Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
File: ZnKfnQeG9ooezVxakrw5LYaRl14.mft (raw, json)
Hash identifier: T4/MYO3vHwD1DvePz9jLyjI3RzwqXlIwJNT1kjjnDHc=
Subject key identifier: 8D:20:89:D1:86:5F:3C:B4:E1:D3:22:FF:54:D0:62:E9:D2:FA:CE:4A
Authority key identifier: 66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
Certificate issuer: /CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Certificate serial: 019D3977D9392EE0BC7FD099A1BF6A6D03C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
Manifest number: 1473
Signing time: Sun 29 Mar 2026 12:00:48 +0000
Manifest this update: Sun 29 Mar 2026 12:00:48 +0000
Manifest next update: Mon 30 Mar 2026 12:00:48 +0000
Files and hashes: 1: ZnKfnQeG9ooezVxakrw5LYaRl14.crl (hash: qoM5yN7KUR+bvpgB4ckJGOub5KaRwr3krjVbDzLIbIc=)
2: uoe5Gtg5RLHmca7orVX_kgMJ6LA.roa (hash: fAkGAUFUUGm9PtxJMnL3fGCs6QplpIcm9Vtk+9FgVDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:d9:39:2e:e0:bc:7f:d0:99:a1:bf:6a:6d:03:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Validity
Not Before: Mar 29 12:00:48 2026 GMT
Not After : Mar 30 12:00:48 2026 GMT
Subject: CN=8d2089d1865f3cb4e1d322ff54d062e9d2face4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:21:a3:eb:03:86:ec:29:a8:30:1a:d7:da:f6:
3f:4f:e9:ea:38:94:fa:17:d7:aa:5b:4b:d0:58:8b:
8f:75:77:2b:5c:86:aa:0a:48:15:c5:77:df:13:f1:
ac:c9:d9:4d:f9:4f:8d:08:d6:84:89:df:9f:d0:7a:
6c:30:83:12:44:39:ef:67:2c:02:df:66:3c:7c:80:
8b:50:56:ff:99:7d:d4:6d:61:7a:54:4a:0c:4c:8c:
23:1e:1b:f6:9e:2d:30:d7:cf:fc:56:83:72:03:f3:
3b:56:80:d2:0c:1f:15:8f:3a:ab:2f:de:08:28:d4:
1c:68:12:40:45:59:2a:1d:1b:16:fb:6b:78:e7:1c:
13:11:e6:91:d6:8a:71:eb:d4:80:ec:b8:ee:9e:56:
25:78:34:20:b9:db:a3:a2:e2:89:06:4e:23:54:a6:
bd:cb:82:7e:8f:55:ef:3a:32:93:e9:b0:04:91:e0:
d6:ce:36:ab:f3:c7:04:1c:95:fb:d4:50:0c:00:f7:
14:d3:18:bb:4c:2c:8c:5b:bd:9b:0c:33:8c:c7:35:
b2:38:14:61:ec:9f:26:26:e5:8d:38:21:85:9c:67:
e1:70:40:18:6e:e2:94:b1:6d:ad:2c:6c:fe:8f:90:
e0:0d:73:90:36:9d:fc:6d:94:0b:35:37:49:87:e3:
58:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:20:89:D1:86:5F:3C:B4:E1:D3:22:FF:54:D0:62:E9:D2:FA:CE:4A
X509v3 Authority Key Identifier:
keyid:66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9a:66:58:07:25:ed:2b:b0:b2:dc:f2:aa:1b:a6:6c:3e:a1:
21:39:6c:8a:ba:f3:65:d5:74:e5:11:23:88:56:0f:ef:4b:9e:
0c:40:45:01:a8:7c:3b:ec:01:6f:51:83:82:15:4b:f8:b2:8d:
dc:97:55:b1:c9:67:52:49:04:eb:18:9e:82:47:d7:fd:e9:74:
7c:cf:b3:4f:57:14:ec:b3:32:cd:d3:9a:1e:4c:d9:fa:8f:74:
70:8a:c2:a0:d0:b8:42:8e:6c:6c:00:16:e3:6a:cc:0b:4d:98:
21:5a:24:33:d6:49:10:ce:80:32:db:74:71:98:da:ce:1d:20:
d6:af:61:06:0b:43:c5:0a:34:ca:da:c8:8b:c6:c2:24:2d:dd:
ee:98:84:f9:c7:c7:27:88:04:1f:65:17:3d:b4:88:c3:bb:b5:
60:cf:52:a3:c3:97:79:c7:4d:28:b4:27:59:15:05:0d:ca:2b:
23:42:ac:6e:e0:6c:66:92:23:7b:fb:53:0f:a0:81:4f:f3:5a:
8b:d5:b1:4e:b3:1e:73:f8:fb:12:af:99:1f:cc:33:2a:a8:a6:
95:8d:e8:9e:3c:27:9a:d2:0c:ad:24:2d:61:bb:eb:71:03:1e:
af:ad:7e:8c:02:81:6f:95:54:f1:65:71:85:61:70:2a:e7:35:
62:07:d5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:25 2026 by rpki-client