Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
File: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft (raw, json)
Hash identifier: /aquniTGu2+wqMwAGZQztS3Ed1MdmjSfNSHK08qlZEU=
Subject key identifier: C5:25:A7:50:BB:BB:46:A0:67:5D:BD:92:DE:40:5D:E5:55:5D:23:25
Authority key identifier: 64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
Certificate issuer: /CN=64a9856db1ab3b24f09e9cb92743768668301411
Certificate serial: 019D284D83CDDA51288D9C155C5AE2D371F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
Manifest number: 1491
Signing time: Thu 26 Mar 2026 04:01:01 +0000
Manifest this update: Thu 26 Mar 2026 04:01:01 +0000
Manifest next update: Fri 27 Mar 2026 04:01:01 +0000
Files and hashes: 1: CCg7ZzvUdqSwi3wrsZm9eByU8vc.roa (hash: HBpENohXTL9696cy+vQSR5gQjTAWhSwEwHzFSm9x6Tg=)
2: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl (hash: QqqNH5wtSJHbKgkYVfX9OIbV0saKPJ9E5nbM97LeLRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:83:cd:da:51:28:8d:9c:15:5c:5a:e2:d3:71:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a9856db1ab3b24f09e9cb92743768668301411
Validity
Not Before: Mar 26 04:01:01 2026 GMT
Not After : Mar 27 04:01:01 2026 GMT
Subject: CN=c525a750bbbb46a0675dbd92de405de5555d2325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:32:45:c5:50:6d:60:96:9d:58:05:cf:89:f8:
24:21:ea:e5:47:fb:00:94:f0:e2:eb:e2:9a:0c:a2:
bc:ae:a6:a4:d6:29:d9:44:34:2b:50:d0:a7:4e:27:
cc:f3:ba:00:9c:eb:e4:c2:5b:35:f7:97:32:49:4c:
49:18:25:16:cb:5d:77:41:14:38:6c:09:47:9f:3e:
a4:1b:f4:9e:e0:63:b1:40:6c:d9:1a:8e:59:57:bb:
3e:28:ff:54:7a:db:fa:31:8c:b0:d5:09:9f:f4:11:
58:d1:72:ef:40:63:b9:2a:13:05:1f:da:3f:67:f1:
bb:af:77:91:9f:6b:a5:dd:30:33:5a:63:d2:49:91:
55:50:cc:bf:ba:c6:a5:6a:ec:c3:e7:a8:26:5f:75:
bc:a1:54:7c:ef:d4:c3:a2:d3:ad:8e:ac:40:9c:c8:
04:0d:8b:53:9c:7a:84:c5:6f:78:1e:a3:4b:ca:b2:
4a:9b:c0:b2:4a:cd:c8:31:3e:bf:a6:7a:75:7e:ed:
ee:0c:38:6f:38:74:0b:5e:90:e1:34:85:e7:b2:04:
8f:0c:91:e5:64:c4:ad:ae:74:80:fd:72:a8:de:a0:
a9:e3:33:4b:e1:0d:89:d2:b2:4e:52:85:fc:04:06:
32:6d:8b:0f:42:18:76:67:1d:31:a4:bd:d0:3c:4b:
4e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:25:A7:50:BB:BB:46:A0:67:5D:BD:92:DE:40:5D:E5:55:5D:23:25
X509v3 Authority Key Identifier:
keyid:64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d9:07:89:c2:84:1e:f8:c8:16:d9:04:17:4b:fe:11:70:7d:
a1:6b:dc:9d:be:18:ec:09:9c:e0:ee:ec:be:69:90:f0:26:91:
5d:1f:46:aa:2f:4b:55:ab:23:b5:fc:65:69:dc:b9:7f:5f:13:
f3:37:f3:92:ff:b5:57:ac:6a:b4:9c:ca:4e:b0:e9:d2:29:0c:
5e:e3:58:61:07:be:50:2c:1e:6d:c6:1d:2a:36:5a:23:4c:13:
51:6b:c4:4b:88:2a:3f:e8:6a:02:83:2c:b5:60:9a:7f:60:5e:
1a:40:e3:d0:9c:cb:f3:8e:07:7c:be:ee:47:b9:f9:42:32:18:
eb:20:48:63:5b:75:f3:98:2c:93:f7:fe:41:1e:46:5e:46:18:
c5:9b:04:4a:0a:88:06:eb:46:a0:1e:92:1f:e3:8b:4f:e0:90:
77:56:81:bc:1a:32:b1:aa:cd:70:8b:dd:e0:e2:98:71:67:88:
2d:a3:40:39:1a:2e:21:ce:6b:53:bc:47:e3:b6:3a:6f:bc:50:
b2:0c:7b:74:d3:3d:ab:88:93:3c:80:dd:8a:db:61:9e:e3:0d:
cb:07:9d:3b:51:8f:1e:5b:46:1b:cb:d5:a5:76:f0:d9:9d:bd:
eb:f1:38:e7:6b:3a:f4:47:3e:6c:e4:a0:9b:8c:32:16:93:3c:
73:48:d1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:30:05 2026 by rpki-client