Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
File: Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft (raw, json)
Hash identifier: FAPITXRw/6ftZrj6SD7kRhujmDLzjZTpJqqDBxYIyC8=
Subject key identifier: 38:25:B3:E6:9E:77:8B:73:23:34:FB:FE:27:CB:25:64:82:DE:A6:44
Authority key identifier: 66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F
Certificate issuer: /CN=6696fa3fe40cf770851c83adcafafb7a4107678f
Certificate serial: 019D389BBA93786A93EF4C916A95C840C522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
Manifest number: 06B5
Signing time: Sun 29 Mar 2026 08:00:23 +0000
Manifest this update: Sun 29 Mar 2026 08:00:23 +0000
Manifest next update: Mon 30 Mar 2026 08:00:23 +0000
Files and hashes: 1: Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl (hash: 8/EARtm8OENAWY4Rb1PBYcM18pIJKCVg0TuW4L6jbyY=)
2: gm9LYNpC-yBIIMfeArMhuzuO42Y.roa (hash: OAVQXclGqF1DzCgaRJYfwJT9ofhZUBGQrn1q3PHPsY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ba:93:78:6a:93:ef:4c:91:6a:95:c8:40:c5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6696fa3fe40cf770851c83adcafafb7a4107678f
Validity
Not Before: Mar 29 08:00:23 2026 GMT
Not After : Mar 30 08:00:23 2026 GMT
Subject: CN=3825b3e69e778b732334fbfe27cb256482dea644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8a:f1:87:e8:f7:13:45:e5:f2:24:e4:05:2e:
77:27:be:99:63:5f:73:b2:c3:c1:d9:cc:26:63:4b:
2e:e8:c0:f8:be:61:69:2c:93:d3:2c:52:3d:c2:31:
dd:be:59:27:19:44:eb:fa:c6:61:23:1b:b2:19:ad:
93:5c:71:61:a6:f9:2b:c6:17:09:36:3a:26:a5:64:
9a:b8:7c:b0:67:dd:6e:d8:16:c3:a4:99:64:b8:66:
75:4e:98:61:68:4f:05:24:73:fc:30:12:dd:3e:21:
3e:84:ca:e9:40:90:d9:f9:78:d0:ff:dc:15:ef:42:
02:bb:fb:9d:08:90:56:ae:6b:db:a6:7e:82:b6:b2:
d1:4c:f3:19:58:7f:78:17:0d:e2:c1:02:a3:c5:f0:
f3:b7:0b:ed:c8:cc:d7:b8:89:15:a9:96:af:5f:43:
9e:e0:91:4b:c5:4f:b4:f9:4a:24:a8:1f:b5:b7:57:
57:dc:f5:28:84:77:a0:c3:88:d7:06:e6:6a:b6:bf:
f4:6a:69:dd:89:74:f0:68:23:01:f1:14:c1:f7:98:
9e:5c:b1:57:60:22:c2:2c:44:0d:1f:a9:1f:52:73:
28:58:11:23:53:33:a3:f8:5e:02:2c:c0:85:db:ba:
b7:51:d2:6f:ed:4e:4c:68:75:84:8d:40:70:6b:59:
03:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:25:B3:E6:9E:77:8B:73:23:34:FB:FE:27:CB:25:64:82:DE:A6:44
X509v3 Authority Key Identifier:
keyid:66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:c0:c7:ad:36:c3:45:2e:d5:bf:fc:10:09:29:56:2f:27:1d:
e6:de:95:6b:4d:38:93:a9:04:b7:b8:07:56:1c:0a:be:60:f9:
1a:1d:dd:74:c4:de:38:8d:27:3b:11:cc:ff:3e:c5:a1:02:b0:
e0:dc:00:c6:39:78:8d:61:2d:cf:f5:33:84:c3:d6:c7:78:74:
cd:2c:5c:a5:3a:4b:1e:c7:f6:b3:6a:32:26:d6:2c:dd:83:3c:
a2:f6:c9:50:76:05:e5:43:ef:97:be:35:02:a3:91:d0:92:b1:
32:53:ea:45:c4:66:c8:b5:75:5d:3b:b8:5a:90:75:52:d2:9a:
bf:2e:b5:14:7c:57:5b:cd:49:b7:9f:36:1d:7b:ce:c1:68:1d:
80:09:04:a6:d9:d3:a1:c3:31:7a:5b:79:d6:18:d2:8a:ef:96:
53:cc:54:4a:b2:90:55:f0:5f:56:86:2f:43:ac:0c:fc:6e:c2:
b4:99:88:b9:ef:b0:cb:49:14:ed:da:1f:7f:32:36:78:c1:a1:
67:4d:9c:c1:14:d9:ef:6d:a6:82:9d:09:29:b5:fb:55:e5:b9:
2a:ee:bd:cb:36:ed:be:73:46:9b:ea:cf:17:9d:cd:d9:bb:38:
7a:02:61:20:6e:96:e6:21:6f:8e:36:ac:98:39:7a:ff:72:8e:
49:2e:67:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:48 2026 by rpki-client