Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft
File: ZGhabXP_WifhvB-WF9-1UIutKTs.mft (raw, json)
Hash identifier: KzoopjwM2o6Oz7Py0CJzVrrQR1Rrguv0Pz94aMjvxYM=
Subject key identifier: EB:C5:71:35:E8:0B:E0:40:2A:AB:39:50:47:6B:10:81:65:28:35:9F
Authority key identifier: 64:68:5A:6D:73:FF:5A:27:E1:BC:1F:96:17:DF:B5:50:8B:AD:29:3B
Certificate issuer: /CN=64685a6d73ff5a27e1bc1f9617dfb5508bad293b
Certificate serial: 019D2703AC55EC206FD4E8BAD379F79D5827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGhabXP_WifhvB-WF9-1UIutKTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft
Manifest number: 0F3D
Signing time: Wed 25 Mar 2026 22:00:45 +0000
Manifest this update: Wed 25 Mar 2026 22:00:45 +0000
Manifest next update: Thu 26 Mar 2026 22:00:45 +0000
Files and hashes: 1: OYfRjeO3PLyVIOuq1wvt3D3nhx8.roa (hash: 3chLq1kpFvZ9V4pj/+ggbAGhkKwBKwsrEzEF68LNv7U=)
2: ZGhabXP_WifhvB-WF9-1UIutKTs.crl (hash: iAJ+y1pZOfiM2TaiB/uN6tP/dZQrKohwuYTFWmJ8GGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGhabXP_WifhvB-WF9-1UIutKTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ac:55:ec:20:6f:d4:e8:ba:d3:79:f7:9d:58:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64685a6d73ff5a27e1bc1f9617dfb5508bad293b
Validity
Not Before: Mar 25 22:00:45 2026 GMT
Not After : Mar 26 22:00:45 2026 GMT
Subject: CN=ebc57135e80be0402aab3950476b10816528359f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7e:77:73:94:fd:ac:73:00:9a:97:e6:a0:c2:
22:0b:2a:dc:3d:92:60:4c:60:89:32:97:f7:14:7c:
5c:09:4a:68:09:c5:42:9e:35:8c:6f:c8:7b:19:6e:
86:a0:3a:10:08:b2:e6:ff:bf:3d:33:b7:27:97:f6:
d0:5a:01:19:14:68:54:a0:e1:3e:32:64:cb:81:15:
8c:7c:38:7f:49:76:32:78:81:a4:9c:54:ea:3e:8d:
27:7f:07:b1:a0:d8:a2:53:da:42:ee:23:f0:63:ae:
49:1e:4e:b3:9b:36:2f:cd:78:03:4a:af:a4:85:57:
30:3e:4a:4e:b8:60:37:61:9d:28:7d:e6:24:04:b3:
2a:12:83:88:ef:89:86:05:e3:b5:ba:d4:45:a2:e0:
2b:3b:85:57:e1:80:a2:40:fd:35:82:0d:7d:4b:a8:
3c:6b:59:c3:1e:8f:f5:5c:9f:0a:7a:4b:71:71:65:
5c:40:a3:d1:c0:6a:94:26:4d:56:1e:48:e4:0c:08:
3f:3e:7f:65:34:4d:96:19:a0:26:37:77:81:a4:47:
17:3d:d0:da:36:2d:e0:ab:58:95:b2:5b:c8:fc:02:
50:f7:d2:f9:88:67:fb:7f:1b:a5:e0:7a:9c:e1:3c:
cf:92:f6:57:f6:eb:d6:65:40:48:fa:0b:70:d9:98:
9e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C5:71:35:E8:0B:E0:40:2A:AB:39:50:47:6B:10:81:65:28:35:9F
X509v3 Authority Key Identifier:
keyid:64:68:5A:6D:73:FF:5A:27:E1:BC:1F:96:17:DF:B5:50:8B:AD:29:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGhabXP_WifhvB-WF9-1UIutKTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:32:31:36:49:ce:b5:20:09:1e:69:dc:c0:45:44:4e:26:db:
5f:db:35:4a:60:f5:74:57:c9:86:cb:3f:37:59:68:9a:a2:99:
d6:56:15:ac:53:b3:65:98:0e:b4:a2:41:4d:f0:e8:2d:08:d9:
9f:21:6c:bb:9c:c5:58:af:7d:f1:9a:1d:71:ab:07:54:07:e7:
bf:a6:a2:cf:75:f4:51:c9:e1:0f:ec:ea:7f:9a:89:6a:96:43:
bc:fd:6d:a3:00:80:97:37:e3:b1:74:9d:e0:45:01:93:be:14:
a3:98:16:c4:77:13:ee:5b:95:ad:31:b2:3e:98:b1:37:1c:16:
a0:20:b8:60:a3:1b:68:54:33:1e:54:74:36:fa:06:7e:47:3b:
4e:b6:38:79:02:ae:9a:9c:e4:30:97:b1:da:6f:c5:d2:0d:11:
b9:0e:7d:62:01:d4:66:e5:75:35:a4:cc:52:e6:fb:29:89:aa:
33:73:39:12:c1:80:17:a2:1d:3c:13:eb:7b:8e:fd:e0:74:45:
b8:e5:8b:58:22:20:24:9a:f7:fc:b9:3e:0b:7e:48:75:ec:20:
55:b8:aa:22:5f:40:a5:b9:74:08:26:c0:eb:fb:5c:df:aa:9a:
e0:b9:78:50:71:64:80:29:8b:48:12:c5:26:49:29:b9:7d:fb:
40:a1:ae:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:19 2026 by rpki-client