Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
File: Zckgon4-U6Nn-eqW23uve9Zag-o.mft (raw, json)
Hash identifier: /IjDf1L1q2Esv8y+rZ9NK6o1qFG3tOlSTf5nk/HLRoQ=
Subject key identifier: 5D:41:CD:FA:C6:88:C9:39:F3:12:E3:AE:BC:EF:43:A8:99:DF:73:AF
Authority key identifier: 65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA
Certificate issuer: /CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
Certificate serial: 019CE4485DF98F31AAE480452065A73E7002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
Manifest number: 1408
Signing time: Thu 12 Mar 2026 23:01:13 +0000
Manifest this update: Thu 12 Mar 2026 23:01:13 +0000
Manifest next update: Fri 13 Mar 2026 23:01:13 +0000
Files and hashes: 1: Zckgon4-U6Nn-eqW23uve9Zag-o.crl (hash: rzjYOuF3e7v24ghugNrb4KYUbdHLN/uUGN+fpmSvJog=)
2: qvAyroJETTvqQMM_MVkdoGYncxA.roa (hash: nmTwuA7cbFKwFpXIGdTjihs7A1gDgSqO3ta9jqth4L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 23:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:48:5d:f9:8f:31:aa:e4:80:45:20:65:a7:3e:70:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
Validity
Not Before: Mar 12 23:01:13 2026 GMT
Not After : Mar 13 23:01:13 2026 GMT
Subject: CN=5d41cdfac688c939f312e3aebcef43a899df73af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:49:29:ef:c0:f4:88:c3:e5:ec:4e:c7:29:39:
d6:40:f2:57:26:e5:c4:cb:1b:46:8b:5f:30:e6:f8:
76:f6:62:56:59:21:2d:0a:e5:a3:b2:06:44:42:5b:
1b:bd:b7:24:aa:4d:d4:37:48:e6:04:f0:85:ed:7c:
15:a7:52:f9:67:83:ba:c1:da:6b:84:59:29:32:84:
b2:4e:d5:6f:6d:9a:27:9d:8a:85:92:71:ff:37:7f:
be:5d:5b:bc:be:41:bd:ea:52:ab:61:24:7c:3b:79:
93:a6:a8:45:74:55:8c:7f:c2:8b:af:b8:40:b1:fd:
76:43:c2:e9:cd:56:9e:fa:1d:72:15:8b:0b:e9:42:
7b:a0:88:65:77:16:2c:67:a6:a1:03:ce:9d:e2:a5:
f8:e0:2f:5c:af:97:1b:51:9c:22:3f:56:c3:2c:bf:
51:6c:20:46:3e:89:81:5f:12:76:61:ca:f8:0f:90:
bf:c3:d1:77:61:fe:b6:35:a2:ee:6a:e9:b4:e2:b6:
67:c2:ec:76:82:41:92:e2:00:b9:ce:84:9b:a0:de:
a2:c6:16:24:1d:9a:6e:b1:b5:61:a6:07:67:f6:e5:
f8:26:b8:51:22:c5:8f:d8:f1:13:18:3e:b9:da:28:
98:af:27:ce:6a:6a:84:61:91:e4:82:b9:d2:0c:de:
0a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:41:CD:FA:C6:88:C9:39:F3:12:E3:AE:BC:EF:43:A8:99:DF:73:AF
X509v3 Authority Key Identifier:
keyid:65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ec:45:c4:a0:5a:bb:3c:13:b1:19:bd:a2:0a:78:6c:74:ce:
1c:f6:86:6a:14:8c:46:ff:df:88:0a:6a:8b:36:48:95:09:ec:
d2:3b:25:09:aa:ea:93:b1:fe:ff:84:16:1c:b6:5b:f4:04:86:
f8:7f:e1:46:c7:62:e4:f4:5d:37:b6:ca:1f:71:f5:62:2a:3d:
c1:ca:23:af:7c:12:df:93:eb:c3:75:86:30:54:9d:58:6d:8d:
0a:56:e9:24:76:36:0d:18:d7:a2:b4:30:e1:97:17:24:3e:34:
e7:92:80:b5:73:60:08:df:fd:13:86:ac:cb:ec:38:5d:19:fd:
cd:10:76:be:9a:f2:57:d1:5c:81:eb:6d:7d:3e:c3:b0:c2:47:
de:5c:a0:21:06:e6:ba:9f:b5:63:0e:21:6e:55:cc:b6:7d:99:
6d:ab:d7:83:ed:01:7c:be:c6:43:c2:47:ad:2f:bf:fc:1c:e7:
03:2e:f0:a3:09:f4:ff:a0:14:55:af:6d:d9:3f:46:70:3b:d2:
6b:0c:01:34:46:c9:c2:4e:54:a4:e8:01:c0:8a:e4:a8:ad:a4:
17:f0:7a:8f:cf:61:22:a2:86:31:37:b2:8d:16:d3:d7:a6:f9:
7a:6d:a1:83:1a:d4:be:90:f3:8e:a9:b7:26:0e:6e:71:43:c9:
39:3b:42:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:24:59 2026 by rpki-client