Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
File: Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft (raw, json)
Hash identifier: Tnl6X8iHiDG+AIXL8PCSeRdcobknttFnmb0hrqIRJt4=
Subject key identifier: 28:BE:65:29:E8:16:F6:38:FF:71:93:9B:41:72:34:7A:05:E9:D0:F4
Authority key identifier: 66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30
Certificate issuer: /CN=66ec789976d3b584016cac19f34bbede966cd230
Certificate serial: 019D3A1CD9AFEEDDAECACA5A48D6A3A9A96F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 15:01:02 +0000
Manifest this update: Sun 29 Mar 2026 15:01:02 +0000
Manifest next update: Mon 30 Mar 2026 15:01:02 +0000
Files and hashes: 1: 1-bvTtCyxjhCFLcxNhXPNFp9zd4.roa (hash: UqrazJGk86AULwhwwPwABEyPtaaQCEyqIBdZnP4+jJA=)
2: Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl (hash: 0Hf4lTvbuBoGVsSwnLIk7BToWLGZ2Ayrd7yMJ9wsrh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:d9:af:ee:dd:ae:ca:ca:5a:48:d6:a3:a9:a9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ec789976d3b584016cac19f34bbede966cd230
Validity
Not Before: Mar 29 15:01:02 2026 GMT
Not After : Mar 30 15:01:02 2026 GMT
Subject: CN=28be6529e816f638ff71939b4172347a05e9d0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a4:bc:13:23:c4:49:b6:8a:ef:f9:1e:0c:fb:
4a:71:fd:14:c2:9a:7d:0f:46:40:aa:c1:41:86:ea:
d0:31:03:08:18:43:1b:61:13:e0:51:6c:7f:aa:8c:
60:da:28:b6:8c:81:ba:74:ca:99:b5:02:b5:02:36:
d3:0a:ad:5d:a6:b4:21:94:23:80:6e:9e:b6:a5:b1:
9a:55:45:ca:72:c1:c1:4b:60:e5:e9:47:74:81:7d:
6c:a9:77:f9:e1:ae:f9:88:17:aa:90:1e:2c:48:53:
9c:49:dc:44:7f:51:cb:63:b8:c7:26:5f:a6:61:87:
6f:d1:84:75:3c:1a:53:4d:d7:13:fc:69:6c:5a:7d:
74:88:8e:0b:31:e2:74:59:c8:84:d4:2b:39:69:3f:
ee:24:db:1e:ff:5c:3d:b6:4e:19:16:77:b3:e6:96:
52:63:95:8a:d4:92:ca:fd:f2:79:ef:d2:be:1b:c7:
8b:ee:e9:79:0e:96:ac:25:a1:5d:bd:17:ff:de:df:
d8:3b:23:a1:18:84:ff:ba:bc:c6:fc:95:10:e0:4b:
98:9b:f3:d6:f9:8c:07:8a:34:1e:5e:b2:2e:c3:15:
53:ce:0f:ff:c9:f7:26:0d:1c:89:b2:f0:e6:22:ac:
27:3e:6a:29:1f:b3:9e:8a:0b:d5:b0:8b:87:d0:5a:
48:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BE:65:29:E8:16:F6:38:FF:71:93:9B:41:72:34:7A:05:E9:D0:F4
X509v3 Authority Key Identifier:
keyid:66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:01:25:b0:4e:91:48:17:98:10:5d:ac:d8:ff:75:d0:65:ba:
a8:8e:53:63:b3:f8:ac:94:f3:46:75:c0:b9:cf:ab:78:f4:17:
72:75:56:28:15:78:54:d9:0c:1e:1e:e5:91:58:b9:7f:06:26:
a0:44:70:fc:dc:98:78:e4:aa:48:4c:e0:26:32:cf:0c:5b:27:
41:63:bf:af:55:22:2a:ea:fe:c0:c3:02:ec:c9:03:ba:86:d7:
fc:5e:34:13:0c:2d:cf:87:46:be:22:ad:77:d7:96:41:1b:f5:
8d:ee:9b:12:68:ba:e6:3a:a5:e1:2f:ad:25:f6:1a:1d:5a:c5:
65:4b:9b:23:24:3a:6a:0e:14:67:2c:86:e1:dc:ed:95:57:8f:
88:0c:57:0c:aa:e8:75:ce:de:d6:57:83:03:c9:de:0a:94:3f:
88:0d:ac:c5:a2:be:be:81:1b:5f:32:00:c2:27:65:74:ed:30:
b9:11:de:93:58:5c:e2:a7:10:2f:4b:f1:a4:a7:4a:fd:43:af:
cb:ca:6a:00:37:72:43:66:a0:b0:71:cf:be:f3:4d:65:5f:d4:
02:01:a1:15:34:24:55:a0:8c:bc:c6:f1:ae:50:9d:23:87:da:
ab:95:43:2e:2b:03:01:e3:c1:7c:9c:8b:45:6f:6a:7d:28:23:
f5:36:68:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:32 2026 by rpki-client