Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
File: ZZbw3BZbfNIJAispZINMRedNISw.mft (raw, json)
Hash identifier: +LWBkYpQ8MKSMdk22n/emFlQ+GjAjzjMsZGKXoeZT5Q=
Subject key identifier: F2:A5:25:CD:0B:3C:58:EE:C0:74:86:83:5F:E8:70:18:37:EF:04:77
Authority key identifier: 65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
Certificate issuer: /CN=6596f0dc165b7cd209022b2964834c45e74d212c
Certificate serial: 019D31BE4FDF40F2EA60FCAA0512D2AA32A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
Manifest number: 188D
Signing time: Sat 28 Mar 2026 00:00:49 +0000
Manifest this update: Sat 28 Mar 2026 00:00:49 +0000
Manifest next update: Sun 29 Mar 2026 00:00:49 +0000
Files and hashes: 1: 1-RWTcjebB00EEPXrCQe14UhdpaU.roa (hash: xcBiWpi6+uT5sbN5EOtc0NeFtZPbsGISgJTOn56/et0=)
2: 43BDuYzZKT6GuNcPCdD6yFXu9KU.roa (hash: BR04tqYW3l6HUM2rcLyj1VGl9Tid3trcvH2fcQ2YbBo=)
3: 8auuTFL6tParorXPR_FX7n5-sMo.roa (hash: EPBMa3bgDg4K8XqsoSkRoxiHXy+VyA8XAgJy5cRLejw=)
4: ZZbw3BZbfNIJAispZINMRedNISw.crl (hash: 68x2krxG8tAu3zaG7K83saB7tGGSaCrKoqsw3iDLnRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:be:4f:df:40:f2:ea:60:fc:aa:05:12:d2:aa:32:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6596f0dc165b7cd209022b2964834c45e74d212c
Validity
Not Before: Mar 28 00:00:49 2026 GMT
Not After : Mar 29 00:00:49 2026 GMT
Subject: CN=f2a525cd0b3c58eec07486835fe8701837ef0477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9f:89:53:42:5d:7b:d8:10:4e:78:bb:b4:03:
a8:ca:b8:93:1a:26:a9:43:a5:b4:f1:e5:9d:82:6f:
15:a4:f4:25:86:92:cc:ab:54:a2:7f:3f:cd:1f:56:
40:8e:7f:d8:b1:0b:4d:85:c0:8a:23:cc:75:bc:91:
e5:18:c8:0c:bd:41:b4:29:df:73:5e:3e:75:cd:59:
98:58:af:db:3b:ea:43:a4:e8:e3:17:be:22:a7:f5:
2c:63:d2:6b:2e:c0:58:81:5f:30:6b:92:87:b6:3c:
62:6c:05:fb:aa:c1:0d:d6:93:96:7e:a3:3d:c6:d8:
04:0f:bf:ff:26:66:69:fc:6c:32:ae:f0:19:6d:d2:
8f:78:91:0e:67:79:93:d1:62:8d:56:6e:11:a2:72:
cf:0b:60:da:00:26:a1:e5:dd:63:39:23:63:5b:01:
aa:97:37:42:7f:d2:02:32:24:cc:c0:c7:af:d3:f0:
19:0d:99:b3:48:d4:38:aa:2b:81:f1:99:e4:f2:f3:
bb:cd:af:73:5d:73:8d:c1:41:5a:3f:7a:dd:f5:06:
1c:1c:10:f8:0a:37:99:86:26:75:d6:6b:83:db:24:
96:0b:a7:74:64:fc:53:3c:a9:50:01:1b:8e:69:b4:
50:7d:81:79:fa:82:3a:8c:52:06:d4:a4:1f:48:2b:
ab:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A5:25:CD:0B:3C:58:EE:C0:74:86:83:5F:E8:70:18:37:EF:04:77
X509v3 Authority Key Identifier:
keyid:65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e2:3c:94:57:ec:ff:a2:a3:ff:2c:31:f3:1b:6c:21:03:40:
06:0d:6d:b0:2b:c8:dd:4d:6b:ed:84:c1:79:0c:05:61:c0:a2:
c0:96:d0:2e:c5:f5:05:33:8f:ef:af:37:76:cf:1a:cb:94:cf:
14:df:02:b3:f6:ec:dc:cb:10:c8:eb:6e:47:47:78:d8:d4:03:
b7:0d:57:b3:af:95:7e:cb:9b:73:08:60:ab:c5:81:f1:ef:6f:
88:a6:74:b9:60:d9:6f:3e:d9:49:b3:ce:84:b0:e4:71:f8:5b:
b6:d9:12:32:74:12:0c:30:34:2c:83:8a:9d:0a:7a:ae:d3:47:
38:19:a3:f3:5c:a7:f2:72:76:9f:3a:7c:9b:cd:93:61:a9:b5:
0c:cb:49:49:8e:ce:1c:f9:a2:89:a6:77:ad:3f:b3:dc:66:17:
2b:f5:50:0d:9b:1f:31:6d:75:fe:5e:48:09:04:0b:dd:72:4a:
1a:d7:0a:19:08:4e:3a:72:78:83:b7:13:4a:1f:eb:47:21:9c:
ff:27:2d:b8:6d:6f:69:96:38:b4:c1:28:25:ee:c9:19:5f:38:
e1:53:6e:c8:e1:c4:3d:d7:4a:8e:4f:38:26:72:6a:1c:e5:0b:
d7:6f:1b:aa:18:4d:d6:20:ef:e4:53:5f:59:5d:b1:02:cf:51:
37:f9:3f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:55 2026 by rpki-client