Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
File: zxT86bGaXupTLhfYPajB3NHeGMA.mft (raw, json)
Hash identifier: 1+qH78BpWqhCnH4EN8X5/chzloL6GDCBW9XCUR7NFBA=
Subject key identifier: 08:B6:86:4E:3D:08:A9:B1:99:71:5C:9B:0E:8B:D2:E7:18:19:39:F7
Authority key identifier: CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
Certificate issuer: /CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Certificate serial: 019D26CD25FE8EF119E8D4B22A3817CECA90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
Manifest number: 06A8
Signing time: Wed 25 Mar 2026 21:01:11 +0000
Manifest this update: Wed 25 Mar 2026 21:01:11 +0000
Manifest next update: Thu 26 Mar 2026 21:01:11 +0000
Files and hashes: 1: DQ01J-Cq4hUemzI_hsxFb8NofP8.asa (hash: fcPlXypjGU8YaSASqBijwf7gz4frCYBc1/uFvytFDWw=)
2: sQDcvzwfINZL1YKhOjuNrTumwws.roa (hash: 1SADRpnWZPKf4KWSJGPvG1rU1NGMXTSVZgSGEdq16/Q=)
3: zxT86bGaXupTLhfYPajB3NHeGMA.crl (hash: slRNWIcakMwTHPhd5V9258LY3CY7pyVN+y+MoEK9vaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:25:fe:8e:f1:19:e8:d4:b2:2a:38:17:ce:ca:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Validity
Not Before: Mar 25 21:01:11 2026 GMT
Not After : Mar 26 21:01:11 2026 GMT
Subject: CN=08b6864e3d08a9b199715c9b0e8bd2e7181939f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:52:be:f9:eb:f4:8b:4b:64:82:8c:b8:c4:a7:
6f:51:71:ef:46:64:1f:81:e0:db:1d:c0:dc:8b:c5:
83:20:b4:a6:a3:ac:ae:50:0c:fe:1a:00:eb:8d:6c:
97:e4:20:43:42:c9:49:21:9b:46:b3:d8:fc:c5:61:
bc:1c:64:c6:b1:68:d4:fb:6d:00:64:f6:43:d6:60:
f2:2d:86:9a:07:33:af:35:df:e4:c9:1d:7c:d4:03:
94:d2:f3:24:03:e8:bb:94:a6:f4:63:bd:79:e8:db:
ba:5f:ea:ae:95:a0:ee:d5:f2:26:61:69:44:a2:bd:
f3:16:d1:94:55:83:2e:d0:0b:df:1e:9e:92:4f:2f:
7a:83:6a:0c:38:27:9f:82:40:f0:83:16:3d:fb:ec:
f4:1d:17:3e:c0:cd:ea:6f:63:f5:3f:27:f3:18:c7:
9d:e9:e3:d7:fd:9c:3d:1e:4f:3a:9b:c0:cc:11:91:
9b:91:17:bd:48:91:74:c9:cb:2b:a4:74:0c:b1:be:
19:ad:bb:e1:3d:53:33:22:eb:bd:78:83:67:26:04:
51:eb:76:4a:86:ed:b8:f5:f2:17:c0:e4:d1:95:e2:
79:2f:4a:e8:9b:85:11:5b:59:93:1e:c5:56:56:e3:
e2:41:55:53:2a:34:88:3d:d3:94:57:6c:59:6f:4d:
46:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B6:86:4E:3D:08:A9:B1:99:71:5C:9B:0E:8B:D2:E7:18:19:39:F7
X509v3 Authority Key Identifier:
keyid:CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:6d:95:94:a0:88:12:89:60:fe:56:4a:93:c2:73:e4:5f:4b:
c6:57:3c:aa:59:d2:e1:37:a7:73:b1:a3:f0:eb:5e:f5:9d:b1:
8d:45:72:92:e1:e5:55:33:06:2a:bf:dc:16:1a:4c:1a:e2:3e:
09:db:1e:c6:19:af:3d:b2:5b:36:ae:69:10:54:0f:05:fe:22:
f9:02:7b:50:2c:4d:39:27:af:e3:02:a1:41:bc:cf:15:81:a5:
ea:51:88:2b:5f:19:94:8e:02:6e:1c:39:4d:d4:92:8e:9d:32:
44:ac:13:e0:56:8b:f7:6e:5d:f4:24:81:a3:eb:25:d6:ec:da:
19:6e:15:c3:ed:80:8f:3f:22:e9:4e:2c:f3:79:db:63:5c:a5:
85:8d:50:2c:6a:e4:2d:10:75:19:61:61:0a:07:3b:dd:06:e1:
0e:2a:35:38:00:5e:2c:4e:a2:2e:04:cd:c4:f2:95:b8:7b:d3:
e3:1e:36:72:7c:08:6d:49:b5:a3:e5:2a:8f:fe:84:08:8e:cb:
85:a3:90:26:31:4d:c5:4c:ec:fc:f2:ba:ee:95:b1:b9:e6:ca:
ea:6e:8c:2b:ee:77:6e:70:3d:13:b4:cb:03:cc:d6:46:d4:b6:
7d:3a:b5:15:25:43:0c:66:2e:63:cc:97:2c:d7:0e:0c:fc:bf:
71:e4:03:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:15:18 2026 by rpki-client