Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
File: ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft (raw, json)
Hash identifier: oij6S+qiO6q7w6U8Oy76L8kSx1LuGe8cz2ruAQ1ad+s=
Subject key identifier: F6:04:54:A7:4A:C9:13:10:EB:38:02:73:B3:CA:07:6F:5C:05:70:23
Authority key identifier: 64:FF:41:A2:4F:C4:82:71:B9:92:32:7A:2D:AE:5A:43:3B:DE:D0:50
Certificate issuer: /CN=64ff41a24fc48271b992327a2dae5a433bded050
Certificate serial: 019D28BB8E857E4FD268ADCBCE982667244F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 06:01:13 +0000
Manifest this update: Thu 26 Mar 2026 06:01:13 +0000
Manifest next update: Fri 27 Mar 2026 06:01:13 +0000
Files and hashes: 1: VlcSPU0SSboucncQzfDMPKOtrJQ.roa (hash: u8Y9MDR5ph00NnslMwtKkPqxu4tVzHOEdeTM35TXuqs=)
2: ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl (hash: iKRxHEImvVEXxDfKEjveooKK5omehRFMR97PgBQ/24I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:8e:85:7e:4f:d2:68:ad:cb:ce:98:26:67:24:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ff41a24fc48271b992327a2dae5a433bded050
Validity
Not Before: Mar 26 06:01:13 2026 GMT
Not After : Mar 27 06:01:13 2026 GMT
Subject: CN=f60454a74ac91310eb380273b3ca076f5c057023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b6:24:92:79:ed:f4:ee:07:9f:60:97:41:01:
de:6c:47:f4:80:e2:8b:70:41:98:eb:73:d9:cd:13:
70:b2:e5:3a:bf:7a:91:28:da:98:a6:ea:89:77:c0:
d0:54:dc:7e:f9:93:a5:7b:0c:61:ad:79:36:b1:1b:
ea:da:26:ed:1f:90:b5:63:7d:66:78:64:1f:e1:9f:
2a:e0:4b:46:71:05:d6:24:2f:56:35:df:c8:83:14:
bf:dd:03:af:28:d9:5d:bc:ac:12:f4:3a:dd:a2:92:
c3:86:8d:18:99:e7:ab:67:0a:29:08:4b:79:55:57:
34:89:ea:80:ff:b8:24:c0:5d:e2:3b:a3:c7:c7:b3:
f9:fa:67:73:cd:e6:0e:b0:c1:d8:33:f3:77:15:66:
cf:4f:fc:2b:18:15:5c:88:85:8e:18:0b:61:e4:e4:
9e:c6:22:33:35:fd:3d:80:12:79:44:ca:35:40:ad:
17:3f:25:ae:83:35:97:82:3d:b2:f0:65:59:16:97:
54:89:8d:be:7e:03:0d:f3:aa:cb:c1:d6:68:d3:80:
dc:be:71:be:99:7d:73:07:b2:3b:82:33:a0:08:ee:
18:d0:7c:93:90:3e:d6:0a:a0:c7:27:a7:db:09:ef:
31:50:bd:91:91:8b:47:d7:c9:1e:ef:d3:5f:d3:cf:
41:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:04:54:A7:4A:C9:13:10:EB:38:02:73:B3:CA:07:6F:5C:05:70:23
X509v3 Authority Key Identifier:
keyid:64:FF:41:A2:4F:C4:82:71:B9:92:32:7A:2D:AE:5A:43:3B:DE:D0:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:78:f1:be:24:c1:5c:2e:87:28:f0:19:40:bd:9e:b4:e2:76:
04:fe:d3:21:c4:50:3b:e3:76:f9:2c:65:56:2a:7a:1b:c6:be:
f5:15:ff:7e:b6:00:9b:a6:17:b2:a8:a2:46:ee:68:49:bd:b6:
12:6f:a0:ad:80:67:d0:2e:71:e9:40:38:72:e3:80:5b:6d:7a:
ba:8b:10:22:1f:7a:68:3f:16:3a:bd:45:e0:1e:21:13:94:34:
dc:73:2c:7c:46:6e:22:2f:05:02:d4:61:23:fd:a6:f1:d9:c9:
ca:17:2e:63:b4:89:d1:8d:51:2b:6c:7a:be:cd:fa:b1:c0:42:
6e:9a:d4:c4:37:a7:cb:12:e3:12:31:1e:43:ad:06:c3:19:29:
ce:9a:26:97:a0:ab:8e:7f:32:69:f6:85:9e:76:ba:39:b6:11:
9c:47:04:68:f6:0f:6f:c3:03:99:2a:cd:f2:42:63:4b:ca:07:
c3:20:a1:b3:c0:af:f5:7e:0d:9a:42:9c:cf:c3:7b:c4:88:7b:
15:d8:b6:9d:27:54:f7:69:5a:3a:2b:af:3d:31:dd:2a:d3:6a:
b7:14:0a:53:94:c4:5e:5a:96:b6:f1:31:e5:22:5c:b7:34:73:
3e:85:83:51:43:4f:ab:5e:d6:6c:0a:6c:4d:85:46:8a:64:18:
db:f8:fa:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:42 2026 by rpki-client