Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
File: z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft (raw, json)
Hash identifier: w4pScu4q5s/ZFsi37ftk0VRc0G9Dj/dz1hBctGTthQQ=
Subject key identifier: 11:AB:DB:BB:E8:F3:D5:73:36:20:09:85:92:8C:F4:20:B8:5A:A2:8B
Authority key identifier: CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
Certificate issuer: /CN=cf9833261697652c35547e98fc05a7e2294edbc7
Certificate serial: 019D270441EAE80EF8AF4044BC3BCAB89B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
Manifest number: 0651
Signing time: Wed 25 Mar 2026 22:01:23 +0000
Manifest this update: Wed 25 Mar 2026 22:01:23 +0000
Manifest next update: Thu 26 Mar 2026 22:01:23 +0000
Files and hashes: 1: 0S-ozMaRAyvvdMvSJW3g5Kk4iVo.roa (hash: OQHH+g7JmAcn53oHjDt/GSfgh8qJfjfcS42p09F0WtU=)
2: NQIBAohX75IaNOk07YtqfQi_l2Q.roa (hash: FDra3udXguGsI5fh/D9xyGvlXRNRLrQbxmcagtWhiYA=)
3: wAgPAR1yzaKF5ISv6v3dvwjLWao.roa (hash: hhxh1IVQoJ4OjQ4sKNlyVMIfwcDlCbms6Xn0khvEao4=)
4: z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl (hash: f4x1cpwddV1KhOiYERx0nw4U96itYEgmq8m4N86jHhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:41:ea:e8:0e:f8:af:40:44:bc:3b:ca:b8:9b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9833261697652c35547e98fc05a7e2294edbc7
Validity
Not Before: Mar 25 22:01:23 2026 GMT
Not After : Mar 26 22:01:23 2026 GMT
Subject: CN=11abdbbbe8f3d57336200985928cf420b85aa28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:32:28:53:d1:1b:4b:4c:db:32:13:86:71:40:
7c:07:8a:7f:10:8d:3f:f0:43:8d:46:84:d0:f5:b3:
46:b8:6a:2a:fe:e7:97:c8:3f:a6:06:18:d9:2c:54:
8f:83:33:25:62:f3:9b:f1:14:f2:d4:86:df:a8:05:
31:50:05:57:45:59:40:b3:69:34:e4:0d:7b:65:43:
7d:6c:94:5a:f7:37:f6:01:43:dd:61:8c:8c:73:99:
32:35:2b:a6:03:5f:9d:f5:10:23:9d:1b:7b:f0:47:
9f:20:6e:02:12:7c:18:3b:ef:40:28:53:a9:1c:10:
57:bb:ca:09:7d:07:81:6a:f6:81:6f:11:4c:3e:ff:
69:9f:47:06:77:9f:21:30:8b:6f:d9:78:e1:3d:52:
76:3a:f8:78:54:b4:ee:3d:dd:5b:0f:de:5b:4f:d4:
36:0c:f1:26:73:70:11:83:25:d2:2b:a0:31:0f:ac:
61:91:69:5b:01:f7:4e:59:a7:a8:23:1f:c4:7b:e3:
da:0e:b8:5e:5f:81:04:c6:82:94:73:3a:52:60:82:
1d:73:bf:18:40:7f:83:0b:1c:de:8f:c7:0a:d1:a8:
c6:41:2c:aa:06:28:e2:19:74:60:b7:f6:1a:49:a2:
69:52:4c:89:68:b6:4d:26:19:59:01:af:93:b4:b9:
5f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AB:DB:BB:E8:F3:D5:73:36:20:09:85:92:8C:F4:20:B8:5A:A2:8B
X509v3 Authority Key Identifier:
keyid:CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:72:8b:21:8b:1a:a8:ff:bb:8d:7c:02:de:f6:23:c8:2d:10:
15:4e:d4:8b:64:76:98:84:a3:6e:cf:e1:68:ed:6f:d7:22:32:
df:21:20:a5:4a:37:88:79:38:b6:1f:6f:58:c0:dd:cb:fa:67:
dd:ad:6f:1c:99:40:c5:2b:fc:2c:ea:88:9f:e1:3e:b2:df:85:
9d:5e:84:82:92:57:54:95:3d:de:de:70:75:9f:64:e5:cf:69:
67:be:24:67:cf:13:4c:a1:e3:8e:1e:8a:b1:02:7b:93:0c:ac:
7b:e0:47:bc:fb:fd:b7:31:85:a4:d7:e2:9a:86:26:4f:dd:ef:
00:23:bb:f0:2c:19:5c:28:99:d6:9b:07:5d:0b:40:a4:30:d5:
44:2f:86:f2:70:4e:41:35:a7:d7:d3:6a:c4:de:55:8d:5f:ed:
de:9e:fc:50:31:c8:b8:ac:be:ea:fb:67:6f:99:45:4e:2b:79:
db:87:6d:43:bd:c7:14:be:c9:2c:44:ae:03:57:9b:aa:3f:90:
7d:8e:10:9f:a4:fc:06:d5:cf:4c:26:e3:ce:82:35:67:73:0c:
de:50:cd:20:a0:a3:25:d0:97:c7:41:8e:59:57:02:7d:05:de:
a2:49:34:f0:8d:33:56:dd:fd:22:69:d9:f2:92:c6:96:9e:63:
6e:37:9c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:21:22 2026 by rpki-client