Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
File: ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft (raw, json)
Hash identifier: 8+c5N71zYNpnly/S6yAwaBHbArmyj0CqW9UffXjahLo=
Subject key identifier: AE:BE:F9:07:75:A3:E3:8D:A6:AE:67:F3:59:10:45:87:29:46:7F:18
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial: 019D2AE11E9F8B9BB08C6042CB2FDB187614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 16:01:29 +0000
Manifest this update: Thu 26 Mar 2026 16:01:29 +0000
Manifest next update: Fri 27 Mar 2026 16:01:29 +0000
Files and hashes: 1: ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl (hash: TccbvZPIw2VCbIDUNzFgVcWZPpZOYnpUKMbyqxoyNZ0=)
2: ftUP8AhWyKSCfDygp2EvHTO8Boo.roa (hash: ewSYxaolal/Z6l87pd6PUdDa+voxm7gfdPqRbZdlcCk=)
3: h7hfu83GdfBNM7Zx2PElKBPYyGY.roa (hash: HsgzFT58UTHg7xZoI81l8ngXvJujr6TYdyM2zeg4nXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:1e:9f:8b:9b:b0:8c:60:42:cb:2f:db:18:76:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
Validity
Not Before: Mar 26 16:01:29 2026 GMT
Not After : Mar 27 16:01:29 2026 GMT
Subject: CN=aebef90775a3e38da6ae67f35910458729467f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:01:c0:23:0b:95:3c:f2:55:3b:60:0b:95:2f:
f9:ec:7c:e5:4e:fd:54:25:7e:e4:79:19:98:6f:77:
9b:4d:13:49:0a:6c:d4:94:e5:96:fd:84:45:08:3d:
ee:5f:74:de:1f:22:ac:16:7d:34:67:e1:ee:51:ad:
a6:00:2e:f4:05:4b:a9:1c:07:5b:e3:ce:33:e1:43:
9e:63:71:60:9c:b5:fd:2b:b6:75:4b:e1:dc:e2:7b:
bc:e1:d7:7a:8b:cd:72:6e:55:24:d4:91:04:e8:bd:
a6:7f:89:2d:c0:e5:0f:b4:ae:86:c3:08:a9:4c:ed:
a0:87:b4:e0:4c:95:fa:de:ca:d3:3d:0b:3c:0d:a7:
16:cf:cd:a5:26:e9:40:35:e0:d6:07:8b:93:7f:43:
df:23:3e:e1:c9:04:72:1c:66:6a:27:cf:37:ef:ec:
0a:bb:b2:3d:b3:7a:38:c6:67:bd:75:2a:66:ef:4b:
de:f1:2d:5a:05:be:b6:d6:d1:7c:92:e8:cb:a2:09:
29:ee:a2:ce:19:8a:21:44:b1:0f:23:8a:e3:e5:ea:
cc:20:a1:2d:13:a4:d6:5a:cc:13:aa:9b:fc:82:3a:
42:dc:7b:be:1e:64:6d:e8:22:ae:4b:d3:5d:da:e9:
4b:55:aa:41:2a:15:34:14:d9:19:9f:a7:1a:dd:45:
a7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BE:F9:07:75:A3:E3:8D:A6:AE:67:F3:59:10:45:87:29:46:7F:18
X509v3 Authority Key Identifier:
keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:bd:91:58:ee:56:08:b4:94:fa:94:9b:49:4c:f8:81:0c:79:
0c:9b:4e:e7:77:93:16:56:c8:ec:d4:74:ed:76:ea:0b:31:db:
68:6d:9f:94:87:7a:74:e2:8e:d1:d9:9d:14:5e:78:1e:6d:f1:
8d:fb:14:f4:d5:d4:ee:b2:02:0e:9a:d3:01:42:d5:f3:24:6e:
f5:29:2c:5a:d4:10:39:b9:71:fa:ef:fd:94:b4:62:78:7e:26:
f4:f9:72:82:74:50:2a:01:97:eb:4f:34:e7:ce:d5:6b:d3:8a:
2c:3a:5f:fb:ad:c1:52:60:69:0c:28:fe:4e:9b:1c:3c:dd:31:
b7:a2:3c:88:ad:4f:5e:97:64:1c:b7:51:e4:51:62:a8:a4:6f:
f9:0c:02:f1:c5:5b:be:19:a7:03:af:7e:2c:cf:fe:db:ee:08:
1e:00:74:33:9d:51:b8:09:36:56:e1:36:7e:87:24:77:a9:46:
de:41:96:fb:bd:1a:a3:e8:e3:22:59:31:59:7a:9b:80:3f:dd:
43:d7:a2:84:d3:87:e9:76:e1:bd:87:2f:e1:24:31:47:ca:b3:
2a:0d:5c:06:38:79:b1:4b:a5:19:0d:bc:60:c9:f0:4a:3b:1d:
09:14:3f:f1:b9:d5:74:78:b3:b6:a4:66:c0:71:20:f0:02:b0:
43:0d:a3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:19:03 2026 by rpki-client