Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
File: g-ZAPPcyIcEX6km8kjT-b0oR14A.mft (raw, json)
Hash identifier: BOe4b7aMnKR9hxf1mJGGOTSEFLUfutq/kqwySQ0EvZM=
Subject key identifier: 45:A5:A9:AF:BA:5E:26:9B:13:23:B3:F0:8D:C5:73:1A:66:D4:DF:73
Authority key identifier: 83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
Certificate issuer: /CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Certificate serial: 019D389BF0A776D6C213307011ACF52A3BF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
Manifest number: 1383
Signing time: Sun 29 Mar 2026 08:00:36 +0000
Manifest this update: Sun 29 Mar 2026 08:00:36 +0000
Manifest next update: Mon 30 Mar 2026 08:00:36 +0000
Files and hashes: 1: g-ZAPPcyIcEX6km8kjT-b0oR14A.crl (hash: ih83OdLBWuNjfjQeell7GljGwnpdhBazMVLrONd4BoE=)
2: kb5QsyYCWAXreqKDSNly_eUOWbs.roa (hash: R6T+O7UNp0e/weGB+lvgWkopq769WLtdhPDiexDGO0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:f0:a7:76:d6:c2:13:30:70:11:ac:f5:2a:3b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Validity
Not Before: Mar 29 08:00:36 2026 GMT
Not After : Mar 30 08:00:36 2026 GMT
Subject: CN=45a5a9afba5e269b1323b3f08dc5731a66d4df73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:c6:f9:60:9b:4f:11:7b:4c:e7:5d:c9:cd:
16:22:92:a6:28:20:e1:44:df:c1:db:e5:f4:b9:b2:
9c:c6:15:0e:e6:1d:b1:38:9e:2a:fc:dc:5a:e2:e3:
05:01:3d:ef:b8:9b:14:e9:9e:25:27:30:46:e0:71:
d3:6a:b5:01:c8:a4:bd:ee:eb:ca:a7:ac:02:a6:ba:
c5:0e:50:75:0a:3d:38:55:bb:bb:9f:4d:99:5b:fa:
da:39:74:18:1e:86:2c:f2:7a:3a:a3:fe:80:01:96:
50:d8:89:45:84:3e:0d:b0:09:a5:08:54:a1:44:3e:
0c:8a:30:b5:c1:e7:19:92:67:5b:84:ec:35:20:b2:
70:bc:26:6e:e4:9f:52:76:ee:38:8a:80:08:75:9a:
62:e5:99:6f:78:0a:b7:18:d9:a6:59:bc:10:02:83:
e3:f8:8b:2d:2b:9b:0f:ad:8f:5f:7a:a5:95:7f:06:
17:86:51:74:b3:ce:55:3e:c8:b2:d0:4c:e6:8b:fb:
fd:36:59:c8:c2:ae:37:61:d2:83:d2:25:cf:25:5b:
15:57:86:87:86:8b:d7:a3:ce:ff:41:b4:71:20:e3:
02:d1:34:b4:9f:26:67:a7:83:d0:8c:cb:db:43:50:
d3:05:76:86:3a:19:b0:9e:52:79:11:5d:dc:73:88:
db:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A5:A9:AF:BA:5E:26:9B:13:23:B3:F0:8D:C5:73:1A:66:D4:DF:73
X509v3 Authority Key Identifier:
keyid:83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:bb:28:54:9e:44:8f:eb:ee:0d:e2:f0:89:fc:ed:82:f1:50:
94:2b:82:10:a2:10:41:56:e3:3e:83:9e:a0:2e:75:be:a9:5a:
99:d0:26:ff:b5:b6:8b:ca:cc:87:bf:e0:40:9b:0d:f4:a1:fa:
81:cb:97:36:e7:7c:d5:d4:08:0c:fc:92:5a:05:b3:ec:f3:a3:
d5:41:c9:cc:43:b2:1b:08:40:99:6c:00:da:6a:49:40:e6:16:
35:31:f5:10:69:6e:02:46:36:5c:59:59:7b:21:f9:c6:c5:54:
53:88:6a:d5:d3:b3:63:dc:91:8a:53:cd:65:de:72:6b:eb:e3:
f3:ed:68:13:00:c4:2e:dd:c9:e5:36:5b:bb:04:a5:65:ac:01:
f7:0f:b3:2f:9e:45:5b:d5:e7:18:30:22:6a:8b:70:03:a5:8e:
9b:19:97:b4:4a:f8:2a:ba:a8:74:d6:67:ff:d5:02:18:d1:2a:
e1:80:e4:9b:27:71:97:d8:05:59:d0:bd:7c:38:0e:1c:af:86:
13:73:17:2b:2e:36:20:24:3c:63:49:96:e4:49:97:69:75:7b:
d7:bd:c2:16:8c:fe:49:f4:c2:1a:8b:be:d0:71:d9:e9:e0:56:
a4:56:d4:39:80:1d:e1:aa:34:4b:86:b7:47:36:68:91:07:97:
fe:35:c6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:37 2026 by rpki-client