Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
File: ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft (raw, json)
Hash identifier: ejWbEF2ebptBHGE44m7kTsPxZZuYaMRHzD2vrXIAj9M=
Subject key identifier: C2:BF:C4:A9:65:9A:D3:E8:6B:C8:56:4C:E4:94:76:96:76:48:D5:FD
Authority key identifier: 66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0
Certificate issuer: /CN=66626623084e6cf116674a3fd0a9951cac0dedc0
Certificate serial: 019D25F19426E5E6F3F389D891DE8980F963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
Manifest number: 1666
Signing time: Wed 25 Mar 2026 17:01:22 +0000
Manifest this update: Wed 25 Mar 2026 17:01:22 +0000
Manifest next update: Thu 26 Mar 2026 17:01:22 +0000
Files and hashes: 1: ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl (hash: vrB9Ise4Xz8mC8I9YGIwhTqC9+HB0XDX/mf+yWFBKyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:94:26:e5:e6:f3:f3:89:d8:91:de:89:80:f9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66626623084e6cf116674a3fd0a9951cac0dedc0
Validity
Not Before: Mar 25 17:01:22 2026 GMT
Not After : Mar 26 17:01:22 2026 GMT
Subject: CN=c2bfc4a9659ad3e86bc8564ce49476967648d5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:db:7c:94:bc:b3:c2:32:a9:e5:dc:73:75:d2:
1a:28:a4:af:a9:b8:de:2b:52:a9:c0:e3:9f:09:59:
14:04:74:76:e4:e0:e7:1a:d3:50:99:b3:d8:ad:4b:
bf:e2:c4:72:7d:24:57:fd:53:05:a4:cc:7e:5c:a8:
24:b7:02:84:b5:4e:b3:a4:ff:44:41:17:6b:ab:61:
de:27:61:4f:55:cc:42:1d:2e:f8:4e:71:ea:c9:c2:
d9:f6:02:88:0d:a5:78:c1:80:57:17:63:14:36:6e:
22:8d:50:8a:7b:d5:e6:a2:29:7d:aa:a0:4b:a8:fd:
7d:41:98:d3:05:27:53:aa:e8:dc:d4:b0:65:1f:4c:
96:5a:ef:27:60:f9:da:8b:c4:e2:5d:27:4d:75:b2:
07:1b:b2:36:20:54:4f:d1:c1:1e:cd:3c:c0:6d:62:
31:05:88:f2:69:32:c9:37:48:3b:b5:ce:90:4a:d5:
c2:34:c4:fc:14:6e:22:a5:48:7b:d8:77:a5:63:ea:
61:37:5b:f7:97:a2:50:3e:0e:ba:0a:7a:31:db:ca:
20:67:87:1c:04:2a:af:2b:6f:b7:c0:09:3d:02:46:
a0:59:cc:d6:75:9f:1b:38:0a:05:a0:7c:13:5d:12:
8b:e3:72:6f:d0:6d:c8:24:34:23:7d:7a:6b:10:8a:
e4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BF:C4:A9:65:9A:D3:E8:6B:C8:56:4C:E4:94:76:96:76:48:D5:FD
X509v3 Authority Key Identifier:
keyid:66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a6:10:b5:f2:b8:2d:c6:7c:58:b5:a8:c4:91:dd:2c:57:46:
f8:6b:fe:4a:7e:cf:73:d5:51:bd:a5:6d:91:34:a4:04:52:2a:
2d:3a:94:3e:04:56:d0:d8:24:92:f1:db:10:28:8d:e8:2d:3a:
85:dc:37:9a:fc:39:49:71:5d:22:31:96:0c:76:49:a6:5f:6c:
4f:ff:52:73:34:42:26:e2:a0:8d:27:5b:ac:73:bb:42:bc:41:
14:92:c8:aa:2d:40:d7:9b:c0:b7:56:19:44:c9:f3:51:dd:62:
29:be:fb:d4:8c:18:33:38:92:15:b6:73:c8:40:ff:aa:53:4c:
5b:ec:14:c6:9f:9f:b5:54:32:d9:21:b8:df:13:58:ba:26:d3:
52:66:ac:16:48:7b:43:76:75:7e:42:08:a7:fc:f5:56:53:e4:
58:4a:5f:2f:7a:94:6a:c3:ce:b1:0d:b9:ef:a5:8c:86:5f:4f:
4b:b4:28:31:7b:d8:03:c6:aa:fb:f3:36:0c:43:b0:dd:bb:95:
6b:92:61:21:38:18:b5:72:13:c6:36:0d:db:67:78:e7:da:32:
50:5e:37:86:28:23:39:fa:fb:9d:63:f3:4b:ea:f6:2a:ae:08:
fc:ef:1f:45:19:a1:92:20:89:a0:4e:ed:cf:ba:83:e1:5e:b7:
ab:60:d1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:41:35 2026 by rpki-client