Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft
File: ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft (raw, json)
Hash identifier: ufFz+glpWM0jxLMIWJIhkryP6ujyi9oAnHoz7IGhBI0=
Subject key identifier: F4:E8:97:06:E5:E5:B8:E5:08:F8:20:CC:83:F6:21:C6:9E:FB:D7:7F
Authority key identifier: 66:C3:07:0A:74:5B:2C:16:7E:10:1A:16:1D:26:48:A1:BC:97:79:91
Certificate issuer: /CN=66c3070a745b2c167e101a161d2648a1bc977991
Certificate serial: 019D2772D98E93B85157D7B58759C8042F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft
Manifest number: 01DC
Signing time: Thu 26 Mar 2026 00:02:11 +0000
Manifest this update: Thu 26 Mar 2026 00:02:11 +0000
Manifest next update: Fri 27 Mar 2026 00:02:11 +0000
Files and hashes: 1: EGLmRqYL0UveAe7GdroCAjp3RnU.roa (hash: K+cn6n/T0n+kIunjtfeLS+AwVWl7DCEWXgHG3rTv6jw=)
2: ZsMHCnRbLBZ-EBoWHSZIobyXeZE.crl (hash: /5gMHJwUcsdfn3dbYEtpy+puTC31jM4JouCFCxrTcyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:d9:8e:93:b8:51:57:d7:b5:87:59:c8:04:2f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66c3070a745b2c167e101a161d2648a1bc977991
Validity
Not Before: Mar 26 00:02:11 2026 GMT
Not After : Mar 27 00:02:11 2026 GMT
Subject: CN=f4e89706e5e5b8e508f820cc83f621c69efbd77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:64:0c:f8:8b:80:17:a0:84:bb:12:a1:f8:2a:
ed:8d:f5:76:08:d0:1e:16:1d:6b:f3:2e:25:96:d1:
b2:bc:d2:43:fe:6d:ef:b2:12:45:5a:3f:35:6b:33:
07:0a:e5:87:3a:72:9f:60:57:0b:8a:5d:6a:61:2f:
1b:60:7c:94:02:19:29:ff:cb:ee:33:a7:4c:3e:d6:
05:21:7a:85:f3:94:2f:22:bb:32:2f:92:73:98:9a:
a1:e6:8d:6c:8f:f5:b4:00:b9:5c:6e:e4:b7:b7:b6:
0e:51:51:14:e3:0f:ae:eb:5e:2e:cc:ae:bc:02:2e:
1f:f5:df:d6:81:fa:52:9a:ec:be:84:e0:22:7d:be:
aa:dd:c0:e5:2b:e1:e3:58:45:a4:f8:cc:47:5c:cc:
2f:3c:b3:ff:94:0b:d3:b0:05:22:ca:3f:06:ce:4d:
66:2c:74:37:32:f7:97:5a:92:93:be:fd:47:c9:a5:
a9:d4:a1:49:c0:b2:d5:38:17:2b:fb:06:95:4c:2b:
a1:a6:fb:39:f3:91:17:86:95:ed:ba:ea:7d:7d:9b:
2e:dc:0d:3e:c8:43:d1:0a:2f:b5:58:f0:f9:c8:81:
7b:81:da:2f:4e:b3:04:a9:4d:60:86:dd:20:df:23:
a0:bf:b0:65:e9:cf:1a:e0:d1:e4:eb:e8:8b:4d:bc:
7c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E8:97:06:E5:E5:B8:E5:08:F8:20:CC:83:F6:21:C6:9E:FB:D7:7F
X509v3 Authority Key Identifier:
keyid:66:C3:07:0A:74:5B:2C:16:7E:10:1A:16:1D:26:48:A1:BC:97:79:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:23:89:f1:d6:d7:08:2b:c3:8d:85:c6:1f:75:5e:3b:f2:be:
fa:7a:d5:a8:bf:13:38:ea:4f:1d:8a:ac:3e:7c:cb:bd:88:67:
aa:f3:8b:f2:55:36:20:b3:05:22:19:8a:43:0d:c5:c3:40:43:
5e:ee:20:a0:08:7a:36:54:e2:20:1f:23:58:b2:cf:42:2e:9d:
2a:9e:1d:ae:5a:81:a7:2f:02:08:f0:5b:dc:31:d9:78:e5:d6:
9b:a1:c6:87:0a:a0:cc:f5:86:24:7e:1d:97:b8:d8:c4:7a:03:
dd:8a:2d:87:5f:78:17:1c:17:46:3b:56:c9:3c:c0:45:6d:c7:
f7:06:d4:28:ef:31:81:12:d5:4e:2d:5f:12:e0:fd:e3:c0:9e:
bd:32:3b:f3:c8:fe:6a:a9:bb:fb:3b:76:59:ce:27:7d:f9:16:
a2:1c:17:b7:b3:a8:3c:f0:fa:25:ed:73:a6:62:07:10:44:63:
0e:81:c7:df:3f:72:c6:4c:a5:0d:6c:3c:1e:ea:76:b9:ff:fb:
f8:c6:80:72:89:2a:96:19:b2:cc:5f:b4:02:4d:63:1f:60:cf:
60:04:68:0e:05:44:ff:5c:96:4e:c3:a2:42:d1:82:13:81:ea:
dd:93:49:99:15:ac:90:3e:b0:7c:50:e0:c1:81:8d:6a:bc:b4:
50:e4:ec:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:19 2026 by rpki-client