Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
File: Zu8xraxmOFWz3dGTHETPgGTWpus.mft (raw, json)
Hash identifier: +7H1vrAG8xCnAvmME3N0eZnGqCdqWKLbDk3srn7vd0Q=
Subject key identifier: 51:8A:28:6E:5B:07:36:CA:C4:14:A1:1B:0E:25:43:02:0B:89:A5:3D
Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
Certificate issuer: /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Certificate serial: 019D26CCDCEBA38FADADA2F95A2F24EEAFAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 21:00:53 +0000
Manifest this update: Wed 25 Mar 2026 21:00:53 +0000
Manifest next update: Thu 26 Mar 2026 21:00:53 +0000
Files and hashes: 1: Y9ARVG_hAm4nIrCTT5R9mNE2Ai8.roa (hash: MI2P4v9i+kU4F9eDStIUnkN/VYUaWV71u0evfwMIhOU=)
2: Zu8xraxmOFWz3dGTHETPgGTWpus.crl (hash: S8IaG1oDWtEs4l3dli9lkELEJ6xHoD5xlS8ydgSj9EE=)
3: fzcY56XdnFZoFNt0HXida4aSHGU.roa (hash: MqoKni1V8waFiRzOClIF15P78qFKBD2MS62bZfGpfEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:dc:eb:a3:8f:ad:ad:a2:f9:5a:2f:24:ee:af:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Validity
Not Before: Mar 25 21:00:53 2026 GMT
Not After : Mar 26 21:00:53 2026 GMT
Subject: CN=518a286e5b0736cac414a11b0e2543020b89a53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:15:27:e2:9e:40:0a:4f:41:97:72:43:d3:26:
28:4c:8b:36:37:64:50:3a:91:96:f0:14:4d:a5:09:
c8:e3:a8:07:71:7c:09:cb:53:eb:ec:5e:f4:1b:81:
85:3f:c8:8d:6f:88:0a:f3:d1:1a:ce:b9:ed:bd:57:
3a:89:c2:fb:9a:74:d9:8c:75:2b:b1:3b:76:63:d9:
aa:f6:80:32:b1:64:40:17:60:20:85:84:a1:ea:60:
52:5c:d3:f3:41:a7:26:44:c6:03:de:ec:a5:ba:6f:
b4:7a:7b:5c:0d:49:3f:b2:4a:52:b0:1d:91:ec:30:
1d:42:d1:9f:91:b0:84:c8:8f:89:b1:d5:cd:42:23:
7a:38:7b:59:46:af:a8:83:0e:35:46:4b:56:69:2b:
e1:df:93:0d:44:35:4c:ae:b6:44:7f:77:7b:d5:e4:
87:82:04:d3:db:5b:c4:3f:3b:36:b3:ba:40:2a:66:
7b:a4:53:d1:6c:ea:cf:c6:8f:d7:c7:78:57:87:a7:
02:97:6b:c7:6d:77:55:be:46:f2:69:db:b1:d8:1a:
a5:fe:44:54:51:26:84:d2:1f:95:56:f1:e2:c9:b0:
c3:97:b0:dc:f3:11:9b:b0:a6:20:80:3a:a0:0c:2e:
66:75:cd:b0:e4:11:c6:6a:d4:c7:6b:20:25:9f:33:
c6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8A:28:6E:5B:07:36:CA:C4:14:A1:1B:0E:25:43:02:0B:89:A5:3D
X509v3 Authority Key Identifier:
keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:7f:e0:7c:86:29:e6:20:30:f5:4d:58:f1:53:19:10:68:d3:
83:56:12:97:56:ec:42:21:a9:bb:d4:c5:1d:bd:1b:0a:05:71:
e5:6e:57:5c:cc:c4:bb:7f:ce:9b:f2:6d:94:55:69:05:55:0b:
b8:91:16:d4:e5:1c:fd:f9:24:8a:a5:cc:89:c9:75:e9:ef:2a:
8e:7d:7c:00:6b:70:2e:b0:68:b3:67:66:83:f9:ad:22:f8:63:
05:7d:7e:35:ab:6a:0a:27:98:05:d6:5f:ce:ee:6e:33:13:94:
ff:e1:57:42:74:28:9a:72:ec:de:8f:4e:09:27:0b:6e:5c:8c:
53:12:dc:ea:f5:da:c2:dc:72:0c:8b:7f:24:73:c1:d8:38:eb:
2b:f1:1f:04:b5:cc:6f:24:bf:e9:93:4f:50:f5:a8:9a:c5:c6:
07:37:a9:b5:ee:b8:37:44:ff:45:9d:85:c4:20:93:64:75:40:
7f:f3:f3:7d:bb:39:e5:db:68:23:e1:38:44:ec:69:da:b9:c5:
c2:0c:6f:d5:b2:5a:9b:3a:2f:c7:db:89:63:ab:0c:1f:63:f8:
a3:ea:fb:bd:8c:05:b1:f2:19:1f:00:34:d4:ca:58:85:84:1a:
6e:41:e8:b9:c5:25:d8:e0:00:92:3c:f4:c9:2d:d8:0c:77:6c:
06:90:78:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:01:12 2026 by rpki-client