Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
File: zGQrH13XOvfTrQVIfghgAd_5suc.mft (raw, json)
Hash identifier: Ijl6WW8VQwEYEB0RAthLFcpeN2t32qnnoiNEaUKaKSY=
Subject key identifier: 3C:44:75:09:85:2D:FC:C6:81:81:B3:5D:4F:10:AF:A3:5E:30:E4:03
Authority key identifier: CC:64:2B:1F:5D:D7:3A:F7:D3:AD:05:48:7E:08:60:01:DF:F9:B2:E7
Certificate issuer: /CN=cc642b1f5dd73af7d3ad05487e086001dff9b2e7
Certificate serial: 019D284DA3BC33835F94C2D49C78FB87F0F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
Manifest number: 064D
Signing time: Thu 26 Mar 2026 04:01:09 +0000
Manifest this update: Thu 26 Mar 2026 04:01:09 +0000
Manifest next update: Fri 27 Mar 2026 04:01:09 +0000
Files and hashes: 1: JbQaL2RBjoHVTuti7UfCcrYJr_A.roa (hash: iaksrkAEfaFgIKF/4+Tz3YZIiRYiBmDSf/pDYQdploo=)
2: zGQrH13XOvfTrQVIfghgAd_5suc.crl (hash: erZlAQW8UNRfwK0HPM5PgLuWBO4sXtJ/tSw4iGRMhAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:a3:bc:33:83:5f:94:c2:d4:9c:78:fb:87:f0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc642b1f5dd73af7d3ad05487e086001dff9b2e7
Validity
Not Before: Mar 26 04:01:09 2026 GMT
Not After : Mar 27 04:01:09 2026 GMT
Subject: CN=3c447509852dfcc68181b35d4f10afa35e30e403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:11:d5:e4:9d:fa:d4:8b:ec:c3:21:4b:cc:0c:
a2:f5:a8:5b:df:45:28:25:94:0d:25:e8:38:cd:56:
51:c8:ba:a7:11:08:08:6e:c3:0d:8f:f5:4f:32:72:
b1:e4:25:18:f4:a2:6e:0b:1d:89:18:77:d5:a9:41:
9c:09:90:a8:ee:6d:72:20:7e:0a:a3:19:13:a6:92:
29:c9:2e:fe:a4:ce:ea:a1:eb:90:fb:95:a7:95:a0:
65:bc:5e:da:70:08:73:66:62:23:0b:16:13:86:3d:
b4:9a:7b:3b:03:79:5a:79:e9:f9:d3:c0:56:a8:26:
96:33:da:da:0b:eb:c8:59:dd:cd:0d:9f:bc:84:8a:
0e:36:2b:4a:ac:99:7a:45:84:54:9e:53:f3:8f:61:
f3:1a:1e:92:3f:41:ef:41:e4:6f:d2:49:5b:1b:ae:
0f:d5:ec:17:90:1b:e6:4e:c0:2c:45:39:09:75:a8:
83:d3:13:e6:30:2c:c9:52:16:02:bd:6c:6e:34:a3:
54:f4:2c:3f:6a:d8:15:53:f4:1f:ef:1d:8e:df:ce:
42:fe:ba:87:db:ad:38:e9:c1:86:73:d3:3b:44:78:
fc:38:b9:0f:6c:d0:9b:5d:c5:2b:19:87:01:52:a6:
37:2a:39:a8:54:5c:a4:75:1c:d9:8b:bf:ff:fe:36:
1d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:44:75:09:85:2D:FC:C6:81:81:B3:5D:4F:10:AF:A3:5E:30:E4:03
X509v3 Authority Key Identifier:
keyid:CC:64:2B:1F:5D:D7:3A:F7:D3:AD:05:48:7E:08:60:01:DF:F9:B2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c2:14:ce:7e:c3:96:98:89:6f:70:80:33:8a:0d:f2:ef:ff:
80:0f:8d:3d:05:13:7d:a0:91:e5:58:9d:d1:d5:6e:00:c6:b4:
39:ab:d0:c7:11:5a:94:85:dd:91:c3:f3:b2:56:44:6f:cc:72:
31:12:ca:3d:be:f6:8b:cd:87:e8:5d:12:b6:ca:8e:a6:bf:49:
85:a2:4e:b7:8c:76:4c:7a:fb:89:c6:09:ba:a3:45:08:37:ba:
a1:bd:46:2b:6f:60:72:1c:16:42:0a:72:b6:28:69:51:da:65:
d1:a8:f6:bb:a3:92:54:11:2d:02:31:3f:73:e0:34:67:f6:f5:
d8:1d:e4:63:7d:36:7b:22:87:27:86:88:03:e0:fd:11:70:d4:
37:61:a4:01:94:99:1a:eb:ef:42:1a:8b:82:f9:8e:ae:d8:05:
20:a0:2e:4c:2f:98:10:9b:9b:0f:db:a1:78:22:7c:c6:92:ca:
3d:12:c4:73:a1:13:d6:eb:8d:62:27:77:0b:27:f1:e0:80:e3:
30:f4:58:6e:95:1e:30:43:da:cd:3b:ed:38:d9:f9:e9:74:8e:
e0:7a:e7:b1:44:38:fe:dc:bb:3f:96:d1:f7:85:ba:e3:e8:8d:
6d:15:0e:c5:5f:db:d4:b1:2c:cd:63:22:7c:55:b7:cc:0b:5b:
98:5f:cc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:35:02 2026 by rpki-client