Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
File: zfy95jLRBvqtmMLBiVqHfKYBUho.mft (raw, json)
Hash identifier: 3IKHPhq5E3TiiZ/R8eHvwrM4RO/Euprj1z4S2OzI5T8=
Subject key identifier: CD:7C:A6:FF:B9:04:49:BF:EC:33:F4:DA:2A:E5:08:CD:12:35:60:5C
Authority key identifier: CD:FC:BD:E6:32:D1:06:FA:AD:98:C2:C1:89:5A:87:7C:A6:01:52:1A
Certificate issuer: /CN=cdfcbde632d106faad98c2c1895a877ca601521a
Certificate serial: 019D0AB13A3943F24FCA2918FDA351012A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
Manifest number: 180B
Signing time: Fri 20 Mar 2026 10:01:20 +0000
Manifest this update: Fri 20 Mar 2026 10:01:20 +0000
Manifest next update: Sat 21 Mar 2026 10:01:20 +0000
Files and hashes: 1: KGwwtGzR65TxQF-2vzhHlmHOTo8.roa (hash: o/WFBpe3yFcgt0UEYgNY9hSYO7UsE0F6pNNZUvTlLxk=)
2: zfy95jLRBvqtmMLBiVqHfKYBUho.crl (hash: Zj/o7wqs9PUyJj2ehUkSJLWImt55ro0pnjpoWNViVF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:b1:3a:39:43:f2:4f:ca:29:18:fd:a3:51:01:2a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdfcbde632d106faad98c2c1895a877ca601521a
Validity
Not Before: Mar 20 10:01:20 2026 GMT
Not After : Mar 21 10:01:20 2026 GMT
Subject: CN=cd7ca6ffb90449bfec33f4da2ae508cd1235605c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6e:26:dc:99:34:e8:b1:cb:ab:28:9c:20:9b:
36:1e:af:9f:db:15:28:21:bf:85:6f:a3:25:3f:44:
2a:70:55:fd:d8:8d:0b:42:f4:0c:da:76:64:d5:f2:
47:f2:f4:45:d7:cb:5f:eb:a5:ed:6c:09:a0:0b:85:
18:3b:0e:37:75:07:f4:36:fc:b3:96:79:4f:3b:ae:
5a:6b:f9:13:39:5d:07:95:17:a1:0f:e2:42:de:4a:
94:bb:fe:38:62:c8:70:5f:76:41:4f:66:f9:de:d5:
e9:bf:db:23:3c:39:c9:f9:f1:12:3c:98:f6:de:44:
96:3a:73:d5:c6:8a:a2:11:26:02:42:74:81:3d:25:
44:d9:91:83:a6:e3:9d:df:ba:ad:41:13:63:c7:38:
ec:9f:30:0d:ed:3e:18:dc:19:d9:57:ae:96:84:97:
34:43:fe:69:14:8d:79:c0:66:6c:48:30:03:c7:42:
e4:f6:30:1d:d0:af:f5:7f:1d:93:81:cb:1d:1e:dc:
ff:e7:7c:75:b8:be:a0:9e:94:89:32:1b:7d:2b:89:
9a:ef:8d:c1:af:e0:22:f5:15:62:6d:12:5f:b3:16:
ad:fb:c0:ce:19:7e:a4:fc:72:71:3d:84:32:6f:07:
8d:b6:e4:3b:99:18:c9:e4:2d:e1:a1:fc:0b:f7:2a:
8f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7C:A6:FF:B9:04:49:BF:EC:33:F4:DA:2A:E5:08:CD:12:35:60:5C
X509v3 Authority Key Identifier:
keyid:CD:FC:BD:E6:32:D1:06:FA:AD:98:C2:C1:89:5A:87:7C:A6:01:52:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:cb:0e:20:da:dd:7d:1e:0a:10:1e:96:14:79:d4:8d:6f:ed:
c3:a4:6a:48:8c:a1:67:02:bd:71:ff:ba:94:ec:f6:c2:9e:e6:
5a:bd:49:b0:1d:f6:e3:97:e6:9d:b5:9a:73:14:a1:89:6c:f4:
a6:3d:1a:b7:24:83:c8:77:dd:60:eb:7e:7a:b0:19:c1:a3:3e:
29:ea:4b:24:43:46:5a:52:54:ff:ca:a4:a9:7b:b0:88:95:9e:
3b:f7:b5:a5:5f:66:f0:87:cd:b0:c1:02:4b:d0:bc:80:8e:cb:
f4:bd:fc:01:d9:1b:da:31:f3:5c:4f:3c:41:85:f9:8d:82:70:
e5:ca:bf:76:d7:09:71:30:a4:40:f4:91:a0:71:d1:e2:65:8b:
2c:30:f9:15:03:6c:77:df:f5:ea:f7:44:0b:dc:7d:e8:3d:cd:
23:e7:55:4d:d2:15:fb:a4:09:80:31:37:63:a9:6a:6d:e1:6e:
4c:d0:07:29:d4:97:bd:0c:bb:16:c4:e0:11:c8:52:47:40:40:
5d:6a:c9:db:d9:c6:49:af:fa:ed:44:e5:dc:29:b7:9d:48:2f:
37:f7:56:91:a5:a9:3a:ac:c0:06:fa:9d:50:10:3f:eb:35:10:
06:57:19:b9:b3:dd:6d:db:3c:39:d2:bd:d8:60:66:38:86:29:
7e:d8:a2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 13:56:09 2026 by rpki-client