJJKjlD8w6pwUXxhSyRU-4S7rcs.roa (hash: ijFhOfJ/0CwOhPEkrD+B1c1Juz952plWRqWilLY1GJ0=)
2: ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl (hash: ZRyGVFWkNhfmF+mx/nP/wauVv18vKO/AEBF2VgzbszA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:a1:19:51:d2:28:6f:bc:e8:1d:f1:1b:ff:79:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d5e5cd7d0375de252740546412b88ba5bcfa7a
Validity
Not Before: Mar 26 04:01:09 2026 GMT
Not After : Mar 27 04:01:09 2026 GMT
Subject: CN=bb9a918b7830e614cb0e8d3e8e8213c94b09aef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:80:d4:04:33:a0:6d:ee:ef:60:d8:c5:d3:1b:
0e:94:06:0d:4f:0e:0d:49:96:00:28:ad:2c:ef:61:
48:18:d3:a4:d9:7b:16:f6:a0:48:cd:37:9f:cb:3c:
18:6f:10:51:9f:27:24:d4:24:4e:c7:e3:e4:fe:76:
e8:23:d4:3b:60:a1:88:ea:7c:de:f8:19:09:9a:05:
d7:6f:81:05:e0:fa:ee:8c:46:aa:6d:b1:ce:10:d2:
68:86:d2:02:14:95:21:d5:12:68:a9:f2:95:21:1f:
84:f1:cd:ac:fc:78:7f:53:2b:b3:2f:04:3a:bd:cb:
84:33:70:d4:46:b1:53:c6:1b:9d:b3:0c:31:89:0a:
fe:c8:05:c4:41:97:1f:2b:f4:ee:19:61:c6:68:74:
b9:58:3a:83:4d:42:cd:d2:9c:c2:b4:8d:6d:ba:34:
84:a9:cd:4b:a9:1d:12:7f:a7:52:4a:0c:21:28:9d:
1f:1d:45:4c:90:c9:4e:1d:94:bf:68:33:e5:53:26:
55:b2:79:a9:c9:62:7f:ca:8b:54:89:ed:0b:d8:f5:
f3:c0:5a:5e:5c:d4:9a:92:be:f6:fe:9e:fa:93:d0:
1b:e3:af:c1:02:93:e1:b7:14:8d:3c:70:da:17:1c:
68:ff:f2:c6:91:e9:6e:d7:b0:51:b4:57:87:42:14:
26:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9A:91:8B:78:30:E6:14:CB:0E:8D:3E:8E:82:13:C9:4B:09:AE:F8
X509v3 Authority Key Identifier:
keyid:66:D5:E5:CD:7D:03:75:DE:25:27:40:54:64:12:B8:8B:A5:BC:FA:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:ab:98:ad:c1:18:94:31:38:e0:01:4d:be:89:75:bf:12:ca:
ae:bd:73:6f:ac:5b:56:74:cb:89:ad:bc:de:aa:cd:bb:16:1e:
6b:72:6b:26:13:c3:21:c5:45:1c:17:4f:24:e1:84:fb:b0:d0:
9b:16:34:6c:5a:c8:df:ff:c4:2b:4d:5d:3e:da:98:85:b7:d1:
e6:ca:f1:c0:28:10:39:f5:3f:8c:af:20:32:d1:fa:9e:37:65:
98:9f:a6:94:6d:12:3e:ff:ed:12:8c:b3:b2:c8:a8:67:c4:c5:
c6:a8:51:1c:81:4e:5d:7a:03:6e:b3:78:9e:c3:56:47:f8:9e:
98:6c:f2:d3:0c:ee:dc:16:47:af:e2:70:a2:97:17:4a:69:dc:
2b:7b:09:a0:1d:be:c7:5b:58:f8:93:4a:49:44:e8:90:b2:ac:
67:7f:59:e1:f2:f9:08:e2:dc:04:14:9b:20:70:fb:46:1f:2c:
dd:81:3f:b2:c1:6a:14:52:c6:46:03:d0:59:18:f4:ca:3c:11:
04:83:e2:c5:6d:b3:9b:55:12:77:64:53:c8:02:1d:8e:6f:19:
99:34:a7:0d:9b:f3:4e:08:2b:09:71:b0:e3:2e:f5:01:73:4e:
08:1d:0c:6f:36:89:fb:e0:8c:d6:fc:9e:97:ad:66:78:b5:c9:
9a:45:fe:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:17 2026 by rpki-client