Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
File: zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft (raw, json)
Hash identifier: CL7O5XUsW+6ay+3UuEJWnNWsAdnLgkz/6x5QlsxnJcw=
Subject key identifier: 12:B9:28:64:CD:4D:6A:48:B6:B3:31:05:58:FA:C2:A0:63:73:49:7F
Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
Certificate issuer: /CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Certificate serial: 019D3308191DAB959ADB08DA300A4DD34431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
Manifest number: 13DB
Signing time: Sat 28 Mar 2026 06:01:01 +0000
Manifest this update: Sat 28 Mar 2026 06:01:01 +0000
Manifest next update: Sun 29 Mar 2026 06:01:01 +0000
Files and hashes: 1: 1-XBWrk39wjm3jro7FSlqvzI5eVI.roa (hash: Z3LaUQM+InNYUKwF+whvXLIvQsPhPPfm9Yl6XnItz/E=)
2: JJWtpXWJQlgQf2iNmRIQ-olIbmU.roa (hash: nIevIWHZnn6qTnX7U1mI+h/VSclaleHMr0m3T9yMnkk=)
3: i3dZrndLKOdAX4fmBKLNisvgCU4.roa (hash: AOIV+Iu3cvphLn4bbaPQNGarjwL1kFw2bCXNmN94Ucg=)
4: vug7WwjDcsLWq0B1sdDRxAnsvu4.roa (hash: oG3YV+PmdtG6CGV+zbw1qmHUtciH3fi68Ulc4xoYCJM=)
5: zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl (hash: KGI85Chg5V/0ucHixjPM/ZNlk7rLriijcDWcFhsobZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:19:1d:ab:95:9a:db:08:da:30:0a:4d:d3:44:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Validity
Not Before: Mar 28 06:01:01 2026 GMT
Not After : Mar 29 06:01:01 2026 GMT
Subject: CN=12b92864cd4d6a48b6b3310558fac2a06373497f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:e7:f2:34:57:b2:ed:4c:47:32:2a:05:35:
54:af:fc:0e:71:d0:e2:47:f4:05:84:fe:8e:63:a3:
e3:75:2e:2a:65:a5:c2:45:c7:50:01:76:4e:96:1f:
b5:35:9a:4a:0e:0a:9b:9f:7e:4c:23:e6:1e:4f:72:
0c:14:6d:0a:78:b5:bb:a4:c6:2e:ec:d3:10:df:86:
3d:48:66:9e:96:44:ab:38:b3:48:b8:36:ba:e4:6b:
02:a7:fa:cb:8f:a8:4e:dc:3d:4a:a0:ae:5d:b1:60:
cc:0d:21:d2:04:41:84:d7:c0:67:00:41:67:aa:73:
72:d3:fc:2c:9f:37:f0:4d:02:b5:66:44:b4:14:47:
13:d2:0a:4e:95:20:28:d6:eb:03:a0:72:57:4e:31:
1e:a1:8f:7b:91:c7:1d:d2:57:f6:19:d9:a6:db:de:
c2:c7:6b:3c:4f:3c:22:91:b4:40:0a:66:ed:26:b3:
f3:cf:ea:c3:ba:73:64:53:2f:98:52:60:21:8b:43:
c7:7f:f5:18:74:dd:8b:78:d9:06:e7:42:f1:07:a8:
1f:9a:a0:2c:70:4d:b2:74:db:d5:34:d6:6d:66:bf:
33:46:fd:fa:a0:c0:c3:75:34:93:d4:dd:2c:66:c0:
d6:ae:e2:16:8f:a1:4b:54:c3:dd:10:d1:01:e2:31:
09:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B9:28:64:CD:4D:6A:48:B6:B3:31:05:58:FA:C2:A0:63:73:49:7F
X509v3 Authority Key Identifier:
keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:54:ce:ed:9c:3c:44:a8:6b:7c:3a:4e:9d:f3:71:50:6f:ef:
81:11:8a:14:fb:8c:71:d5:ff:3e:d7:a2:6f:22:9d:03:eb:20:
ae:65:d6:67:bb:28:52:cf:5e:2d:b9:31:7b:92:d3:05:44:1d:
d7:a6:f2:46:41:83:8e:ad:62:b4:0e:ee:3c:12:2a:8d:90:8e:
4c:cf:dd:be:f1:dc:73:80:dc:02:65:34:bb:b6:8e:7c:97:91:
df:d2:65:86:4e:fd:2f:49:ca:a5:54:c8:a5:18:90:1d:4f:d0:
a3:06:8e:e2:6d:98:8b:0b:98:16:66:92:bf:45:fc:b4:02:e4:
5e:5e:0c:c9:7b:0a:33:ce:1f:ff:16:52:2b:ff:8c:62:c2:b5:
7f:58:8e:0b:cc:b5:ad:06:13:92:3f:89:d7:de:42:66:cc:57:
be:c9:ba:74:c5:38:ee:d6:e0:90:fd:cf:4e:82:d3:e7:30:77:
d8:8f:24:82:df:cf:52:aa:78:10:eb:86:d0:88:76:7c:78:29:
a0:e0:29:b7:49:02:91:d6:d8:0f:9e:2a:22:71:69:01:94:91:
67:1c:51:6b:10:a9:56:1e:76:4c:d5:fe:d4:af:30:2d:3e:a2:
fe:40:de:66:c6:c8:28:e4:33:e6:91:f3:27:74:4a:e4:61:f7:
4e:19:67:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:13 2026 by rpki-client