Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
File: zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft (raw, json)
Hash identifier: By2Bke5A3eDFe2HZrAv/GOD/gvKj92UN0olueJNK/8U=
Subject key identifier: B5:6D:69:19:E8:1C:61:C5:EE:D9:36:BD:73:13:9E:E0:4E:2F:49:56
Authority key identifier: CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6
Certificate issuer: /CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6
Certificate serial: 019D2816BE76DA3526B5B6B431B151245690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
Manifest number: 0383
Signing time: Thu 26 Mar 2026 03:01:12 +0000
Manifest this update: Thu 26 Mar 2026 03:01:12 +0000
Manifest next update: Fri 27 Mar 2026 03:01:12 +0000
Files and hashes: 1: Vxijl7ZHOsV704q8evglEcbFwBs.roa (hash: KARNA+c405NIrwYFEYCF2kgsRfVWL6vXKf3QD7GyrdE=)
2: zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl (hash: xc4eomM4ikRLjV6fvIIsZx7dX/8c790ZTw1rhfF0tMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:be:76:da:35:26:b5:b6:b4:31:b1:51:24:56:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6
Validity
Not Before: Mar 26 03:01:12 2026 GMT
Not After : Mar 27 03:01:12 2026 GMT
Subject: CN=b56d6919e81c61c5eed936bd73139ee04e2f4956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:75:7d:6c:4c:ef:ff:7f:a5:b8:c3:bb:ab:c0:
ac:9d:f6:c7:f4:1e:f8:c0:63:d5:b6:ea:52:84:b2:
bd:08:f6:dc:cf:86:59:95:9d:f3:94:d0:46:70:64:
14:14:a9:3e:29:25:7d:92:ee:f6:7a:d2:54:a6:08:
ed:99:bd:94:1a:da:15:85:80:4b:5e:33:88:01:6e:
30:33:29:7d:a3:12:d4:e6:f5:8b:b0:19:52:31:0f:
be:a6:c5:f6:9c:a7:b6:eb:3b:39:ff:fc:58:09:52:
a9:3c:3a:2e:50:f5:f8:ec:61:c8:d8:c6:c9:1b:ff:
4b:92:cd:75:5e:5f:9d:90:2a:32:ec:76:16:13:c1:
9b:18:a5:37:98:c9:97:ef:1f:40:d7:00:09:5d:09:
e2:5e:04:f1:26:5f:39:ab:03:81:fd:77:4f:01:40:
aa:85:62:20:43:cd:f3:88:a5:d4:93:6b:bf:dd:f8:
9a:96:97:1a:35:26:41:65:49:3a:31:2a:37:64:50:
11:1a:af:c6:4e:a9:72:2f:08:f4:1d:c5:b7:50:65:
ce:d8:79:30:56:63:50:70:c0:bd:99:87:d8:4a:72:
ef:2d:de:a3:76:c2:2a:06:8e:a1:29:da:05:2c:d5:
17:7b:83:bf:73:cb:f5:03:87:1c:90:c8:69:f4:0f:
4b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6D:69:19:E8:1C:61:C5:EE:D9:36:BD:73:13:9E:E0:4E:2F:49:56
X509v3 Authority Key Identifier:
keyid:CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:01:96:04:59:39:de:0a:4e:ce:d3:53:d3:52:f7:d7:3f:fc:
09:5a:8c:81:fb:1a:81:75:9e:aa:e8:a7:f6:56:df:1f:e3:78:
45:ff:49:71:db:2f:34:1c:97:57:57:29:95:1e:62:96:e5:9b:
4d:a4:7a:21:3b:b5:27:3c:e6:77:2f:c8:98:92:78:ee:3c:29:
01:91:e0:73:9f:ca:27:10:19:52:8d:e3:5e:f3:37:ff:52:a0:
ee:7d:f9:c2:c2:aa:12:e1:03:5a:0b:5d:68:9b:63:32:43:2b:
f6:a1:96:d9:78:a4:31:b0:57:1b:bd:cb:d8:8b:7f:5f:e9:fa:
fe:03:7b:8c:3a:0b:97:2f:e2:c6:a1:d8:fc:fa:67:1a:ff:6f:
b1:3e:2f:4c:e2:7f:4e:f3:bd:ca:8a:9d:ff:f3:03:cb:8b:64:
12:0b:df:2b:0b:2d:41:3d:62:c9:ba:5f:c3:8d:4a:b0:4e:90:
47:bd:97:e7:31:82:82:35:6b:df:9c:32:38:6d:67:f5:2a:ca:
a4:5d:09:af:94:62:63:cb:ef:1b:4e:86:b6:a3:45:e4:2b:5d:
fb:f0:02:68:49:74:d4:02:dd:be:14:6a:29:db:1b:4e:eb:f8:
2e:88:c7:c5:1b:31:64:fd:75:cc:58:58:49:0d:18:02:ba:3c:
91:66:01:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:49 2026 by rpki-client