Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
File: ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft (raw, json)
Hash identifier: mWivoKxRQcoP7kFlRhNuMcq5491WVXKgL+p61nospeU=
Subject key identifier: 7C:C2:AC:1A:18:E4:9D:97:41:0E:B4:D6:86:FF:1C:48:E1:01:94:F4
Authority key identifier: 65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
Certificate issuer: /CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Certificate serial: 019D266004453ACFF0D1B1CA0A9D7F2AEE6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 19:01:59 +0000
Manifest this update: Wed 25 Mar 2026 19:01:59 +0000
Manifest next update: Thu 26 Mar 2026 19:01:59 +0000
Files and hashes: 1: 3SjeUFC4YP2hmea4QgynnyCGUKg.roa (hash: eN1xEmiUCaEx82o/WrnNDgoT+UPc2qHAHANZVD640yc=)
2: ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl (hash: 0RxeXqjnFNwfpEbESOsj6OsNb8yO2aaxefQRIjBE6sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:60:04:45:3a:cf:f0:d1:b1:ca:0a:9d:7f:2a:ee:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Validity
Not Before: Mar 25 19:01:59 2026 GMT
Not After : Mar 26 19:01:59 2026 GMT
Subject: CN=7cc2ac1a18e49d97410eb4d686ff1c48e10194f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:43:fe:82:bb:f9:45:1d:ad:5f:c0:06:58:8b:
31:59:06:d5:a3:6b:ed:55:99:b2:63:6b:42:c7:cf:
85:f4:aa:43:f9:52:4b:4c:62:7b:af:45:de:ac:59:
83:6c:b7:52:79:7e:89:6f:1d:e2:2b:0c:f4:c6:56:
b6:b3:53:45:07:5e:a6:01:01:1b:00:b0:3a:27:e9:
04:f5:80:6a:5b:84:20:4d:f7:a3:5d:f4:38:ee:93:
a2:db:5e:af:8e:3c:5c:2e:67:3a:a3:2c:7a:98:2a:
e4:b0:90:b5:92:ed:40:50:d8:16:76:81:ba:0e:9e:
02:b8:85:c2:05:7f:8c:02:ef:52:b4:6d:1d:22:1c:
0d:dd:61:ef:ca:cd:d7:ff:0a:68:63:47:a3:05:ee:
c3:1e:5a:12:47:12:12:09:dd:68:c6:08:81:ef:06:
55:93:35:8f:65:9c:2d:a3:bf:78:92:e2:2a:74:f7:
44:1e:89:0e:fe:5d:5f:55:73:e0:4c:6b:da:a7:3e:
37:23:4d:20:3b:42:d0:b1:ff:dc:69:76:0e:86:14:
d1:36:be:7c:fe:32:4c:5a:ba:30:bc:83:19:39:ce:
e9:d1:43:01:28:96:cc:00:67:d8:ee:81:1a:97:d1:
d4:dc:f6:3b:eb:1b:01:83:d5:bb:8f:ec:fc:5b:5d:
b5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C2:AC:1A:18:E4:9D:97:41:0E:B4:D6:86:FF:1C:48:E1:01:94:F4
X509v3 Authority Key Identifier:
keyid:65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:78:89:83:e2:2d:d2:e5:13:d5:18:d3:b8:45:c9:b6:18:69:
0c:40:d8:8f:00:d1:7a:de:82:c6:90:c0:b9:26:25:66:79:20:
37:67:3e:d5:ce:af:37:65:4a:fc:5b:d5:75:ab:01:c7:c6:a7:
c2:9f:17:15:d3:8a:b6:2b:bc:32:03:8a:55:98:7d:b1:32:ca:
76:3b:de:dc:e9:ab:2c:b8:49:71:a9:ed:4a:6e:2f:d5:41:bb:
d9:2d:3f:9c:a3:86:bf:c1:a6:33:5c:34:c5:40:91:2b:c4:9d:
2e:93:6a:42:98:ab:12:69:ba:62:71:bd:45:48:97:e3:2e:36:
15:17:6b:8e:0b:61:98:d3:04:38:5a:21:7e:54:d5:3f:5b:bb:
ae:0b:49:b5:af:1e:51:8e:cc:2d:28:e3:4f:25:6c:b7:77:31:
b3:ea:71:43:f3:07:55:86:bd:e2:e6:60:00:ac:68:c0:58:90:
12:a9:99:a3:6a:b8:27:a5:70:20:66:f7:3d:15:da:29:28:ce:
24:4a:8e:73:c5:3f:ad:d4:49:a7:10:79:5a:a7:07:c5:bb:19:
3e:7f:a6:f8:54:a3:15:88:e8:3b:f1:56:04:e3:16:00:16:5a:
50:33:1f:5b:1a:1d:b9:c2:80:bc:33:b1:b6:6a:7f:4b:28:31:
fe:32:57:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:06 2026 by rpki-client