Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
File: ZVrvPO89mvoCfbM1efSh_orZHG8.mft (raw, json)
Hash identifier: k2Q8SKeLAtOVBEvOx0/7kzoZQlAN0ZFbITnyQPngIEY=
Subject key identifier: FB:C0:52:0B:81:56:24:88:0D:30:E6:D4:16:EA:87:05:0A:F9:7D:D7
Authority key identifier: 65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F
Certificate issuer: /CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
Certificate serial: 019D3977FB4D6B9FA2FD1BB4B800814A77AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
Manifest number: 13D9
Signing time: Sun 29 Mar 2026 12:00:57 +0000
Manifest this update: Sun 29 Mar 2026 12:00:57 +0000
Manifest next update: Mon 30 Mar 2026 12:00:57 +0000
Files and hashes: 1: ZVrvPO89mvoCfbM1efSh_orZHG8.crl (hash: CVdibPF1UsTOE0xnol71ZZj13Alwc0l+7I26XyMNOVM=)
2: o7BHBJoJ92UXLEcmbm_Nc1cTWuw.roa (hash: XRczo1xuWahblaw0qNPhWupN00zQLko2wywtz+3Wfrg=)
3: zwEN9uXJIcPFmn7KPc1-IXqrqo8.roa (hash: sU2LF6J4RVpFiTvBB34Yw73TFiEWHXzXbqHGVVrF5jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:fb:4d:6b:9f:a2:fd:1b:b4:b8:00:81:4a:77:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
Validity
Not Before: Mar 29 12:00:57 2026 GMT
Not After : Mar 30 12:00:57 2026 GMT
Subject: CN=fbc0520b815624880d30e6d416ea87050af97dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:98:42:fb:06:78:1a:14:87:bf:71:0e:15:24:
d9:ed:f7:dc:8b:89:ee:36:1c:fa:ca:e5:2f:60:a0:
43:c6:a6:e2:26:6c:ca:88:03:e1:90:fb:f9:00:a4:
83:99:4d:cc:29:ef:8f:3b:c0:99:a6:c2:d9:c0:cc:
d8:6f:f0:8f:d2:a9:ef:44:d7:69:1d:78:11:e4:7a:
9a:8d:25:ba:6e:67:ed:34:3e:23:a6:68:2f:11:32:
90:8e:7c:81:fb:57:55:c3:a5:0f:49:cb:e2:61:74:
ef:5f:41:31:96:6f:04:c3:85:16:fa:4a:7d:e6:08:
86:c9:32:ff:7a:60:6e:24:cc:85:c6:41:36:1a:3b:
dd:80:85:a0:5b:62:d6:ca:b4:86:07:28:b5:07:e7:
12:44:0a:7d:4b:92:7e:e2:bd:ae:d6:59:21:3a:06:
62:67:13:ba:e2:07:4a:ad:96:3e:ab:4c:e0:95:0f:
64:95:32:b6:88:39:bc:d8:b1:4b:63:52:95:7c:63:
ea:cf:c9:48:05:14:ea:79:cf:f8:46:ea:47:6a:b3:
15:6a:5f:14:79:14:c4:bb:4f:73:5d:0e:0d:80:4e:
92:b8:4e:1f:62:69:3d:b1:58:6a:a7:55:df:23:ce:
33:eb:04:ac:7d:ff:ef:b8:d9:67:5a:22:88:39:10:
9d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C0:52:0B:81:56:24:88:0D:30:E6:D4:16:EA:87:05:0A:F9:7D:D7
X509v3 Authority Key Identifier:
keyid:65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:2d:ca:26:c1:b0:6b:3d:90:d1:f1:1d:3e:9e:62:1a:7c:55:
64:00:17:97:2a:85:69:83:18:b3:ab:ff:53:4b:0c:ce:fd:4a:
fb:21:b9:e5:73:a9:ee:a8:a5:ea:e4:0f:f6:15:2a:87:1b:3f:
d1:6a:89:f1:8e:25:d4:5e:54:02:37:42:b7:4d:81:80:e7:2b:
16:49:91:2f:5a:3b:78:7b:eb:78:0f:b8:98:2b:4a:07:d1:af:
3e:cb:8e:f5:39:21:26:6e:2d:41:8c:8a:c8:4d:33:9d:c6:a0:
96:5e:93:e2:4b:53:75:38:e7:45:47:5c:f7:7e:67:0e:6c:0e:
47:8c:fc:e2:50:cd:74:0b:8b:1d:18:bb:38:8c:a6:6a:ac:1f:
96:ed:a7:85:10:f7:b2:1f:86:cf:ce:f8:92:4d:86:8e:05:93:
d4:0e:9b:1c:b6:1a:26:d9:e9:82:8f:86:11:b3:57:be:82:c1:
42:75:1c:20:19:01:6b:cd:74:23:32:24:cc:6f:63:c4:15:3a:
29:1b:99:11:79:83:b6:0f:d1:89:75:5e:1d:ad:e3:57:ad:88:
02:0e:30:5c:55:4e:c9:ab:ac:38:fb:23:5a:bb:ef:b0:04:8c:
4d:31:80:7d:a3:18:c2:ef:fe:9e:ea:43:7e:46:20:a4:be:84:
f0:8d:f0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:23 2026 by rpki-client