Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
File: zBEL75xblqgxx6v5VZJ0S7rx7mc.mft (raw, json)
Hash identifier: 8iogpXc5pFJs3MtYC0iqQyrGcXmBRQbU+Q5J/1wR+Js=
Subject key identifier: DD:48:24:8C:43:56:2E:B3:B7:1C:73:79:01:C8:2D:E0:5C:20:D3:10
Authority key identifier: CC:11:0B:EF:9C:5B:96:A8:31:C7:AB:F9:55:92:74:4B:BA:F1:EE:67
Certificate issuer: /CN=cc110bef9c5b96a831c7abf95592744bbaf1ee67
Certificate serial: 019D389C2ABB1B2821D0B932FE362E345552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 08:00:51 +0000
Manifest this update: Sun 29 Mar 2026 08:00:51 +0000
Manifest next update: Mon 30 Mar 2026 08:00:51 +0000
Files and hashes: 1: NfMAyoJTTlfTXofMhxWF0UP-5NM.roa (hash: qIrqKt/eTqEcw7nBDpqcjINUCE3KnQXTWSeB3+cApcw=)
2: zBEL75xblqgxx6v5VZJ0S7rx7mc.crl (hash: GNCyS9OCSCLtCCPaV0Dnm5fK+ZgZ08lPvoGqRSPSR3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:2a:bb:1b:28:21:d0:b9:32:fe:36:2e:34:55:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc110bef9c5b96a831c7abf95592744bbaf1ee67
Validity
Not Before: Mar 29 08:00:51 2026 GMT
Not After : Mar 30 08:00:51 2026 GMT
Subject: CN=dd48248c43562eb3b71c737901c82de05c20d310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:de:99:dd:75:fc:d2:29:43:dd:44:65:30:
34:de:c2:61:1d:4a:b0:30:ab:5f:69:c1:c5:f8:4f:
d0:b6:06:91:3a:64:95:cc:6e:3e:46:b4:3b:79:bb:
a4:73:f1:b9:a9:81:1e:12:1d:ee:9c:81:92:dc:16:
b9:78:9a:7a:c9:04:04:c8:60:9c:95:58:da:28:38:
c0:6e:62:9a:a0:31:74:47:ec:a4:40:2b:7f:f1:d4:
f7:9b:6b:e9:2c:f2:eb:be:2a:02:3f:4c:65:7f:bc:
3e:87:4c:f3:15:29:bb:40:09:66:9e:25:99:23:87:
14:1d:9c:60:f4:6e:7e:56:2e:fd:26:d5:97:4a:d4:
78:4a:25:39:1d:15:67:d3:ef:32:b6:ee:13:78:75:
d7:bc:5a:2f:96:96:d4:c4:80:14:52:93:b9:8d:37:
f0:34:2f:6d:2d:37:c8:cd:d3:12:ce:2b:5b:fc:cf:
8e:a8:02:56:aa:51:4a:3f:dd:19:f5:48:8e:ba:74:
bd:93:33:5d:25:5b:d2:4f:8c:e3:6e:20:51:e3:fa:
fb:3d:c1:45:e5:f6:9a:93:91:8c:76:e2:6d:7a:a0:
16:4a:d1:86:38:4b:d9:07:7b:d6:5c:ab:ed:ad:b3:
b4:ce:d0:72:df:d8:6f:ca:93:05:d5:15:1e:eb:87:
93:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:48:24:8C:43:56:2E:B3:B7:1C:73:79:01:C8:2D:E0:5C:20:D3:10
X509v3 Authority Key Identifier:
keyid:CC:11:0B:EF:9C:5B:96:A8:31:C7:AB:F9:55:92:74:4B:BA:F1:EE:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:64:43:98:7d:05:67:f1:13:59:8a:f3:8d:d7:a5:d6:5f:06:
f3:ac:66:c0:ad:2f:13:f7:94:1f:7b:73:18:cf:ee:f2:24:55:
7f:53:46:74:fe:1a:14:b2:0f:e2:07:e5:bd:18:ae:74:2d:a8:
af:7b:2c:28:b2:cd:d0:72:0e:38:a8:bd:f3:e2:6a:76:d7:c6:
64:77:5f:23:95:e2:bf:b1:11:ac:19:10:35:e3:9c:e8:e5:9a:
97:f1:38:21:da:02:5e:4d:ec:85:17:73:95:d0:f2:63:d5:01:
63:db:a4:6e:2e:dc:06:3d:23:ce:f3:a7:9b:66:96:ca:b9:ec:
f6:35:56:57:c0:77:19:e1:63:0f:06:09:9a:44:ec:a6:57:b7:
05:ce:10:19:cb:4e:83:f5:10:63:1e:4d:47:27:da:d1:25:a7:
ab:c0:bf:45:8d:23:3a:6b:00:7a:0b:c1:75:59:c1:4f:a2:5a:
42:b5:45:c1:b2:c5:f1:6e:3b:08:e5:70:ac:be:bc:02:95:64:
9e:e1:00:ef:b4:9e:2e:da:80:5c:ba:ec:b7:66:5c:a3:01:d6:
66:dd:f9:fa:2b:01:aa:29:9f:18:8e:f0:95:53:a2:94:ba:91:
3d:93:27:0e:ab:01:b2:4f:ee:26:41:e5:49:ae:ae:a9:50:60:
3c:61:13:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:39 2026 by rpki-client