Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
File: zkyvauzIwxB7S3EXTrKZdOD9hVs.mft (raw, json)
Hash identifier: rZ3S3awVPAHG39ls0pzeEGOfLBUyCNcWufh1QK6vNIs=
Subject key identifier: 27:E0:B7:65:D0:E4:9D:DD:C0:CA:5C:21:6B:14:9B:60:FA:0F:21:A4
Authority key identifier: CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
Certificate issuer: /CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Certificate serial: 019D27728EF4A9CC429EDF7584425A673630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 00:01:52 +0000
Manifest this update: Thu 26 Mar 2026 00:01:52 +0000
Manifest next update: Fri 27 Mar 2026 00:01:52 +0000
Files and hashes: 1: 89g7xKjcRoLf08YN30kAkWgPW80.roa (hash: P8X4WuWL6NisJbBQ/NNr4p37Mppw9OurR9kU3npYcKM=)
2: zkyvauzIwxB7S3EXTrKZdOD9hVs.crl (hash: wwzBpn+cZAJ+XQgUrqb19lH/byWrI0iZEaOXC66yUoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:8e:f4:a9:cc:42:9e:df:75:84:42:5a:67:36:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Validity
Not Before: Mar 26 00:01:52 2026 GMT
Not After : Mar 27 00:01:52 2026 GMT
Subject: CN=27e0b765d0e49dddc0ca5c216b149b60fa0f21a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:8d:1f:3e:e9:81:5a:d4:33:ff:45:0f:76:
ad:04:c3:5f:75:67:34:b8:06:f5:8b:62:ca:fd:65:
8b:8c:26:95:2d:a7:4e:9e:50:6f:17:e9:e2:75:2e:
08:14:b2:f2:e2:27:81:8b:a7:5e:79:2f:e8:49:f6:
cf:96:38:6d:f3:0c:aa:03:a7:bb:76:5c:29:7b:6a:
34:20:1a:c9:fa:6e:92:83:a3:c1:ba:18:dd:59:d9:
33:d7:f9:83:fa:f5:cd:ef:94:0a:7a:c0:e8:d2:35:
77:76:5a:6e:d1:77:ea:f2:ae:4f:ef:0a:fb:70:f3:
f3:b5:df:b4:dc:c5:e8:93:ea:c2:e5:d7:73:26:e8:
65:87:6a:db:b8:b6:49:a6:29:a8:a2:35:eb:9c:09:
1d:b3:39:92:ba:b5:d2:95:c8:39:64:d6:fd:f7:8d:
50:3b:01:7d:ed:69:83:15:7d:36:25:d2:07:18:2e:
9e:34:43:19:63:9c:c8:01:17:d2:90:fe:53:df:5c:
07:d5:c8:e4:65:53:51:7f:c1:5e:f6:89:b7:32:9b:
b6:b2:f8:a2:d9:c8:04:34:c0:fb:18:3e:76:eb:f3:
37:10:9e:e5:6a:2a:d8:eb:03:45:c5:5d:5f:09:4b:
6a:33:f7:a0:db:27:4a:ec:8c:63:61:7d:22:aa:c7:
56:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E0:B7:65:D0:E4:9D:DD:C0:CA:5C:21:6B:14:9B:60:FA:0F:21:A4
X509v3 Authority Key Identifier:
keyid:CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6f:06:1c:4d:36:2c:e0:0d:5d:81:1b:89:61:b0:4f:8c:37:
5e:20:46:a6:e2:17:eb:96:36:41:2e:17:4e:5f:33:8c:6e:35:
9a:04:3b:ef:13:75:99:ad:13:92:71:ff:fc:ef:d1:8b:1f:77:
48:f3:70:9d:f2:df:c3:c5:14:77:d3:13:90:ff:59:26:cb:fd:
f4:4a:d5:0a:1d:03:8e:57:89:3f:62:04:85:dd:6a:0b:70:5c:
94:2d:7c:17:27:d5:2b:7a:34:96:8e:5d:67:51:6e:ae:ce:3b:
56:23:7a:8d:b9:1f:a3:2a:e4:d6:6b:7a:14:17:24:12:36:0a:
3c:a3:8e:48:75:9d:4e:7e:2c:22:5a:43:c6:7a:ca:f0:58:0b:
30:cb:df:0a:19:00:d0:c8:1b:02:2b:5c:3d:5e:a6:22:9d:cc:
3c:38:a0:68:de:75:af:1e:13:34:32:ab:a3:f7:f6:57:86:74:
c1:81:0f:e1:e1:73:50:1e:f7:17:a0:68:3f:06:83:69:6f:de:
01:e8:36:43:dd:ec:bf:a2:e0:8c:61:50:45:57:9a:4b:37:d0:
1c:55:75:95:2c:af:46:4d:ed:7d:f1:fd:bd:53:96:3c:9d:fb:
cf:29:3f:07:05:00:fe:d5:82:f9:73:2c:7b:61:f5:e6:d8:f9:
de:25:c4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:13 2026 by rpki-client