Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
File: ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft (raw, json)
Hash identifier: DAslwOKgdhhUJPZsDiaEKvixKedMOV9ISKulVKR0gGo=
Subject key identifier: 7C:0E:1D:5E:47:B2:7F:EB:B9:CE:57:D8:FA:DA:EF:1F:0E:9E:8C:FC
Authority key identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
Certificate issuer: /CN=66501165645aa80dcba315885cf374acb6d21305
Certificate serial: 019CE2FE13D2FA4AC7D3D49688E4D78E9B63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
Manifest number: 0C77
Signing time: Thu 12 Mar 2026 17:00:27 +0000
Manifest this update: Thu 12 Mar 2026 17:00:27 +0000
Manifest next update: Fri 13 Mar 2026 17:00:27 +0000
Files and hashes: 1: ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl (hash: 5CDkmYeRCso0ZCPc18BClKbqsdvIXcFWBRjPl/p7pfM=)
2: bb1B8Fy2_C2bqbD9N4RRbHoFAbA.roa (hash: l0MLPIfI2aVoXdO47UK4RJDxoIk9MxZKupnuOkrWUdk=)
3: dcTwMDgwodHIo-S4yL4e4K41UJY.roa (hash: eMv2nsim1YJjG+0E2GpZFtw7b5BwXygPOnj8sq0+Gcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:fe:13:d2:fa:4a:c7:d3:d4:96:88:e4:d7:8e:9b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66501165645aa80dcba315885cf374acb6d21305
Validity
Not Before: Mar 12 17:00:27 2026 GMT
Not After : Mar 13 17:00:27 2026 GMT
Subject: CN=7c0e1d5e47b27febb9ce57d8fadaef1f0e9e8cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c8:20:e0:c5:83:98:29:12:7f:54:a3:1d:94:
21:85:76:53:61:d1:ed:3a:f9:1c:f0:a3:2d:2d:b4:
69:f4:5a:62:2c:29:ef:3e:12:f2:4b:44:aa:7a:f5:
fc:3f:a6:56:c3:8b:4d:81:1d:1d:ae:0c:24:b8:1a:
79:ff:47:83:3b:7a:5e:5b:9c:9d:28:72:1d:00:3c:
4e:65:42:96:ea:b6:e1:44:19:16:d3:e7:0c:d3:33:
7b:2a:55:dd:c8:fb:15:d3:cd:05:e5:46:6e:d3:82:
45:f9:6a:19:15:54:0f:fe:a7:06:f3:43:ea:65:2c:
70:de:b0:6a:87:28:d9:15:ca:1f:39:73:95:0e:d1:
2b:dc:a6:bc:7a:30:18:62:ae:1e:ad:78:88:36:e5:
0e:2f:29:b7:78:41:e6:94:ea:d2:d5:fa:82:f2:28:
12:2d:aa:61:16:33:89:d1:46:8a:9c:ed:e6:2d:17:
87:5a:7c:9a:46:d9:bd:ec:2f:0a:8e:ab:6c:41:ec:
76:5c:89:18:cd:9f:30:40:d7:b5:87:c9:ad:b1:3e:
e9:11:25:11:47:e1:6a:36:13:6b:a5:ed:8b:f1:59:
0b:fe:67:fe:70:7e:cd:d0:0e:1a:b2:9b:34:4a:7b:
b3:f7:b7:f7:85:c3:76:f1:45:db:77:29:75:0d:e5:
8d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0E:1D:5E:47:B2:7F:EB:B9:CE:57:D8:FA:DA:EF:1F:0E:9E:8C:FC
X509v3 Authority Key Identifier:
keyid:66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:2e:f1:32:f4:7d:09:b4:59:f8:55:d2:14:b9:02:6c:81:dd:
5e:d9:20:92:08:8e:20:a5:03:ec:05:18:52:81:61:f9:cc:d3:
9a:8b:92:a0:d9:68:e1:e0:56:89:87:96:e4:8b:03:98:4b:69:
1d:58:92:5d:fa:13:4c:68:ac:6f:cb:32:7d:53:14:ba:4c:36:
54:d0:8a:b7:24:05:12:5b:4c:4f:72:64:38:6c:90:26:e2:a5:
8e:90:fe:bb:8b:08:30:90:8d:6d:40:db:52:8a:d8:f0:c7:1e:
a0:d2:95:fe:54:bf:d7:29:a7:07:ff:31:df:fc:a9:9f:f2:a3:
04:9b:68:8a:d5:fa:73:04:f8:17:a0:39:97:0e:cf:6e:13:85:
9b:c4:b8:50:45:74:ae:a0:d0:a8:04:45:44:cd:d5:01:6c:00:
6c:7a:b5:4e:99:50:24:9e:d3:0b:91:b6:4d:3d:dd:81:5b:7c:
50:18:ac:05:15:d3:42:a1:77:75:a2:39:27:d0:0e:87:92:05:
73:8b:44:4c:da:f4:1a:40:35:3e:47:a6:d2:12:2f:85:70:24:
f5:0d:f4:21:dd:ed:9e:e8:ef:6b:54:5f:d2:60:97:94:b7:a5:
58:2b:e3:ac:05:6c:5f:e6:91:7f:c2:06:23:f1:f9:93:71:0f:
29:0b:b7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 02:06:27 2026 by rpki-client