Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
File: ZRUuTmwkXAP-zfpIv5E5bL7-168.mft (raw, json)
Hash identifier: 9ZqT4bPfs88AhL3Vye0qmY7GhgcMbG1/7U+fCYIxwoE=
Subject key identifier: 68:3D:AE:0E:76:26:77:01:0F:E9:4C:8C:40:E5:77:43:B4:DF:52:17
Authority key identifier: 65:15:2E:4E:6C:24:5C:03:FE:CD:FA:48:BF:91:39:6C:BE:FE:D7:AF
Certificate issuer: /CN=65152e4e6c245c03fecdfa48bf91396cbefed7af
Certificate serial: 019CC786E3531EAB3D244ACD4E1686EA1417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
Manifest number: 1F
Signing time: Sat 07 Mar 2026 09:00:31 +0000
Manifest this update: Sat 07 Mar 2026 09:00:31 +0000
Manifest next update: Sun 08 Mar 2026 09:00:31 +0000
Files and hashes: 1: ZRUuTmwkXAP-zfpIv5E5bL7-168.crl (hash: 8o53lXBKMA2MFnT4A0O4rX9xMiOASlGeQ7NPaP1htb4=)
2: zNqty2MMMtiYifN34tRpIOVX9sQ.roa (hash: yLB5f8Ek8IZkDyn4YFbsPyCUS3Yue+tSUM0kBMSr3B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:86:e3:53:1e:ab:3d:24:4a:cd:4e:16:86:ea:14:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65152e4e6c245c03fecdfa48bf91396cbefed7af
Validity
Not Before: Mar 7 09:00:31 2026 GMT
Not After : Mar 8 09:00:31 2026 GMT
Subject: CN=683dae0e762677010fe94c8c40e57743b4df5217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fb:5f:c8:b2:d2:fe:18:fc:6e:b5:0c:1e:3e:
60:61:0a:d1:e3:f4:21:55:88:01:ff:6f:ff:98:aa:
43:c3:2f:7b:f7:5d:f2:a4:8d:9d:55:4f:77:a8:7e:
ad:3f:93:5c:3d:72:1b:6a:70:04:ad:c0:31:61:00:
f0:93:f4:ce:f3:ce:af:63:10:4e:11:fa:fe:51:d4:
af:4f:14:50:4a:5c:a9:5c:be:87:3f:8c:b6:de:e6:
73:8d:00:ba:b9:77:7d:25:e3:a4:b9:2d:21:a9:55:
e5:ce:50:79:9f:66:07:45:f6:a2:f9:ef:7d:11:78:
fb:bb:34:09:ea:03:0e:27:46:68:4d:da:52:86:31:
ea:fb:b7:e1:82:40:96:30:1c:5f:2a:12:4a:96:1c:
c9:23:54:bc:50:47:a8:e2:43:b0:a5:3e:20:c0:2f:
43:df:16:48:3b:a5:d9:bf:45:0e:d6:56:61:e3:06:
8c:ff:93:08:42:a6:ae:1b:ff:fe:88:cb:a1:23:69:
35:d2:5c:77:1e:1e:13:ac:1f:59:ae:c9:e7:79:06:
47:79:4e:16:05:35:57:8e:63:d1:7f:dc:9b:36:9b:
5d:cf:d7:a7:ea:ae:c1:c4:52:57:1d:a2:3c:49:c0:
eb:5f:98:c4:8f:f4:2a:72:22:4e:8f:79:8a:38:e1:
de:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3D:AE:0E:76:26:77:01:0F:E9:4C:8C:40:E5:77:43:B4:DF:52:17
X509v3 Authority Key Identifier:
keyid:65:15:2E:4E:6C:24:5C:03:FE:CD:FA:48:BF:91:39:6C:BE:FE:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7f:a4:1a:69:4d:03:d7:22:e0:7c:d7:c4:6e:c9:39:9e:c7:
d2:17:f9:91:93:ac:ad:de:08:73:56:56:d9:52:14:e9:df:59:
69:95:ac:36:95:75:8d:da:2d:10:85:89:d6:71:4d:30:12:21:
58:5b:2f:c3:cc:ac:29:d9:3d:6a:55:d3:6a:50:66:4e:38:46:
28:6a:9d:14:cd:14:c6:4f:fc:97:39:2f:5e:69:dc:04:b5:7c:
ff:52:e7:2b:ba:1f:c4:77:ee:c3:d9:83:9f:19:0e:f0:6c:64:
69:d7:cf:0c:d6:c7:97:b4:a2:a4:55:ad:b5:de:a3:37:9b:bd:
34:71:75:c2:fb:26:a6:2e:87:c4:0f:79:a7:49:82:fb:15:5f:
56:a5:07:f4:bf:8b:9a:f1:bf:75:08:30:d7:8b:13:bd:11:c2:
f4:6f:40:b8:8a:f3:f0:75:3d:87:f8:f5:78:4c:21:29:86:08:
18:04:a8:ab:10:f2:eb:16:13:91:75:59:a8:27:0d:fd:46:b1:
7c:37:6f:ae:10:5b:30:da:55:d8:b8:e2:37:de:04:a2:68:77:
35:26:b1:66:f4:e8:ee:6e:15:fa:4c:7a:22:17:18:fb:4d:a7:
d1:29:e7:24:8f:c9:ac:67:65:02:e0:8c:5a:14:0b:85:31:33:
d2:04:ac:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 18:58:11 2026 by rpki-client