Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
File: ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft (raw, json)
Hash identifier: ksmHg2MxcAruYq50uR9aV9RlmnzDEhWiY9qTlCGeieg=
Subject key identifier: E0:B6:45:C4:9F:36:7A:3D:E0:B5:FB:A8:E3:9E:A4:9F:A8:2C:B5:68
Authority key identifier: 64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4
Certificate issuer: /CN=647664ba5773614a3c44f90c12ae725548a75cd4
Certificate serial: 019D2470F3A6A57E2FD3769ECD31E03C9C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
Manifest number: 014B
Signing time: Wed 25 Mar 2026 10:01:15 +0000
Manifest this update: Wed 25 Mar 2026 10:01:15 +0000
Manifest next update: Thu 26 Mar 2026 10:01:15 +0000
Files and hashes: 1: RxW3J-colFOkVksHm4xCxrnoO38.asa (hash: 5kavPOBpW6XisOPfx4sQ9sZymfx7dERD5SqFBoW+fIA=)
2: ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl (hash: d+LwP2iPoE/95z70DikkielJfLqwYxEaOvCZGQjekuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:70:f3:a6:a5:7e:2f:d3:76:9e:cd:31:e0:3c:9c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=647664ba5773614a3c44f90c12ae725548a75cd4
Validity
Not Before: Mar 25 10:01:15 2026 GMT
Not After : Mar 26 10:01:15 2026 GMT
Subject: CN=e0b645c49f367a3de0b5fba8e39ea49fa82cb568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:e5:2a:07:9e:13:09:79:bd:e8:c0:10:9f:
b6:05:bd:9c:03:84:25:da:24:d8:96:c5:39:54:61:
db:36:d2:f8:dc:89:84:9a:c3:a6:34:55:5b:5f:d2:
64:6f:ed:6e:16:43:93:a4:3d:f5:21:43:6a:b9:03:
ed:04:bb:45:51:36:29:f9:84:af:6c:8a:f4:80:38:
1a:db:26:3b:6d:38:37:61:71:8d:13:50:b2:d5:9e:
91:3e:0c:83:8c:0c:bb:89:25:a1:89:f8:c1:63:5d:
f1:d6:e4:89:2f:20:be:62:40:26:5a:99:67:a2:f5:
00:fb:4b:66:de:13:1b:b8:f2:2f:48:74:a4:41:b0:
d6:50:79:82:f8:2f:e0:b9:11:99:c5:35:29:b0:72:
72:30:8f:59:b0:33:01:af:50:48:48:1d:bd:1a:b5:
6d:4f:4c:e3:77:84:8b:73:b5:73:5b:12:01:ca:09:
b3:69:dc:ce:3f:e5:4a:5b:a0:ff:90:3a:d2:ed:54:
d2:96:21:56:6c:09:46:bb:e8:5f:e2:c7:fd:15:8f:
80:7a:1c:a1:97:a7:6c:b5:53:2c:26:e3:83:d4:10:
36:58:a9:94:a2:81:e4:47:35:50:e3:01:0f:b5:1b:
99:8e:77:77:c3:8f:f9:f7:d3:b4:d3:b2:14:c0:c9:
00:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B6:45:C4:9F:36:7A:3D:E0:B5:FB:A8:E3:9E:A4:9F:A8:2C:B5:68
X509v3 Authority Key Identifier:
keyid:64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:eb:83:dc:70:16:bb:eb:cb:1f:3b:3a:4e:9b:2c:cc:25:34:
45:35:75:09:74:98:8e:ca:a3:a6:2a:37:c8:30:f3:74:a5:63:
68:d6:a1:8c:8a:72:cd:ad:e6:87:74:06:9c:8b:ca:d5:e5:8f:
89:d3:dc:1e:82:34:11:67:0e:cc:d8:44:ad:b8:8b:33:e6:3d:
ab:e8:b2:7f:c6:78:26:05:3e:84:e9:95:a1:9a:c4:c8:a8:9f:
8e:0f:f4:ee:56:93:aa:2e:84:e6:fd:fd:dc:b2:36:b1:a6:4a:
ec:04:69:8a:f3:a3:24:9b:8d:b6:68:3c:56:d3:d5:24:af:a1:
93:58:f1:e1:c5:b6:d7:aa:9a:80:fd:86:1c:53:89:45:fb:0e:
03:1a:56:bd:30:f0:aa:58:f1:af:d8:de:15:70:05:28:95:64:
7a:24:c8:f8:94:1c:04:cd:b5:b7:91:c0:0e:38:cd:92:94:a6:
e0:09:60:b1:6d:da:da:6e:ba:37:c2:1f:8a:1a:5b:ba:a7:05:
40:48:d6:56:b6:8e:ab:ba:a4:dd:ff:3e:9c:60:3f:26:ec:41:
a8:83:8d:ad:a7:20:4b:40:99:c8:4e:83:dc:c6:c8:b0:41:d6:
7a:c7:9b:95:71:dc:02:8f:2f:7f:9b:87:04:3d:32:c2:31:ce:
a9:0b:74:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:24:36 2026 by rpki-client