Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
File: ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft (raw, json)
Hash identifier: J75lMvjuVYMnDt8rklZ4KV22Xyb4g1ANxa3p/PVg75E=
Subject key identifier: CB:25:27:1C:65:A4:29:32:FE:AE:D4:BB:AE:90:36:A9:5D:99:5F:BA
Authority key identifier: 66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93
Certificate issuer: /CN=66306e3acf3eb903cc73973fb62860b663516c93
Certificate serial: 019D273B1CECD0BC770EA52959F48219BE15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
Manifest number: 0178
Signing time: Wed 25 Mar 2026 23:01:18 +0000
Manifest this update: Wed 25 Mar 2026 23:01:18 +0000
Manifest next update: Thu 26 Mar 2026 23:01:18 +0000
Files and hashes: 1: 8ndDa5rRng5A6n53ieZF5n0zI7s.roa (hash: KtGt0NdlDvyNnvEnoJfeg2xWBfVSAuPvOu/PVmj7YGM=)
2: LYW2fplHFaYQiPqvAdr_sKehM90.roa (hash: 8MK6zJkVz5x6OyzTFZpsWSxtzB4SrLx4cMMtXCGfh10=)
3: ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl (hash: qpo8iN1Ak7SHMHC/FJyCKMDJtV3x8QQdTJCoxMDQ3qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:1c:ec:d0:bc:77:0e:a5:29:59:f4:82:19:be:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66306e3acf3eb903cc73973fb62860b663516c93
Validity
Not Before: Mar 25 23:01:18 2026 GMT
Not After : Mar 26 23:01:18 2026 GMT
Subject: CN=cb25271c65a42932feaed4bbae9036a95d995fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c6:3a:62:be:89:05:92:0a:c8:00:4d:1a:cd:
11:81:13:51:a4:61:5f:5d:6f:2c:c1:26:1f:6a:1b:
b3:bf:e4:87:c2:51:ac:df:a2:34:44:79:60:62:25:
9f:9a:8e:83:ca:c2:11:c6:e3:f6:c1:8c:2b:db:33:
12:b3:c7:01:ea:20:09:7c:32:31:61:4a:72:87:04:
16:f7:61:0e:98:c4:b0:6f:95:9a:8d:b1:d9:b6:10:
78:04:97:f7:dd:38:da:41:ac:f9:83:54:51:57:2b:
7c:71:92:b9:31:ea:e5:af:34:1e:65:69:db:f5:c5:
77:95:a7:11:f2:05:ab:24:b3:77:3d:73:a8:46:12:
72:5f:a7:c5:fa:e0:22:86:5a:fa:45:bd:a4:90:c0:
f3:66:1a:19:e4:3c:5c:92:4b:ff:5b:05:c9:98:dc:
8e:96:62:bc:b2:87:09:a5:44:f2:22:53:69:bf:32:
59:28:f8:aa:09:f6:d7:4c:17:5b:28:30:97:ad:56:
ed:a5:d8:f0:57:df:f3:9f:36:68:95:8b:d3:3f:d6:
21:bb:01:7d:e3:92:e6:5e:2c:ac:81:d6:b9:62:12:
f5:af:60:af:1c:27:83:c4:7d:33:4f:d4:a3:b1:d4:
bb:ce:b4:9e:2c:a7:8c:f0:f6:6c:24:8a:6f:79:5b:
cb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:25:27:1C:65:A4:29:32:FE:AE:D4:BB:AE:90:36:A9:5D:99:5F:BA
X509v3 Authority Key Identifier:
keyid:66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:74:29:ce:9d:31:aa:92:d8:d5:3b:fd:b5:4b:5f:46:7e:cb:
82:a2:a2:9d:47:7c:46:35:af:c6:e4:d4:55:7d:b0:77:46:4e:
92:63:48:7e:f5:16:0e:c0:9b:38:d9:5f:74:ff:df:04:66:38:
fb:8d:24:94:76:cf:5d:17:f7:7f:c4:f8:1d:73:63:5c:a4:13:
ba:73:08:a8:64:98:64:b7:1f:10:51:2a:91:34:6a:18:a7:ec:
04:fa:74:a7:b6:f6:40:d3:a7:be:e9:78:32:2e:ec:81:13:f5:
ed:e3:15:84:ec:2b:8a:8f:e8:16:0a:bb:53:92:2c:98:0d:ce:
38:3b:81:3d:40:3a:f5:68:77:48:0b:57:18:2d:03:1e:f5:56:
31:9c:ba:53:ac:bb:76:b6:22:c4:c3:fa:64:0d:e5:f3:68:51:
99:69:79:68:c9:c1:57:25:3d:a5:5a:32:f8:e6:9c:bf:2f:45:
2b:aa:5b:66:df:c9:12:aa:5a:c9:65:10:69:2f:76:a8:28:77:
9a:21:b7:8c:ae:41:2e:9f:2f:e2:0c:ba:59:dd:ae:ae:77:db:
20:dd:8f:87:a4:e8:08:fc:c4:76:f4:74:8b:99:79:7a:f9:bd:
a2:a3:d4:5a:95:ad:0d:c6:18:e8:87:b3:05:49:ad:67:eb:b5:
ad:a5:f9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:26 2026 by rpki-client