Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
File: ZCurhFmUi3l0dkjhPpm50KWCUGo.mft (raw, json)
Hash identifier: SXFNe+2CXKvt+kEHGXOGXHIh9521jblt/Sa7YYDMMmE=
Subject key identifier: F6:42:EE:32:95:F4:F1:B8:DD:BA:C6:6F:5A:91:D8:1B:F2:5B:AA:DE
Authority key identifier: 64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
Certificate issuer: /CN=642bab8459948b79747648e13e99b9d0a582506a
Certificate serial: 019D2B850A2471176F6719A1B4FC0E4F2D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
Manifest number: 0BF2
Signing time: Thu 26 Mar 2026 19:00:32 +0000
Manifest this update: Thu 26 Mar 2026 19:00:32 +0000
Manifest next update: Fri 27 Mar 2026 19:00:32 +0000
Files and hashes: 1: 5tnuY_EervGGDUz3gXIn8wuI43w.roa (hash: uBzgwllDY08L9s6zjrsvT8VveqDxCL0p3GokO0+Zm4I=)
2: ZCurhFmUi3l0dkjhPpm50KWCUGo.crl (hash: n/V9rkGLVbWULtMMKL8uG71YayP677HmAVl9fp4RZKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 19:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:0a:24:71:17:6f:67:19:a1:b4:fc:0e:4f:2d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642bab8459948b79747648e13e99b9d0a582506a
Validity
Not Before: Mar 26 19:00:32 2026 GMT
Not After : Mar 27 19:00:32 2026 GMT
Subject: CN=f642ee3295f4f1b8ddbac66f5a91d81bf25baade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6d:91:69:73:af:df:d4:ae:24:7e:3d:ca:ba:
ee:09:9f:10:72:9e:34:a0:6a:af:cf:83:68:51:6a:
22:07:7a:d4:95:ed:dd:49:38:04:af:5f:c5:41:f8:
5e:df:d4:d4:87:94:f8:60:08:14:db:59:ad:54:56:
df:97:fe:9b:78:47:2a:34:d5:0b:79:c5:d4:f7:7f:
cb:64:15:88:94:2f:ef:26:7c:9f:d0:02:a0:db:53:
07:41:c4:d2:41:17:d0:1d:8f:d7:63:90:20:db:0f:
47:1c:da:16:68:af:29:c0:6f:80:27:a7:9d:7b:f5:
bd:35:38:1a:af:20:f5:3e:b7:df:c3:b4:60:35:82:
d4:9d:bb:bd:88:72:c6:e2:c2:1e:65:79:ab:ab:c8:
54:fc:2d:15:f9:04:e4:54:c4:75:b1:db:61:de:23:
e9:b3:e0:df:a6:5f:24:14:c3:db:57:9b:fb:7c:79:
51:a3:06:9c:fe:08:59:1a:20:26:d1:5e:29:81:7a:
5d:fb:61:4b:6d:9a:cb:f4:bc:48:93:74:f7:39:0b:
a0:2b:63:80:3d:95:7d:09:d4:fa:ac:d7:3b:e8:f5:
fc:36:52:cf:25:6e:45:65:98:09:32:c9:93:f5:80:
b4:87:90:0f:b0:8e:47:b2:7a:58:13:89:91:74:bb:
9d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:42:EE:32:95:F4:F1:B8:DD:BA:C6:6F:5A:91:D8:1B:F2:5B:AA:DE
X509v3 Authority Key Identifier:
keyid:64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:7c:a9:92:05:3e:24:ab:24:96:f6:76:5b:d3:49:4d:32:b2:
e6:15:08:bf:3f:f1:87:37:85:dc:70:bd:d6:ea:35:29:01:41:
a1:7b:e0:23:48:4d:30:4e:e3:7c:ab:40:3c:8f:28:ee:27:57:
82:8b:5b:9c:c1:3c:d7:fe:c9:88:8e:c3:25:f0:8f:f9:2c:7c:
5d:3e:76:f0:33:75:5b:60:5d:88:8e:5d:fe:64:2d:57:77:18:
69:f9:9f:b8:6a:c1:c2:21:92:bc:84:48:e9:47:7f:98:2d:0e:
da:0c:00:64:b3:40:8a:09:a7:d6:21:d2:e9:57:b1:0b:bb:74:
df:75:d3:09:7d:8e:ee:fe:50:01:e6:3f:dc:27:05:29:fc:f1:
83:37:eb:4e:d5:60:c5:bf:1e:8e:f7:a0:ee:2a:b1:2f:00:19:
be:2c:ae:ff:6b:e6:46:2e:17:8e:7a:48:d1:c3:c1:69:97:c2:
2b:1a:c8:29:bd:c7:87:53:9e:1c:0d:29:92:8f:71:bb:e5:1a:
e6:76:d3:95:6d:ce:d7:0a:b4:6f:7e:8d:fe:7d:65:48:59:a1:
5e:c0:cf:d2:71:99:03:e4:74:d5:16:40:06:f8:f7:97:65:1e:
f6:e8:ec:37:c5:d9:69:e6:1b:d4:76:34:fe:81:5c:f2:30:6f:
63:1a:b8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:25:07 2026 by rpki-client